Secure USB Flash Drives

FIPS Certification

The Federal Information Processing Standards (FIPS) are U.S. government standards for information technology and computer security. The FIPS program is run by the National Institute of Standards (NIST). NIST FIPS 140 is the cryptography standard program required by the US federal government for protection of sensitive data. All products using cryptography in use by civilian and military US federal agencies must comply with FIPS 140. The current FIPS version is 140-2.

Obtaining FIPS 140 validation requires a rigorous testing process by an accredited testing laboratory. The results are then reviewed by the National Institute of Standards and Technology (NIST), which issues a FIPS 140 validation certificate. Visit the website.

Product Name DT4000 G2 S1000 W700 D300
Firmware Version 3.05 3.0.5 3.3.3, 3.0.5 3.05
FIPS certificate #2307 #2320 #2183 #2371
Security Policy #2307 #2320 #2183 #2371
FIPS AES certificate #2838 #1412, #2559 #1412, #2559 #2838
FIPS SHS certificate #2379 #1282, #2158 #1282, #2158 #2379
FIPS RSA certificate #1480 #688, #1311 #688, #1311 #1480
FIPS DRBG certificate #494 #494
FIPS RNG certificate #774 #774
FIPS HMAC certificate #1779 #1577, #1579 #1577, #1579 #1779
Durability Compliance
Conforms to IEC 60529 IPX8 (Waterproof)

As defined in international standard IEC 60529, The IP Code (International Protection Rating) classifies the degrees of protection provided against the intrusion of solid objects, dust, accidental contact, and water in electrical enclosures. The standard aims to provide users more detailed information on durability of products. Kingston devices are also waterproof according to IEC 60529 IPX8 standard.

Radio Emissions Compliance

Kingston devices are tested and certified according to global radio emission standards.

Added Value
Secure Customisation Programme

This programme offers the options most frequently requested by customers, including serial numbering, dual password and custom logos. With a minimum order of 50 pieces, the programme delivers precisely what your organisation needs.
Learn more

Anti-Virus Protection
ESET Anti-Virus

Protect from WannaCry variants. For added peace of mind, anti-virus protection is available on DataTraveler Vault Privacy 3.0. Powered by ESET NOD32® Anti-Virus Engine software, it’s easy to deploy, with no installation required. Protect from malware/ransomware, viruses, spyware, Trojans and other Internet-borne threats.
Learn more

Management Solutions
Management Solutions

Protect from WannaCry variants. Options are available to let you or your IT experts manage drives centrally to meet compliance requirements, remotely reset passwords, manage device inventories, enforce policies and more. Available through our partnership with DataLocker. Solutions include IronKey Enterprise management for IronKey drives and SafeConsole management for DataTraveler encrypted drives.
Learn more

Learn More
Government

Organisations are tasked with the challenge of complying with an ever-increasing list of legislative requirements and protocols designed to protect sensitive data in transit and at rest, including:

  • OMB M06-16 mandate
  • Federal Desktop Core Configuration (FDCC) mandates
  • Director of Central Intelligence Directive (CDID) 6/3
  • General Data Protection Regulation, designed to protect sensitive data at rest and in transit

Non-compliance can lead to loss of public trust and strict oversight or costly class-action lawsuits. For companies that work with government agencies, non-compliance can disqualify them from working on government contracts.

Government agencies can use Kingston® IronKeyTM and DataTraveler® encrypted USB Flash drives to access data from anywhere. Law enforcement personnel can review and update case files in the field, while scientists, analysts and forecasters can access data sets from any location with a PC or tablet.

With these trusted Flash drives, contractors can work at agency offices while still having trusted access to data and agencies can maintain operations during disasters by putting critical data in the hands of key personnel.

For easy remote management, IT professionals can enforce access and use policies from a central console. IT can demonstrate best efforts to comply with new and unsettled regulations, including the General Data Protection Regulation.

Health Care

Healthcare agencies must comply with data security mandates such as:

  • Health Insurance Portability and Accountability Act (HIPAA)
  • Health Information Technology for Economic and Clinical Health (HITECH) Act
  • Centers for Medicare & Medicaid Services (CMS) security requirements for Electronic Health Records (EHRs)
  • Evolving ASTM Standards for Medical Device Interoperability

It is vital for hospitals, healthcare providers, insurers and pharmaceutical companies to take the risk out of mobility and to simplify HIPPA and GDPR audits.

With Kingston IronKey and DataTraveler Encrypted USB drives, doctors can securely and easily access patient data from anywhere. Temporary medical and pharmaceutical personnel can gain trusted access to applications and records when on assignment or working from home.
Clinical trial contributors, managers and auditors can securely enter or review trial data at any location with a PC or tablet, while insurance claims adjusters, examiners and investigators can have unlimited access to records.
Organisations can provide their key personnel with critical data to maintain operations if severe weather or other disasters strike.

The IT department can enforce access and use policies from a central console and demonstrate best efforts to comply with new and unsettled regulations, including the GDPR.

Finance

Financial services companies are bound to comply with an expanding array of data security regulations and standards, including:

  • Gramm-Leach-Bliley Act (GLBA)
  • Sarbanes-Oxley Act (SOX)
  • Payment Card Industry Data Security Standard (PCI DSS)
  • State Financial Data Privacy Acts
  • European Union Data Protection Directive (EUDPD)

The cost of failing to comply with these regulations is significantly higher than the cost of compliance. And failure to comply can impact your business if employees cannot work efficiently.

Kingston IronKey and DataTraveler Encrypted USB drives can help financial teleworkers safely access data and applications from home. Banks, insurers and others can equip contractors to work in the field without investing in notebooks or tablets.

Auditors can gain trusted access to sensitive data when on assignment or when working from home. Claims adjusters, examiners and investigators can have access to data and applications from the field.

In case of severe weather or other disasters, organisations can provide key personnel with access to critical data to maintain operations and the IT department can enforce access and use policies from a central console.

Data Security Centre: Technical Papers and Resources
Major Recent Example of an Unencrypted USB breach
USB Breach
Case in point, Heathrow Airport in London (October 30, 2017) uses Unencrypted USB Drives for its non-cloud storage. Unfortunately, they were not standardized on Encrypted USB drives.
Read article
Using and promoting encrypted USB Flash drives in your organisation

Get eight useful tips to help your organisation keep confidential information confidential and to comply with regulations.
Read article

Neutralising the USB Threat (in English only)
Neutralising the USB Threat
Getting a handle on the slipperiest drives. Do your employees and visitors who connect to your network ever use USB drives?
Read whitepaper
Hardware vs. Software Encryption

See a side-by-side comparison of these two popular data encryption methods.
Read article

Moving beyond compliance: Why “secure enough” isn’t enough
Moving beyond compliance:  Why “secure enough” isn’t enough

Understand the difference between compliance and protection and what each means for your organization’s USB data storage strategy.
Read brief

EU General Data Protection Regulation (EU GDPR) Effective: May 2018
EU General Data Protection Regulation (EU GDPR)  Effective: May 2018

Applies to every organization that processes personal data of EU citizens, will take full effect in May 2018. Organizations to implement and ensure a level of security appropriate to the risk, including…encryption of personal data" (Article 32, Security of processing)
Learn more

USB Alert: Locking Down Your Data (in English only)
USB Alert: Locking Down Your Data
USB drives can turn up anywhere - putting data at risk. How can IT deal with these risks, without completely forbidding USB drive usage and all its convenience?
Read article
XTS Encryption

All Kingston encrypted drives use XTS encryption, which provides greater data protection over other block cipher modes such as CBC and ECB.
Read article

Encrypted Comparison Chart

View the line-up of Kingston’s DataTraveler and IronKey Encrypted drives to see which is right for you.
View chart

Changing Password Policies for IronKey and DataLocker Drives (in English only)
Changing Password Policies for IronKey and DataLocker Drives (in English only)

A full range of password policies can be changed remotely, using IronKey EMS or SafeConsole.
Watch Video

New York Department of Financial Services (NYDFS - 23 NYCRR 500) Effective: February 2018
New York Department of Financial Services (NYDFS - 23 NYCRR 500) Effective: February 2018

Applies to every organization in New York that processes corporate / personal data. The proposal calls for organizations to encrypt sensitive data both in-transit and at-rest. (Section 500.15 Encryption of Nonpublic Information.)
Learn more

State of USB Drive Security

Employees can be negligent when using drives, thus putting sensitive data at risk. Establishing and enforcing policies that define the acceptable use of drives can help.
Read brief

Protect against BadUSB

Kingston DataTraveler and IronKey drives use digitally signed firmware which makes them immune to changes to firmware that can allow a USB to become a host agent.
Read brief

Resetting Your Password on IronKey and DataLocker drives (in English only)
Resetting Your Password on IronKey and DataLocker drives (in English only)

Passwords can be reset remotely or in person with IronKey EMS or SafeConsole.
Watch Video

Certifications
FIPS Validation

Issued by the National Institute of Standards and Technology (NIST), FIPS validation entails coordinated requirements and standards for cryptography modules. By fulfilling the FIPS standards, Kingston and IronKey encrypted drives assure purchasers that they meet the criteria assigned.

Learn more

FIPS Certification
        Back To Top