Keep data safe with the 32GB Aegis Secure Key 3NXC Encrypted USB Type-C Flash Drive from Apricorn. Designed for use in data-sensitive environments, this USB 3.2 Gen 1 Type-C encrypted flash drive uses the same cryptography standard as the federal government. Using hardware-based encryption, this flash drive incorporates brute force defenses, as well as an unattended auto lock feature and a self-destruct PIN. Featuring separate user and admin roles and two read-only modes, this drive is easy to deploy thanks to setup software, programmable PIN lengths, and a drive reset feature.

Built to handle adverse conditions, the Aegis Secure Key is IP68 dust and water resistant, while the extruded aluminum body is crush resistant. Furthermore, the tamper-evident design prevents the drive from being physically compromised. An internal battery allows users to enter their PIN on the wear-resistant keypad before plugging it in, at which point the drive automatically switches over to bus power. This device is compatible with Windows, Mac, Linux, Android, Symbian, and any powered USB OS with a storage file system.

32GB Storage Capacity    USB 3.2 Gen 1 Type-C Connection    FIPS 140-2 Level 3 Validation Pending    Hardware-Based Encryption    Bus Powered & Internal Battery    Separate User & Admin Profiles    Two Read-Only Modes    Unattended Auto Lock    IP68 Dust & Water Resistant    Wear-Resistant Keypad

Software-free, this drive features 100% hardware-based 256-bit AES XTS encryption, onboard keypad PIN authentication, and high-speed USB 3.2 Gen 1 data transfer speeds. All data is encrypted on the fly and the device's PINs and data remain encrypted while the drive is at rest. Cross-platform compatible and OS agnostic, the Aegis Secure Key is compatible with Windows, Linux, Mac, Android, Chrome, embedded systems, and equipment possessing a powered USB port and storage file system. All internal components are protected from physical tampering with a layer of hardened epoxy, and locked-down firmware brings immunity to malware attacks such as BadUSB.

This Windows-based app allows for the quick setup of multiple devices at once. Create custom profiles and mass-configure multiple devices in a matter of seconds.

The Aegis Secure Key supports independent Admin and User PINs. The Admin mode controls the universal programmable settings of the device and can only be accessed with the Admin PIN. The User mode is limited to basic external drive functions like read /write, unlock / lock, etc. The data on the drive can also be accessed with the Admin PIN in the User mode.

Unlocked by entering a PIN on the keypad, this drive does not rely on the host computer's keyboard. Until the device is unlocked via its keypad, it remains invisible to the host. The embedded keypad circumvents hardware- and software-based key-logging attempts to capture passwords by excluding the host system from the authentication process. Polymer-coated buttons are wear-resistant and designed to not reveal commonly used buttons.

Out of the box, there are no factory pre-set default PINs. In order to set up and use the drive, a unique PIN must first be established by the Admin, from within the Admin mode.

Once a device is configured by the Admin, it can then be deployed in a state in which the User must first establish his or her own User PIN before the drive can be accessed or used.

In the event that a User PIN is forgotten, Recovery PINs can be programmed into the device to permit access to the drive's data by creating a new state of User Forced Enrollment while the Admin PIN and the drive's data remain intact. Once a replacement User PIN is generated, access to the drive and its contents is restored to the user.

These modes can be employed in situations that require the drive's contents to be kept intact and unaltered for later examination. A universal read-only mode is set by the admin from within the admin mode and can't be modified or disabled by anyone but the admin, while a second read-only mode can be set and disabled by a user but can also be enabled or disabled by the admin as well.

Designated by the Admin, PIN lengths can feature a minimum of 7 or maximum of 16 characters. The longer the PIN, the more secure the data on the device becomes. For example, the odds of brute force success go from 1 in 10 million with a 7-digit PIN to 1 in 100 million with an 8-digit PIN. In cases where the User sets up his or her own PIN from User Forced Enrollment, the Admin can set an enhanced User password length requirement as part of the overall security policy.

All Aegis Secure Drives are unlocked or authenticated by entering a PIN on their own onboard keypad. Since the PIN is not entered using the host computer's keyboard, they are not vulnerable to software or hardware-based key-loggers or software-based brute force attacks. However, if the device comes under a physical brute force attack, your data is protected with a programmable brute force hack defense mechanism. Users can program the drive to crypto-erase after a designated number of failed attempts, ranging from 4 to 20 attempts. If the programmed number of consecutive incorrect password entries has been attempted, the device will delete its own encryption key and destroy the ability to access its stored data.

The PIN Guard detects inadvertent button presses and puts the device back into sleep mode to prevent battery drainage and false brute force attempt tallies.

Easily adapt the drive to embedded equipment and operating systems that will only recognize a Fixed Disk or Removable Media for removable storage. Windows, Mac, and Linux all deal with mass storage devices differently depending on whether they report themselves to the host as Removable Media or as Fixed Disks. Some applications or embedded systems may allow one type but not the other.

All Aegis Secure Drives will automatically lock once disconnected from a computer's USB port or the power to that USB port is interrupted, or after a preprogrammed period of inactivity.

Designated for specific cases in which the key needs to remain unlocked through USB port re-enumeration, the lock override allows for use during reboot or with a virtual machine.

Drive Reset clears both the User and Admin PINs, destroys the data, creates a new randomly generated encryption key, and allows the drive to be reused repeatedly, with an infinite number of randomly generated encryption keys, allowing the admin and or user to reset the drive as often as needed.

The last line of defense for data security when the device's physical security is at risk, the self-destruct PIN defends against these physically compromising situations by erasing the key's contents, leaving it in normal working order and appearing as though it is yet to be deployed.

This LED indicator visually confirms button presses, intended to prevent mis-keyed PINs.

Related Questions and Answers

Q: 1. I understand the Aegis Configurator only works on Windows but does the flashdrive itself have any problems working with Mac computers?

A: This device is compatible with Windows, Mac, Linux, Android, Symbian, and any powered USB OS with a storage file system.

Q: 2. Does this have an activity/drive light/led?

A: No, it doesnt. Its also not as fast as claimed, I used several of these flash drives to transfer video clips, the transfer speeds were about 13mb/s. way below, what its claimed on the specifications (I used an usb3 connection).

Q: 3. Does this have a battery that must be maintained?

A: This item is bus powered so no battery is required.

Q: 4. What is type a

A: Type A is the standard size USB socket that is used by desktop and notebook computers. Types B & C are micro versions.

Q: 5. What is the maximum write speed?

A: As per the manufacturer " 16GB: Write faster than standard USB 2.0 drives (4MB/s); " But no official speed has been published

Q: 6. Is this product IP56 certified?

A: No, this Apricorn 500GB Aegis Fortress L3 FIPS 140-2 Level 3 Encrypted Portable Hard Drive is not IP56 certified. https://bit.ly/3Q9zYb0

Q: 7. How do I unlock it?

A: To unlock the drive, press the unlock button. You should see the red light turn on. Enter your pin, and press the unlock button again. The light will turn flash green if the pin was correctly entered. You have 30 seconds to insert the unlocked drive into a computer. If you dont, the drive will automatically relock its self.

Q: 8. Does this have a battery? Meaning, can it be put away for long periods without fear of a failure due to battery depletion?

A: There is no battery. The power comes from connecting to a computer.

Q: 9. After I put in my security pin do I press anything else?

A: After entering the PIN, the Unlock button should be pressed. Further instructions can be found in the included manual.

Q: 10. Can this drive be formatted as 'HFS+' to use on an iMac?

A: Yes, this drive should be able to be formatted in disc utility on your Mac computer