Kingston Technology IronKey 128GB D500S FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit Hardware Encryption
Kingston IronKey™ D500S USB Flash Drive is a best-in-class, military-grade and CMMC-compliant security to protect confidential data. It’s FIPS 140-3 Level 3 validated by NIST for enhanced security and attack protection. It features a rugged zinc casing that is waterproof*, dustproof*, shock and vibration resistant**, crush-resistant and epoxy-filled. Designed and assembled by Kingston in California, the D500S is the world’s first FIPS 140-3 Level 3 validated USB Flash Drive with a TAA-compliant trusted supply chain.

The Kingston IronKey™ D500S USB Flash Drive is best-in-class, offering military-grade, hardware-based XTS-AES 256-bit encryption that makes IronKey the most trusted brand for protecting secret-level information with CMMC compliance. It’s FIPS 140-3 Level 3 validated, with new enhancements from NIST requiring secure microprocessor upgrades for enhanced security and attack protection for government and military applications. Governments and enterprises need to implement new drive policies with the latest NIST-defined security standard. Data is encrypted and decrypted on the D500S without leaving a trace on the host system. Designed and assembled by Kingston in California, the D500S is the world’s first FIPS 140-3 Level 3 validated USB Flash Drive with a TAA-compliant trusted supply chain. All critical drive components are sourced directly by Kingston from TAA compliant and trusted vendors, and warehoused in the secure Kingston Manufacturing Center in California, USA, ensuring that drive assembly occurs in strictly controlled, technically supervised processes.

It features a rugged zinc casing that is military-standard waterproof*, dustproof*, shock and vibration resistant** as well as crush-resistant and epoxy-filled for physical tamper protection of internal components.

The IronKey D500S is an essential pillar in meeting Data Loss Prevention (DLP) best practices, providing top-tier military-grade security for compliance with data encryption mandates and regulations such as CMMC, SOC2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX and CCPA along with TAA. The D500S delivers more features than any other USB Flash Drive in its class, making it an industry-leading security solution for protecting high-value, confidential data.

The D500S is equipped with digitally signed firmware, making it immune to BadUSB malware, which adds another layer of security. Brute-force password attack protection is always on to prevent password guessing, wiping the drive if too many invalid password attempts are made.

It offers a multi-password option for accessing data, supporting up to three passwords: Admin, User and One-Time Recovery. The admin can reset a user password and also activate a One-Time Recovery password to regain access if the user password is forgotten.

The D500S supports the traditional complex password or passphrase mode***. Passphrases can be between 10 and 128 characters in length. The FBI recommends multi-word passphrases of 15 or more characters that are stronger and easier to remember than complex passwords.****
The D500S is an industry-first in offering two hidden partitions, which allows the administrator to create two custom-sized secure partitions for the admin and user. When using untrusted systems or sharing the drive, hidden file stores keep their data safe and invisible unless properly accessed.

Using a special key sequence, crypto-erase will cryptographically erase the USB Flash Drive, permanently destroying data and resetting the USB Flash Drive to prevent unauthorised access in compromised situations. By destroying and regenerating the AES 256-bit encryption keys and deleting all data associated with previous keys, the drive ensures that CUI cannot be recovered and supports organisations in meeting NIST SP 800-88 and NIST SP 800-171.

To help with keyboard issues, all password entries include an eye icon, which will show the typed password to avoid typos. A virtual keyboard is also available in English***** to protect password entry from keyloggers and screenloggers.

The D500S also supports two levels of Read-Only (Write Protection) modes. Both the admin and user can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The admin can also set a global Write Protection mode, which puts the drive into Read-Only mode until reset.
Plus, it offers fast dual-channel performance without sacrificing security. The USB Flash Drive includes a unique 8-digit electronic serial number that matches the number engraved on the casing, as well as a scannable barcode for USB Flash Drive deployment or audit purposes.

The D500S offers fully customisable features and functions to meet your organisation’s specific needs.

Military-grade Hardware Encrypted USB Flash Drive
FIPS 140-3 Level 3 Validated Certificate No. 5029 XTS-AES 256-bit encryption with secure microprocessor upgrades for enhanced protection. Built-in protection from BadUSB, brute-force attacks and physical tampering of internal components.

Trusted Supply Chain for Compliance
All critical drive components were sourced directly by Kingston from trusted TAA-compliant vendors, warehoused and assembled in the secure Kingston Manufacturing Center in California, USA, ensuring that the USB Flash Drive is assembled in the USA in strictly controlled, technically supervised processes.

Multi-Password Option for Data Recovery
Enable Admin, User and One-Time Recovery passwords. Admin can reset a user password and create a One-Time Recovery password to help user regain access to data when the user password has been forgotten.

Complex or Passphrase Mode
Choose between Complex or Passphrase password mode. Passphrases can be full sentences or multiple words only you remember – between 10 to 128 characters in length. An eye icon for all password entries helps to avoid typos.

Industry-First with Two Hidden Partitions
Admin can create two custom-sized hidden dual partitions for the admin and user for hidden file stores to keep data safe and invisible unless properly accessed. Two hidden partitions can offer additional security on untrusted systems or when sharing is needed.

Crypto-Erase Password for Compromised Situations
Crypto-erase password destroys the encryption key and permanently deletes all data, resetting the USB Flash Drive.

Global & Session-Based Read-Only (Write Protection) Modes
Both admin and user can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a global Write Protection mode, which puts the drive into Read-Only mode until reset.

Rugged Casing to the Most Stringent IronKey Standards
Crush-resistant zinc casing with epoxy fill for physical tamper protection. MIL-STD-810F certified with mechanical shock, vibration and drop tests. IP67 certified for waterproof* and dustproof*.

Unique 8-Digit SNr + Barcode for Tracking
Time-saving barcode read or scan during both deployment and return of a drive and all mechanical hardware audits.

Fully Customisable
Enable, disable, modify drive functions and profiles. Company logo.