Kingston Technology IronKey 16GB D500S FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit Hardware Encryption
Kingston IronKey™ D500S USB Flash Drive is a best-in-class, military-grade and CMMC-compliant security solution for protecting sensitive data. It is FIPS 140-3 Level 3 validated by NIST for enhanced security and attack protection. It features a ruggedized zinc casing that is waterproof*, dustproof*, shock and vibration resistant**, crush-resistant and epoxy-filled. Designed and assembled by Kingston in California, D500S is the world’s first FIPS 140-3 Level 3 Validated USB drive with a TAA compliant trusted supply chain.

The Kingston IronKey™ D500S USB Flash Drive provides best-in-class, military-grade, hardware-based XTS-AES 256-bit encryption making IronKey the most trusted brand for protecting classified information with CMMC compliance. It is FIPS 140-3 Level 3 validated, with new enhancements from NIST, under which secure microprocessor upgrades are required for enhanced security and attack protection for government and military applications. Governments and businesses need to adopt new drive policies with the latest NIST-defined security standard. Data is encrypted and decrypted on the D500S without leaving any traces on the host system. Designed and assembled by Kingston in California, D500S is the world’s first FIPS 140-3 Level 3 Validated USB drive with a TAA compliant trusted supply chain. All critical drive components are sourced by Kingston directly from TAA compliant and trusted vendors, and stored at Kingston’s secured Manufacturing Center in California, USA, ensuring that drive assembly takes place in strictly controlled, technically supervised processes.

It features a ruggedized zinc casing that is waterproof*, dustproof*, military-grade shock and vibration resistant**, crush-resistant and epoxy-filled to protect the internal components from tampering attempts.

The IronKey D500S is an essential pillar in meeting Data Loss Prevention (DLP) best practices, offering the highest military-grade security to help meet data encryption laws and regulations such as CMMC, SOC2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX and CCPA along with TAA. The D500S offers more features than any other USB drive in its class, making it an industry-leading security solution for protecting high-value, sensitive data.

The D500S is equipped with digitally signed firmware, making it immune to BadUSB malware for added security. Brute force password attack protection is always on, to prevent password guessing, and wipes the drive if too many invalid password attempts are made.

It offers a multi-password option for accessing data, supporting up to three passwords: Admin, User and One-Time Recovery. The administrator can reset a user password and also enable a one-time recovery password to restore access if the user password is forgotten.

The D500S supports the traditional Complex Password or Passphrase Mode***. Passphrases can be between 10 and 128 characters long. The FBI recommends multi-word passphrases of 15 characters or more, which are stronger and easier to remember than complex passwords.****
The D500S offers the industry-first option of two hidden partitions, which allows the administrator to create two secure custom-sized partitions for the administrator and the user. When used on untrusted systems or when sharing the drive, the hidden file stores keep their data secure and invisible unless accessed properly.

With a dedicated key sequence, you can initiate crypto-erase, which cryptographically erases the USB drive, permanently destroying data and resetting the USB drive to prevent unauthorized access in compromising situations. By destroying and regenerating the AES 256-bit encryption keys and erasing all data linked to previous keys, the drive ensures that CUI cannot be recovered and helps organizations comply with NIST SP 800-88 and NIST SP 800-171.

To assist with keyboard issues, all password entry includes an eye icon that shows the entered password to avoid typing errors. A virtual keyboard is also available in English***** to protect password entry from keyloggers and screenloggers.

The D500S also supports two levels of write protection (read-only) modes. Both the administrator and the user can set a session-based read-only mode to protect the drive from malware on untrusted systems. The administrator can also set a global write protection mode, which places the drive in read-only mode until it is reset.
It also offers fast dual-channel performance without compromising security. The USB drive includes a unique 8-digit electronic serial number, which matches the number engraved on the casing, as well as a scannable barcode for USB drive deployment or audit purposes.

The D500S offers fully customizable features and functions to meet the specific needs of your organization.

Military-grade hardware encrypted USB drive
FIPS 140-3 Level 3 validated, Certificate No. 5029 XTS-AES 256-bit encryption with secure microprocessor upgrades for even more protection. Integrated protection against BadUSB, brute-force attacks and physical tampering of internal components.

Trusted Supply Chain for Compliance
All critical drive components were sourced by Kingston directly from trusted, TAA compliant vendors and stored and assembled at Kingston’s secured Manufacturing Center in California. This ensures that the USB drive is assembled in the USA in strictly controlled, technically supervised processes.

Multi-Password Option for Data Recovery
Enable Administrator, User and One-Time Recovery passwords. The administrator can reset a user password and create a one-time recovery password to allow the user to regain access to data if the user password has been forgotten.

Complex or Passphrase Mode
Choose between Complex or Passphrase password mode. Passphrases can be entire sentences or multiple words that only you remember – between 10 and 128 characters long. An eye icon for all entered passwords helps to avoid typing errors.

Industry's First Dual Hidden Partition Option
The administrator can create two custom-sized hidden dual partitions for the administrator and the user for hidden file storage to keep data secure and invisible unless accessed properly. Two hidden partitions can provide additional security on untrusted systems or when sharing is required.

Crypto-Erase Password for Compromising Situations
The Crypto-Erase password deletes the encryption key and permanently deletes all data by resetting the USB drive.

Global and Session-Based Read-Only Modes (Write Protection)
Both the administrator and the user can set a session-based read-only mode to protect the drive from malware on untrusted systems. The administrator can also set a global write protection mode, which places the drive in read-only mode until it is reset.

Rugged Casing to the Strictest IronKey Standards
Crush-resistant zinc casing with epoxy filling for physical protection against tampering. MIL-STD-810F certified with mechanical shock, vibration and drop tests. IP67 certified for water-* and dust-resistance*.

Unique 8-Digit SNr + Barcode for Tracking
Time-saving reading or scanning of the barcode during both deployment and return of a drive, as well as during all mechanical hardware checks.

Fully Customizable
Enable, disable, modify drive functions and profiles. Company logo.