Kingston Technology IronKey 256GB D500S FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit Hardware Encryption
Kingston IronKey™ D500S USB Flash Drive is the best-in-class military-grade and CMMC compliant security to protect sensitive data. It’s FIPS 140-3 Level 3 validated by NIST with added security and attack protection. It has a rugged zinc casing that is waterproof*, dustproof*, shock and vibration resistant**, tamper-evident and epoxy-filled. Designed and assembled in California by Kingston, D500S is the world’s first FIPS 140-3 Level 3 Validated USB flash drive with a TAA compliant trusted supply chain.

Kingston IronKey™ D500S USB Flash Drive is best-in-class military-grade, hardware-based XTS-AES 256-bit encryption that makes IronKey the most trusted brand for protecting secret information with CMMC compliance. It’s FIPS 140-3 Level 3 validated, with new enhancements from NIST, under which secure microprocessor upgrades are required for added security and attack protection for government and military applications. Governments and enterprises need to implement new drive policies with the latest NIST-defined security standard. The D500S encrypts and decrypts data without leaving any traces on the host system. Designed and assembled in California by Kingston, D500S is the world’s first FIPS 140-3 Level 3 Validated USB flash drive with a TAA compliant trusted supply chain. All critical drive components are sourced directly from TAA-compliant and trusted vendors by Kingston and stored in the secured Kingston Manufacturing Centre in California, ensuring that the drive assembly occurs in strictly controlled, technically supervised processes.

It has a rugged zinc casing that is waterproof*, dustproof*, military-grade shock and vibration resistant**, shatter resistant and epoxy-filled to protect internal components from tampering attempts.

The IronKey D500S is a critical pillar for meeting Data Loss Prevention (DLP) best practices, delivering the highest military-grade security for compliance with data encryption laws and regulations such as CMMC, SOC2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX, and CCPA along with TAA. The D500S has more features than any other USB flash drive in its class, making it an industry-leading security solution for protecting high-value, sensitive data.

The D500S is equipped with digitally signed firmware, making it immune to BadUSB malware for added security. Brute-force password attack protection is always on to prevent password guessing, wiping the drive if too many invalid password attempts are made.

It offers a multi-password option for accessing data supporting up to three passwords: Admin, User, and One-Time Recovery. The Admin can reset a User password and also activate a One-Time Recovery password to regain access if the User password is forgotten.

The D500S supports the traditional Complex password or Passphrase mode***. Passphrases can be between 10 and 128 characters long. The FBI recommends multi-word passphrases of 15 characters or more that are stronger and easier to remember than complex passwords.****
The D500S offers the industry’s first dual hidden partitions option where the Admin can create two custom-sized secure partitions for the Admin and User. When using untrusted systems or sharing the drive, the hidden file stores keep their data secure and invisible unless accessed correctly.

A special key sequence can engage crypto-erase, which cryptographically erases the USB flash drive, destroying the data forever and resetting the USB flash drive to prevent unauthorised access in compromising situations. By destroying and regenerating the AES 256-bit encryption keys and erasing any data associated with previous keys, the drive ensures that CUI cannot be recovered, assisting businesses in meeting NIST SP 800-88 and NIST SP 800-171.

To assist with keyboard issues, all password inputs include an eye icon, which displays the password being entered to help prevent typos. A virtual keyboard is also available in English***** to protect password entry from keyloggers and screen loggers.

The D500S also supports two levels of Read-Only (Write Protect) modes. Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The Admin can also set a global Write Protect mode that keeps the drive in Read-Only mode until reset.
It also features fast dual-channel performance without compromising security. The USB flash drive includes a unique 8-digit electronic serial number matching the number engraved on the casing and a scannable barcode for USB flash drive deployment or auditing.

The D500S offers fully customisable features and functions to meet the specific requirements of your organisation.

Military-grade hardware encrypted USB flash drive
FIPS 140-3 Level 3 Validated, Certificate #5029 XTS-AES 256-bit encryption with secure microprocessor upgrades for added protection. Integrated protection from BadUSB, brute-force attacks and physical tampering with internal components.

Trusted supply chain for compliance
All critical drive components sourced directly from trusted, TAA-compliant vendors by Kingston, and stored and assembled in the secure Kingston Manufacturing Centre in California. This ensures the USB flash drive is assembled in the US in strictly controlled, technically supervised processes.

Multi-password option for data recovery
Activate Admin, User, and One-Time Recovery passwords. The Admin can reset a User password and create a One-Time Recovery password to regain access for the User if the User password is forgotten.

Complex or Passphrase mode
Choose between Complex or Passphrase password mode. Passphrases can be whole sentences or multiple words only you can remember – between 10 to 128 characters in length. An eye icon for all password entries helps prevent typos.

Industry-first dual hidden partitions option
Admin can create two custom-sized hidden dual partitions for the Admin and User for a hidden file store to keep data secure and invisible when not accessed correctly. Dual hidden partitions can offer additional security on untrusted systems or when sharing is required.

Crypto-erase password for compromising situations
The Crypto-erase password destroys the encryption key and erases all data forever by resetting the USB flash drive.

Global and session-based Read-Only (Write Protect) modes
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The Admin can also set a global Write Protect mode that keeps the drive in Read-Only mode until reset.

Ruggedised casing to the strictest IronKey standards
Shatter-resistant zinc casing with epoxy fill for physical tamper protection. MIL-STD-810F certified with mechanical shock, vibration, and drop tests. IP67 certified for water* and dustproof*.

Unique 8-digit SNr + barcode for tracking
Time-saving read or scan of the barcode during both deployment and return of a drive, as well as any mechanical hardware checks.

Fully customisable
Enable, disable, modify drive features and profiles. Corporate logo.