Kingston Technology IronKey 512GB D500S FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit Hardware Encryption
Kingston IronKey™ D500S USB Flash Drive is a best-in-class, military-grade and CMMC-compliant security to protect sensitive data, validated by NIST to FIPS 140-3 Level 3 for enhanced security and attack protection. It has a tough zinc casing that is waterproof*, dustproof*, shock and vibration resistant**, crush-resistant and epoxy-filled. Engineered and assembled in California by Kingston, the D500S is the world’s first FIPS 140-3 Level 3 validated USB drive with a TAA-compliant trusted supply chain.

The Kingston IronKey™ D500S USB Flash drive is best-in-class, providing premium military-grade, hardware-based XTS-AES 256-bit encryption that makes IronKey the most trusted brand to protect classified information with CMMC compliance. It’s FIPS 140-3 Level 3 validated with new enhancements from NIST, requiring secure microprocessor upgrades for heightened security and attack protection for government and military use. Governments and enterprises will need to implement new drive policies using the latest security standard as defined by NIST. The D500S encrypts and decrypts data on the drive without leaving any trace on the host system. Engineered and assembled in California by Kingston, the D500S is the world’s first FIPS 140-3 Level 3 validated USB drive with a TAA-compliant trusted supply chain. All critical drive components are sourced by Kingston directly from TAA-compliant and trusted vendors and warehoused at Kingston’s secured Manufacturing Centre in California, USA, to ensure drive assembly is completed in tightly controlled, technically supervised processes.

It has a tough zinc casing that is waterproof*, dustproof*, military-grade shock and vibration resistant**, crush-resistant, and epoxy-filled for physical tampering protection of internal components.

The IronKey D500S is a vital pillar for meeting Data Loss Protection (DLP) best practices, providing the highest military-grade security for compliance with data encryption laws and regulations such as CMMC, SOC2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX and CCPA along with TAA. The D500S delivers more features than any other USB drive in its class, making it an industry-leading security solution for protecting high-value, sensitive data.

The D500S is built with digitally signed firmware, making it immune to BadUSB malware, providing extra security. Brute-force password attack protection is always on to prevent password guessing, wiping the drive if too many invalid password attempts are made.

It offers a multi-password option for data access, supporting up to three passwords: Admin, User and one-time recovery. The Administrator can reset a user password and also enable a one-time recovery password to restore access if the user password is forgotten.

The D500S supports the traditional Complex password or Passphrase mode***. Passphrases can be between 10 and 128 characters long. The FBI recommends multi-word passphrases of 15 or more characters that are stronger and easier to remember than complex passwords.****
The D500S provides an industry-first two hidden partitions option, where the Administrator can create two custom-sized secure partitions for the Administrator and User. When using untrusted systems or sharing the drive, the hidden file stores keep their data secure and invisible unless properly accessed.

A special key sequence is used for Crypt-erase, which cryptographically erases the USB drive, permanently destroying data and resetting the USB drive to prevent unauthorised access in compromising situations. By destroying and regenerating the AES 256-bit encryption keys and erasing all data tied to previous keys, the drive ensures CUI cannot be recovered and aids enterprises in adhering to NIST SP 800-88 and NIST SP 800-171.

To assist with keyboard issues, all password inputs include an eye icon, which will show the typed password to help prevent typographical errors. A virtual keyboard is also available in English***** to protect password entry from keyloggers and screenloggers.

The D500S also supports two levels of Read-Only (Write Protect) modes. Both Administrator and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The Administrator can also set a Global Write Protection mode, which will keep the drive in Read-Only mode until reset.
It also provides fast dual-channel performance without sacrificing security. The USB drive includes a unique 8-digit electronic serial number that matches the number engraved on the casing, as well as a scannable barcode for USB drive deployment or audit purposes.

The D500S offers fully customisable features and functions to meet the specific requirements of your organisation.

Military-grade hardware encrypted USB drive
FIPS 140-3 Level 3 validated, Certificate No. 5029 XTS-AES 256-bit encryption with secure microprocessor upgrades for heightened protection. Built-in protection from BadUSB, brute-force attacks and physical tampering of internal components.

Trusted supply chain for compliance
All critical drive components sourced by Kingston directly from trusted TAA-compliant vendors and warehoused and assembled at Kingston’s secured Manufacturing Centre in California. This ensures the USB drive is assembled in the USA in tightly controlled, technically supervised processes.

Multi-password option for data recovery
Enable Administrator, User and one-time recovery passwords. The Administrator can reset a User password and create a one-time recovery password to allow the User to regain data access if the User password is forgotten.

Complex or Passphrase mode
Choose between Complex or Passphrase password mode. Passphrases can be entire sentences or multiple words that only you will remember—between 10 to 128 characters long. An eye icon for all password entries will help prevent typographical errors.

Industry-first two hidden partitions option
Administrator can create two custom-sized secure hidden dual partitions for the Administrator and User for hidden file stores to keep data secure and invisible when not properly accessed. Two hidden partitions can provide extra security on untrusted systems or when sharing is required.

Crypt-erase password for compromising situations
The Crypt-erase password wipes the encryption key, permanently destroying all data by resetting the USB drive.

Global and session-based Read-Only (Write Protect) modes
Both Administrator and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The Administrator can also set a Global Write Protection mode, which will keep the drive in Read-Only mode until reset.

Tough casing designed to the most rigorous IronKey standards
Crush-resistant zinc casing with epoxy potting for physical tamper protection. MIL-STD-810F certified with mechanical shock, vibration and drop tests. IP67 certified for water* and dust resistance*.

Unique 8-digit SNr + barcode for tracking
Time-saving barcode scan or reading for both deployment and return of a drive, as well as all mechanical hardware audits.

Fully customisable
Enable, disable, modify drive features and profiles. Company logo.