Kingston Technology IronKey 64GB D500S FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit Hardware Encryption
Kingston IronKey™ D500S USB Flash Drive is the class-best drive for protecting sensitive data with military-grade and CMMC compliant security. It’s FIPS 140-3 Level 3 Validated by NIST for added security and attack protection. It features a rugged zinc casing that is waterproof*, dustproof*, shock and vibration resistant**, crush-resistant and epoxy filled. Engineered and assembled by Kingston in California, the D500S is the world’s first FIPS 140-3 Level 3 Validated USB flash drive with a TAA compliant trusted supply chain.

The Kingston IronKey™ D500S USB Flash drive is the class-best, offering premium military-grade, hardware-based XTS-AES 256-bit encryption, making IronKey the most trusted brand for protecting secret information with CMMC compliance. It’s FIPS 140-3 Level 3 Validated, with new enhancements from NIST, requiring secure microprocessor upgrades for increased security and attack protection for government and military applications. Governments and enterprises will need to implement new drive policies using the latest security standard as defined by NIST. Data is encrypted and decrypted on the D500S without leaving a trace on the host system. Engineered and assembled by Kingston in California, the D500S is the world’s first FIPS 140-3 Level 3 Validated USB flash drive with a TAA compliant trusted supply chain. All critical drive components are sourced by Kingston directly from TAA compliant trusted vendors and warehoused in Kingston's secured Manufacturing Center in California, US to ensure drive assembly is in tightly controlled, technically supervised processes.

It features a rugged zinc casing that is waterproof*, dustproof*, military-standard shock and vibration resistant**, and crush resistant and special epoxy filled to protect internal components from intrusion attempts.

The IronKey D500S is an essential pillar in meeting Data Loss Prevention (DLP) best practices, providing the highest military-grade security to comply with data encryption laws and regulations like CMMC, SOC2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX, and CCPA along with TAA. The D500S offers more features than any other USB in its class, making it an industry-leading security solution for protecting high-value, sensitive data.

The D500S is equipped with digitally signed firmware, making it immune to BadUSB malware, providing an extra layer of security. Brute-force password attack protection is always on to prevent password guessing, wiping the drive if too many invalid password attempts are made.

It offers a multi-password option for data access, supporting up to three passwords: Admin, User and One-Time Recovery. The admin can reset a user password and also enable a one-time recovery password to regain access if the user password is forgotten.

The D500S supports the traditional Complex password or Passphrase mode***. Passphrases can be between 10 and 128 characters long. The FBI recommends multi-word passphrases that are 15 or more characters in length, which are stronger and easier to remember than complex passwords.****
The D500S offers an industry-first dual hidden partition option, allowing the admin to create two secure custom-sized partitions for the admin and the user. When using untrusted systems or sharing the drive, the hidden file stores keep their data secure and invisible unless properly accessed.

A special key sequence is available for crypto erase which cryptographically erases the USB, wiping data forever and resetting the USB to prevent unauthorised access in compromising situations. By destroying and regenerating the AES 256-bit encryption keys and erasing all data tied to previous keys, the drive ensures CUI cannot be recovered and aids organisations with compliance to NIST SP 800-88 and NIST SP 800-171.

As a keyboard entry aid, all password entries include an eye symbol to reveal the entered password, helping to prevent typos. A virtual keyboard is also available in English***** to protect password entry from keyloggers and screen loggers.

The D500S also supports two levels of write-protection modes (Read Only). Both the Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The Admin can also set a global write-protection mode that sets the drive to Read-Only until reset.
It also features fast dual-channel performance without compromising security. The USB includes a unique 8-digit electronic serial number that matches the number engraved on the casing, as well as a scannable barcode for USB deployment or auditing purposes.

The D500S offers fully customisable features and functions to meet your organisation’s specific requirements.

Military-grade hardware-encrypted USB
FIPS 140-3 Level 3 Validated, Certificate #5029 XTS-AES 256-bit encryption with secure microprocessor upgrades for even greater protection. Built-in protection against BadUSB, brute-force attacks and physical tampering with internal components.

Trusted supply chain for compliance
All critical drive components are sourced by Kingston directly from trusted TAA-compliant vendors and warehoused and assembled in Kingston’s secure Manufacturing Center in California, ensuring the USB is assembled in the US in tightly controlled, technically supervised processes.

Multi-password option for data recovery
Enable Admin, User and One-Time Recovery passwords. The Admin can reset a User password and create a one-time recovery password to help a user regain access to their data if the User password is forgotten.

Complex or Passphrase mode
Choose between Complex or Passphrase password mode. Passphrases can be full sentences or multiple words only you can remember – between 10 to 128 characters in length. An eye symbol for all entered passwords helps prevent typos.

Industry-first dual hidden partition option
The Admin can create two custom-sized dual hidden partitions for the Admin and User for a hidden file store to keep data secure and invisible unless properly accessed. Dual hidden partitions can offer additional security on untrusted systems or when sharing is required.

Crypto erase password for compromising situations
Crypto erase password will wipe the encryption key and wipe all data forever by resetting the USB.

Global and session-based Read-Only modes (Write Protection)
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. The Admin can also set a global write-protection mode that sets the drive to Read-Only until reset.

Rugged casing built to the strictest IronKey standards
Crush-resistant zinc casing with epoxy potting for physical tamper protection. MIL-STD-810F certified with mechanical shock, vibration and drop testing. IP67 certified for water* and dust resistance*.

Unique 8-digit SNr + barcode for tracking
Time-saving reading or scanning of the barcode during both deployment and return of a drive, as well as all mechanical hardware audits.

Fully customisable
Enable, disable, modify drive functions and profiles. Company logo.