DataLocker DL3 User manual

DataLocker DL3 User Guide
version 3.35
DataLocker Inc.
August, 2018
DL3/DL3 FE
1

DataLocker DL3 User Guide
Contents
At a Glance 3
Introduction ................................................ 3
AbouttheDL3............................................... 3
CitrixCompatibilities ........................................... 4
Getting Started 4
AccessingTheSetupMenu....................................... 4
AdministratorPassword ......................................... 5
ConnectingTheDevice......................................... 6
MainScreen................................................ 7
DisconnectingYourDL3......................................... 7
Features 9
AdministrativeControls ......................................... 9
SystemMenu ............................................... 9
UserOptions................................................ 10
UserPassword............................................... 10
Self-DestructMode............................................ 11
Zeroize ................................................... 12
RFIDAuthentication ........................................... 12
Read-OnlyMode............................................. 14
Auto-Lock ................................................. 15
SafeConsole 17
EnablingSafeConsole.......................................... 17
Registering The DL3 To SafeConsole . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
Using A SafeConsole Managed Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 20
DisablingSafeConsole.......................................... 23
Initializing And Formatting Your DL3 24
HowToInitializeYourDrive ....................................... 24
Selecting The Correct File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 24
FormattingYourDL3OnWindows ................................... 24
FormattingYourDL3onmacOS .................................... 26
Linux Compatibility And Configuration . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 28
FrequentlyAskedQuestions ...................................... 29
ContactTheSupportTeam....................................... 29
© 2018 DataLocker Inc. All rights reserved. 2

DataLocker DL3 User Guide
At a Glance
Introduction
Congratulations on your purchase of the DataLocker DL3
TM
Encrypted Hard Drive. This user manual
is intended to help you configure your device. Because DataLocker is constantly updating its
products, the images and text in this manual may vary slightly from the images and text displayed
by your DataLocker DL3. These changes are minor and should not effect the ease of setup adversely.
Updated software and documentation are freely available for download at our website. Visit our
Device Firmware Updates page for all available updates.
The DataLocker DL3 stands alone as the only external hard drive equipped with a patented, on
board, LCD touch screen. This feature allows the user to conveniently perform all processes directly
through the LCD Interface, making it truly 100% platform independent.
Although the DataLocker DL3 is extremely user friendly, it is recommended that you review this guide
to ensure that you become fully acquainted with the DataLocker DL3 and all of its features.
About the DL3
The DataLocker DL3 has a minimum power requirement of 5 Volts and 1A of current that is drawn
from the USB port. The DataLocker DL3 utilizes 256-bit AES encryption operating in XTS mode to fully
encrypt your drive’s contents.
The DataLocker DL3 FE (FIPS Edition) has FIPS validated components and two independent crypto
processors. Data undergoes two passes of 256-bit AES encryption - the first pass being in XTS mode,
the second pass in FIPS 140-2 validated CBC mode - before it is stored on the hard drive.
The DataLocker DL3 comes preformatted with the Windows NTFS file system. All major file systems
are supported (HFS, NTFS, EXT, FAT).
If you require a different file system, please consult your operating system for initialization and
formatting instructions.
For more information on initializing and formatting your DL3, see Initializing And Formatting Your DL3.
The DataLocker DL3 is completely cross-platform compatible and OS agnostic. With no software or
special drivers required, the DL3 works with Windows, Linux, MacOS, Android phones and tablets,
Chromebooks, and embedded systems - any system that can utilize USB Mass Storage.
Note: Managed DL3s require Windows 7+.
© 2018 DataLocker Inc. All rights reserved. 3

DataLocker DL3 User Guide
Citrix Compatibilities
The DataLocker DL3 and DL3 FE are compatible with:
• XenApp 7.14
• XenApp 7.15 LTSR
• XenApp 7.16
• XenApp 7.17
• XenDesktop 7.14
• XenDesktop 7.15 LTSR
• XenDesktop 7.16
• XenDesktop 7.17
Additionally, the DL3 is compatible with:
• Citrix Virtual Apps and Desktops service on Azure
Getting Started
Accessing The Setup Menu
The Setup menu is where all options and controls are displayed, including changing your password.
To access the Setup menu:
1. Connect the DL3 to your computer with the included USB cable.
2. At the startup screen press Start.
3. Enter the administrator password. If this is your first time logging in, the default password is
0000000.
Then press the Enter symbol.
4. Press the Setup button on the touch screen. If it is not selected within 3 seconds, the DataLocker
DL3 will connect to the computer automatically.
© 2018 DataLocker Inc. All rights reserved. 4

DataLocker DL3 User Guide
5. You can navigate the Setup menu using the function buttons listed, or go back to the Connect
menu by pressing the Return button in the top left corner of Setup menu.
From the Setup menu, you can:
• Change your password
• Enable/disable the user password
• Access the System menu
• Access the SafeConsole setting
Administrator Password
It is highly recommended that you set a new administrator password using alpha-numeric characters
upon the first use.
1. From the Setup menu, press the Change Password button.
2. Press the Continue button and enter the current password. Follow the onscreen instructions to
set your new password. It is recommended that you use a combination of both alpha and
numeric characters for your password.
3. After the new password has been set, you may set other options, or save and go back to
the Connect menu by pressing the Return button located at the top left hand corner next to
Setup.
Warning: A lost or forgotten password cannot be reset or recovered without losing all the
stored data. To reset a device with an unknown password, incorrect passwords can be
entered until the device self-destructs. This will delete all stored data on the drive. The device
will need to be initialized again before reuse. For more information on initializing your device,
see Initializing And Formatting Your DL3.
© 2018 DataLocker Inc. All rights reserved. 5

DataLocker DL3 User Guide
Connecting The Device
After entering the password, press the Connect button to start using the DL3 drive.
The drive will begin connecting to the computer. By default, Windows will show an AutoPlay dialog
once the drive has successfully connected.
In Windows Explorer you will now see a drive called “DataLocker” listed in the Hard Disk Drives section.
A new drive letter will be automatically assigned to this drive. You may now start using your DL3 drive!
© 2018 DataLocker Inc. All rights reserved. 6

DataLocker DL3 User Guide
Main Screen
The connected status screen on your DL3 drive displays useful information.
Indicates that the DL3 drive has a User Password enabled.
Indicates that the DL3 drive’s User Password is disabled.
Displays the current firmware installed on the DL3 drive.
Disconnects the DL3 drive from the computer. Note: To prevent data loss or
damage to disk, ensure the DL3 drive has been properly ejected from the operating system before
pressing this button.
Disconnecting Your DL3
To prevent loss or corrupted data, properly eject the DL3 drive when you’re finished using it. The
best practice is to use your operating system’s Safely Remove Hardware or Eject function before
you power down or detach the DataLocker DL3 from the host system.
This will also help prevent damage to the disk.
© 2018 DataLocker Inc. All rights reserved. 7

DataLocker DL3 User Guide
Windows Users
1. Right click the Safely Remove Hardware icon located on the lower right hand corner of the
Windows taskbar.
2. Once the popup menu has appeared, click the correct drive to safely eject the DL3 from
Windows.
macOS Users
1. Click the Eject button that corresponds with the DataLocker DL3 on macOS.
2. Once the drive has been ejected from macOS, press Disconnect on the DL3 drive.
© 2018 DataLocker Inc. All rights reserved. 8

DataLocker DL3 User Guide
Features
Administrative Controls
Menu Option Details
Previous Menu/
Save Settings Button
Used to go back to the previous menu and save the current
settings.
Change Password Used to set the administrator password.
User Password Used to create a user password.
System Enter the System Menu. For more information see the System
Menu section.
SafeConsole If enabled, allows the device to be managed by the
company’s SafeConsole central management system. For
more information about this feature, please read the
SafeConsole section.
System Menu
Menu Option Details
Previous Menu/
Save Settings Button
Used to go back to the previous menu and save the current
settings.
Next Menu Button Used to go to the next screen.
Language Set the menu language. Supported languages are:
- English
- French
- German
- Spanish
- Japanese
- Korean
Strong Password The DL3 allows the administrator to enforce strong password
rules for authentication. With the Strong Password feature
enabled, all passwords must meet the following requirements:
- Password must be 8 characters long or greater. The
minimum password length is adjustable from 8 to 32
characters.
- Sequential passwords such as “12345678”, “98765432”,
“ABCDEFGH”, are prohibited.
- Repeating passwords such as “11111111”, “AAAAAAAA”,
are prohibited.
- The password must contain both numeric and alpha
characters.
© 2018 DataLocker Inc. All rights reserved. 9

DataLocker DL3 User Guide
Menu Option Details
LCD Contrast Adjust the LCD screen’s contrast.
Previous Menu Button Used to go back to previous menu and save the current
settings.
Key Tone Turn the keypad tone on or off.
Note: This does not turn off all other device sounds.
Zeroize Drive Initiates the destruction of all encryption keys and user
passwords, making the data on the drive irretrievable. The
DL3 will be reset to the original factory state. The device will
need to be reinitialized and formatted in order for it to be
redeployed.
RFID Enters the optional RFID Authentication module setup menu.
User Options
User options can be found by logging into the device with the user password and entering the
Setup menu. For more information, see the User Password section.
Menu Option Details
Previous Menu/
Save Settings Button
Used to go back to previous menu and save the current
settings.
Change Password Used to set the user password. For more information, see the
User Password section.
Language Set the menu language. Supported languages are:
- English
- French
- German
- Spanish
- Japanese
- Korean
LCD Contrast Adjust the LCD screen’s contrast.
Key Tone Turn the keypad tone on or off.
User Password
The DL3 supports the creation of a user password. The user will have access to all data on the drive,
however, the user will not be able to access certain administrative options and controls.
Note: You must change the default administrator password before creating a user password.
1. Navigate to the Setup Menu. For more information, see Accessing The Setup Menu.
© 2018 DataLocker Inc. All rights reserved. 10

DataLocker DL3 User Guide
2. At the setup menu press the User Password button.
3. Press the Create button. A user with the default password of 0000000 is now created.
4. The user should then re-login with the default user password of 0000000 and change the
default password to a personal password. The user password change process is identical to
changing the administrator’s password. The user’s setup menu is limited to Change Password,
Language, Key Tone, and LCD Contrast settings. See User Options for more information.
Self-Destruct Mode
The self-destruct feature is designed to defend against brute force password hacks. The DL3
performs this by zeroizing all of the device’s encryption keys once the appointed number of failed
login attempts is reached.
Once the encryption key is deleted, your data is no longer recoverable. Powering off the unit does
NOT reset the unsuccessful password attempts counter. The password attempts counter will only
reset after a successful password attempt. Use this feature with caution.
1. The self-destruct function deters brute force password attacks. The number of password
attempts is 10 tries.
Once the defined number of failed password attempts is reached, all data on the DL3 drive
will be irrecoverably destroyed.
2. The DL3 drive is designed to automatically power off after the first five tries. You will have to
unplug and reconnect the DL3 drive to reattempt the connection process.
© 2018 DataLocker Inc. All rights reserved. 11

DataLocker DL3 User Guide
3. If you are within the final three tries you will be alerted with a “Hack Detected” warning.
4. After 9 unsuccessful attempts you will see the “Self-destruct Will Begin” warning. If the next
attempt fails, the self-destruct function will destroy all encryption keys on the DL3 drive. This
process is instantaneous and all data will be inaccessible.
5. The DL3 drive will emit a steady alert tone and will not stop until you unplug the USB cable from
the computer. The drive will have to be reinitialized and formatted to work with your operating
system again.
Zeroize
Zeroizing the device will wipe all data on the drive and return the device to factory settings.
Note: The SafeConsole feature must be disabled to use the Zeroize function.
To zeroize the DL3:
1. Navigate to the Setup menu. For more information see, Accessing The Setup Menu.
2. Find and press the System button to access the System menu.
3. Press the Zeroize button.
Note: The option is on the second page of the System menu.
4. Follow the onscreen prompts to complete the process.
5. The DL3 will power off and back on automatically when it has finished zeroizing. To use your DL3
once again, you will need to reinitialize it. See How To Initialize Your Drive for more information.
RFID Authentication
The DL3 FE features an optional RFID module for a second layer of authentication. A maximum
of five RFID tags can be registered on each DL3 drive. RFID models of the DL3 FE come with two
RFID tags. If you would like to pair your own tag, the DL3 RFID module supports ISO 14443A and ISO
15693 with a frequency of 13.56 MHz.
© 2018 DataLocker Inc. All rights reserved. 12

DataLocker DL3 User Guide
1. Navigate to the Setup Menu. For more information, see Accessing The Setup Menu.
2. At the Setup menu, press the System button.
3. Press the button to display the System 2/2 screen.
4. At the next menu screen, press the RFID button.
5. At the setup RFID screen, press the Add RFID Tag button.
6. Place the supplied RFID tag near the bottom right hand corner of the DL3 until you hear a
“beep” tone.
© 2018 DataLocker Inc. All rights reserved. 13

DataLocker DL3 User Guide
7. After registering, the RFID tag value will be displayed. Please make note of the RFID tag ID in
case the tag is lost or damaged.
You have now successfully registered a RFID tag and the RFID function is enabled.
The next time you reconnect the DL3 drive, you are required to use the RFID tag to authenticate
before entering the password.
Read-Only Mode
The DL3 drive comes with two Read-Only Mode options. The administrator can force Read-Only
Mode for all users or users and administrators can set the feature individually. Both options are
disabled by default.
Forced Read-Only Mode
The administrator can force Read-Only Mode for users. Once the feature is enabled, only the
administrator will be able to change it. Users of a DL3 drive that has Read-Only Mode enabled can
still view the files and copy them, but they will not be able to save any changes to the files on the
drive nor delete them.
Note: With this setting enabled, administrators will not be forced into Read-Only Mode.
© 2018 DataLocker Inc. All rights reserved. 14

DataLocker DL3 User Guide
To enable forced Read-Only Mode, follow these steps:
1. Navigate to the Setup menu. For more information, see Accessing The Setup Menu.
2. At the Setup menu, press the System button.
3. Select Read-Only Mode.
Note: This option is located on the second page of the System menu.
4. Change to Enable.
Individual Read-Only Mode
The administrator and the user can each set Read-Only Mode individually, by checking the box
on the Connection screen after entering the password. Checking the box will enable Read-Only
Mode for a single login. Upon disconnecting and logging in again, the setting can be toggled.
Note: After checking the Read-Only Mode box and disconnecting, the option will remain checked
until the user unchecks it.
Auto-Lock
Auto-lock is a security feature available on the DL3. This feature is disabled by default but can be
enabled by the administrator and the user. The amount of idle time required to time out the device
is configurable from 10 to 180 minutes in increments of 10 minutes.
Auto-lock will disconnect the drive once it is idle (i.e. zero activity) for the configured amount of
time. The device will beep and display a 30 second countdown on the touchscreen before the
timeout limit is reached. Modifying the contents on the drive or even viewing the files will reset the
timeout counter.
To enable auto-lock, follow these steps:
1. Navigate to the Setup menu. For more information, see Accessing The Setup Menu.
2. At the setup menu, press the System button.
3. Press the Next Page button two times to arrive at the System 3/3 screen.
4. Select Auto-Lock.
5. Adjust the minutes of idle time required.
© 2018 DataLocker Inc. All rights reserved. 15

DataLocker DL3 User Guide
6. Change to Enable.
Disabling Windows 10 Power Save
By default, Windows 10 attempts to shut off USB devices after a set period of inactivity. If the DL3 is
put into this low power state, the drive will automatically lock the drive and require reauthentication.
To disable this feature of Windows, follow the steps below.
Note: You will need to complete the following steps once for each drive plugged into your computer.
1. Log in as a local administrator on your computer.
Note: If you are not an administrator you will receive a warning indicating you won’t be able
to make changes when you open Device Manager. Please contact your administrator for
further assistance.
2. Unlock your DL3 device. If your device is being managed by SafeConsole, launch the client
on your computer.
3. Open Device Manager (Click the windows button and type “device manager”).
4. Click on the arrow next to Universal Serial Bus controllers.
5. Right click on USB Mass Storage Device.
6. Click Properties.
7. Go to the Power Management tab.
8. Uncheck “Allow the computer to turn off this device to save power”.
9. Click OK.
© 2018 DataLocker Inc. All rights reserved. 16

DataLocker DL3 User Guide
SafeConsole
SafeConsole
TM
is a central management console used to optionally manage DL3 devices. Man-
aged DL3s require a Connection Token upon initialization. The SafeConsole Connection Token is
obtained by the System Administrator through the Quick Connect Guide, located inside of the
SafeConsole user interface. SafeConsole requires a device license for activation. License sold
separately.
Users without access to a Management Server, please contact sales: [e-mail] /
[phone]
SafeConsole offers several key features including audit logging, anti-malware services (license sold
separately), remote password reset, and more!
Enabling SafeConsole
Toggling the SafeConsole feature requires administrative access to your DL3. If you are a user,
please contact your administrator for assistance. Enabling SafeConsole will limit drive usage to
Windows machines with a valid connection to the SafeConsole Server.
To Enable SafeConsole:
1. Navigate to the Setup menu. For more information, see Accessing The Setup Menu.
2. Select the SafeConsole option.
3. Choose Enable.
4. Return to the Connection menu and select Connect.
5. Upon launching the client on your computer, it will ask for your SafeConsole Connection Token.
This can be found in the Quick Connect Guide within the SafeConsole user interface.
Note: If the SafeConsole client is not shown, the latest firmware may need to be installed on
your device. Find the latest firmware update here.
Registering The DL3 To SafeConsole
Before registering your drive to SafeConsole, make sure SafeConsole is enabled on your DL3. For
more information, see Enabling And Disabling SafeConsole.
You will need a Connection Token, provided by your system administrator, to complete the registra-
tion.
1. Log into the DL3 and press the Connect button.
2. On your computer, double click the DataLocker DL3 drive under Devices and Drives to launch
the client.
© 2018 DataLocker Inc. All rights reserved. 17

DataLocker DL3 User Guide
3. Upon launch, the SafeConsole Connection page should appear. If it doesn’t, click on Actions ,
then Connect to SafeConsole.
4. Enter the SafeConsole Connection Token provided by your SafeConsole Administrator and
click Check Token.
© 2018 DataLocker Inc. All rights reserved. 18

DataLocker DL3 User Guide
5. The client will search for the correct SafeConsole server and will ask you to confirm the
connection when it finds one. Click Yes, Connect.
6. Your device will connect to the server. You can determine if your device is reaching the server
by the connection symbol in the bottom right corner.
Optionally Enabled Policies - These policies may or may not be enabled by your System
Administrator. They will appear during device registration if they have been enabled.
• Confirm Ownership of the device: Enter the Windows username and password that is
associated with the login credentials of the computer the device is plugged into.
• Custom Device Information: Required information about you or your device. The required
fields will vary.
• Unique User Token: This token is directly associated with the end user’s account and will
be provided by the System Administrator.
• Administrator Registration Approval: The System Administrator may require their approval
to proceed with device registration.
© 2018 DataLocker Inc. All rights reserved. 19

DataLocker DL3 User Guide
7. Upon the second login on the device after registering to SafeConsole, the client will save the
backup password. You will be notified with a popup.
Registration Troubleshooting
If you have trouble registering your DL3 or your device consistently loses the connection between
the client and the SafeConsole server, follow the steps below.
1. Log into the DL3 and press Connect.
2. On your computer, right click the DataLocker DL3 icon and click Open.
3. Right click DataLockerDL3.exe and click Run as administrator.
This is a one time action that should solve the connection problem. Next time you connect,
you should be able to run the DL3 client as usual.
Using A SafeConsole Managed Device
Logging In And Accessing Files
To log into to your SafeConsole registered device:
1. Enter the correct password on the DL3 screen.
2. Press Connect.
© 2018 DataLocker Inc. All rights reserved. 20