DataLocker DL4 FE User manual

DL4 FE User Guide
DataLocker Inc.
January 2021
DL4 FE - User Guide
1

DL4 FE User Guide
Contents
At A Glance 4
Introduction ................................................ 4
UpdatingYourDevice.......................................... 4
AbouttheDL4FE............................................. 4
BestPractices ............................................... 5
ProductSpecifications.......................................... 5
Getting Started 6
Initializing and Connecting Your DL4 FE . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 6
DisconnectingYourDL4FE ....................................... 8
Additional Windows Configuration Changes 10
DisablingWindows10PowerSave................................... 10
Disabling Windows 10 Selective Suspend . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 10
Formatting Your DL4 FE 11
Selecting the Correct File System . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
Formatting Your DL4 FE on Windows . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 11
FormattingYourDL4FEonmacOS................................... 12
Linux Compatibility and Configuration 14
Features 15
AdministratorMenu ........................................... 15
UserMenu ................................................. 16
Accessing the Onboard Administrator or User Menu . . . . . . . . . . . . . . . . . . . . . . . . 16
Using the Administrator Menu 17
ChangePassword ............................................ 17
SetUserPassword............................................. 17
SafeConsole................................................ 19
ZeroizeDrive................................................ 19
SelfDestruct................................................ 21
StrongPassword.............................................. 22
RequiredPasswordLength ....................................... 22
Auto-LockTime .............................................. 22
MenuSounds ............................................... 22
Brightness ................................................. 23
Read-OnlyMode............................................. 23
Language ................................................. 23
TouchCalibration............................................. 23
Using the User Menu 24
Changepassword ............................................ 24
Auto-LockTime .............................................. 24
MenuSounds ............................................... 25
Brightness ................................................. 25
Language ................................................. 25
SilentKill Code 26
GeneratingaSilentKillCode ...................................... 26
Registering Your DL4 FE to SafeConsole 26
© 2021 DataLocker Inc. All rights reserved. 2

DL4 FE User Guide
Using a SafeConsole Managed Device 27
UnlockinginSafeConsoleMode.................................... 27
LockingYourManagedDL4FE..................................... 28
StandaloneLogins ............................................ 29
PasswordReset .............................................. 30
UnlockingInRead-OnlyMode..................................... 31
ChangingtheUnlockMessage .................................... 31
EditingtheApplicationsList....................................... 31
Scanning your Device for Malware . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 32
UsingZoneBuilder............................................. 33
Reformat Using DataLocker Control Panel . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 33
Sanitize................................................... 34
DeviceInformation............................................ 34
Getting Help 35
© 2021 DataLocker Inc. All rights reserved. 3

DL4 FE User Guide
At A Glance
Introduction
Congratulations on your purchase of the DataLocker DL4 FE (FIPS Edition) Encrypted USB-C Hard
Drive. This user manual is intended to help with configuring your DL4 FE device. Because
DataLocker is constantly updating its products, the images and text in this manual may vary slightly
from the images and text displayed by your DataLocker DL4. These changes are minor and should
not adversely affect the ease of setup.
Although the DataLocker DL4 is extremely user friendly, it is recommended that you review this guide
to ensure that you become fully acquainted with your DL4 and all of its features.
Updating Your Device
Updated software and documentation are freely available for download at our website:
• Latest device updates - http://datalocker.com/device-updates
• Documentation and support - https://support.datalocker.com
Important: Only the latest device updates should be applied to the device. Downgrading the
device to an older software or firmware version is not supported and can potentially cause a loss of
stored data or impair other device functionality. The latest device updates will always be available
at the link above.
About the DL4 FE
The DL4 FE is a FIPS 140-2 Level 3 Certified device built around a powerful AES 256-bit cryptographic
hardware architecture that then adds layer after layer of security with automated policies that
intelligently change its security posture based on its location, how it’s being used, and the type
of data being stored on it. Available as a SSD or a more economical HDD, the DL4 FE meets
the strictest security requirements while offering large-capacity storage (up to 15.3 TB) and an
easy-to-use touchscreen for setup and use. A powerful addition to the DataLocker line of securely
managed solutions, the DL4 FE continues our proud tradition of providing Simply Secure ™ solutions,
plus it’s backed by a limited 3-year warranty.
The DL4 comes preformatted with the exFAT file system. All major file systems are supported (HFS,
NTFS, EXT, FAT).
If you require a different file system, please consult your operating system for initialization and
formatting instructions.
For more information on formatting your DL4, see Formatting Your DL4 FE.
The DataLocker DL4 is completely cross-platform compatible and OS agnostic. With no software or
special drivers required, the DL4 works with Windows, Linux, and macOS.
Note: SafeConsole Managed DL4s require Windows 7+. Managed DL4s will require Standalone
logins for use on macOS and Linux.
© 2021 DataLocker Inc. All rights reserved. 4

DL4 FE User Guide
Best Practices
• The device must be completely dry before connecting to a computer.
• Only connect the device to certified USB ports.
• Safely eject the device from the operating system before removing it. For more information,
see Disconnecting your DL4 FE.
• Use a strong password and be sure to remember it.
• Use the correct file system based on your operating system and file needs. See Formatting
your DL4 FE for more information.
Product Specifications
Specification Details
Capacity* 500GB, 1TB, 2TB, 1TB SSD,
2TB SSD, 4TB SSD, 7.6TB SSD, 15.3TB SSD
Speed** USB C:
- 150MB/s Read, 100MB/s Write
USB 3.2:
- 150MB/S Read, 100MB/s Write
Dimensions 12.3cm(L) x 7.7cm(W) x 2.1cm(D)
Weight Approximately 295g
Water Resistant*** IP64
Operating System Compatibility Windows, macOS, Linux
Note: SafeConsole Managed DL4s require
Windows 7+. Managed DL4s will require
Standalone logins for use on macOS and Linux.
Operating Temperature 0°C - 60°C
Warranty 3 years Limited
Hardware USB 3.2 or USB C port recommended.
* Advertised capacity is approximate. Some space is required for onboard software.
** Speed varies with host hardware, software, and usage. Tests were performed on 1TB HDD model.
*** IP64 rating pending. Device should be completely dry before use.
© 2021 DataLocker Inc. All rights reserved. 5

DL4 FE User Guide
Getting Started
The DL4 allows you to navigate its durable screen very accurately using a pointy, non-puncturing
object of any material as a stylus. You can use the tip of your finger, a retracted ballpoint pen or
even the edge of a plastic card, making input available and stable in any situation. This is done
using a resistive touch screen that takes input from precise mechanical presses/taps.
Note that this is different from your smart phone touch screen that uses the presence of conductivity
such as the moisture of your finger or a capacitive stylus to take input.
Take some time to get to learn your DL4 screen and you will quickly learn how to press for the best
precision.
Initializing and Connecting Your DL4 FE
Your DL4 utilizes a hardware encryption engine to encrypt and decrypt data that you store on the
device. When your device is plugged in and powered on, you will authenticate with the onboard
system to enable the encryption and use your data. When you lock, power off or disconnect your
device, the data is stored in an encrypted state.
1. Connect the DL4 to your computer with the included USB cable.
2. The device will display “PERFORMING SELF TEST” and then will display a DataLocker loading
screen.
3. You will then be prompted to create a password. Tap OK to continue.
4. Your DL4 will show an “Enter New Password” prompt. Enter a desired password and then
tap Enter . Tap ABC to swap the keyboard to alphabet characters. Tap 123 to swap back to
numeric characters.
Note: Linear and repetitive passwords are not supported and passwords must contain a
MINIMUM of 8 characters. It is recommended that you use a combination of both alphabet and
numeric characters for your password.
Some examples of invalid passwords are:
‘78901234’, ‘43210987’, ’12345678’, ‘1111111’
© 2021 DataLocker Inc. All rights reserved. 6

DL4 FE User Guide
5. Confirm your password from Step 4 and tap Enter.
If the confirmed password does not match the password entered in Step 4, the device will ask
you to enter a new password and to confirm the password again. This process will repeat itself
until the passwords match each other.
6. After the device password is input, the connect screen is shown. Tap Connect to connect
the DL4 instantly. Otherwise, the device will automatically connect to the computer after 10
seconds. Selecting Read-Only Mode will connect the device with read-only access - allowing
data to be read from the device, but not modified or deleted. Tapping the Gear icon on the
screen will take you to the administrator menu. See Using the Administrator Menu for more
information.
7. After the device successfully connects, the DL4 screen will show the DataLocker Logo with
a Disconnect option available. A volume labeled “DataLocker” will be mounted to the
computer and be available for use.
© 2021 DataLocker Inc. All rights reserved. 7

DL4 FE User Guide
Note: Tapping Disconnect will disconnect the DL4 drive from the computer. To prevent data loss or
damage to the disk, it is recommended that the DL4 drive be properly ejected from the operating
system. For more details, see Disconnecting Your DL4 FE.
Disconnecting Your DL4 FE
To prevent loss or corrupted data, it is recommended that you properly eject the DL4 drive when
you’re finished using it. The best practice is to use your operating system’s Safely Remove Hardware
or Eject function before you power down or detach the DataLocker DL4 from the host system. This
will also help prevent damage to the disk.
Windows Users
1. Right click the Safely Remove Hardware icon located on the lower right hand corner of the
Windows taskbar.
2. Once the popup menu has appeared, click the correct drive to safely eject the DL4 from
Windows.
3. Tap Power Off on your DL4 and unplug from the computer.
macOS Users
© 2021 DataLocker Inc. All rights reserved. 8

DL4 FE User Guide
1. a. Click the Eject button that corresponds with the DataLocker DL4
OR
1. b. Drag the drive to the trashcan in the macOS dock. Note: The trash can will transition to
an eject button while dragging the drive.
2. Once the drive has been ejected from macOS, press Disconnect on the DL4 drive.
3. Tap Power Off on your DL4 and unplug from the computer.
© 2021 DataLocker Inc. All rights reserved. 9

DL4 FE User Guide
Additional Windows Configuration Changes
By default, Windows 10 attempts to shut off USB devices after a set period of inactivity. If the DL4 is
put into this low power state, the drive will automatically lock the drive and require reauthentication.
It is recommended that you perform the steps below to ensure the best DL4 user experience on
Windows.
Disabling Windows 10 Power Save
NOTE: You will need to complete the following steps once for each drive plugged into your com-
puter.
1. Log in as a local administrator on your computer.
NOTE: If you are not an administrator you will receive a warning indicating you won’t be able to
make changes when you open Device Manager. Please contact your administrator for further
assistance.
2. Unlock your DL4 device. If your device is being managed by SafeConsole, launch the client
on your computer. See Initializing and connecting your DL4 FE for more information.
3. Right click the Start button, and select “Device Manager”.
4. Click on the arrow next to “Universal Serial Bus controllers”.
5. Right click on “USB Mass Storage Device”.
6. Click “Properties”.
7. Click the “Power Management” tab.
8. Uncheck “Allow the computer to turn off this device to save power”.
9. Click OK and close the “Device Manager” window.
Disabling Windows 10 Selective Suspend
1. In the search box on the taskbar, type control panel.
2. Click and Open Control Panel.
3. Click on Hardware and Sound.
4. Click on Power Options.
5. Click the Change plan settings link for the plan you’re currently using.
6. Click the Change advanced power settings link.
7. Click (+) next to “USB settings”.
8. Click (+) next to “USB selective suspend setting”.
9. Select “Disabled” from the drop-down menu.
NOTE: If you are using a device with a battery (ie. Laptop or Tablet), you will need to set this for On
Battery and Plugged in.
10. Click OK.
© 2021 DataLocker Inc. All rights reserved. 10

DL4 FE User Guide
Formatting Your DL4 FE
Selecting the Correct File System
Your device is formatted as exFAT from the factory.
The DL4 can be reformatted to any file system of your choosing to accommodate a different
operating system or to remove file size restrictions.
Recommended file systems:
NTFS
- Pros: No file size limitations.
- Cons: Limited cross-platform compatibility - Windows, macOS (read-only), and Linux (read-only).
exFAT
- Pros: No file size limitations.
- Cons: Not supported by legacy operating systems.
Note: Reformatting your DL4 drive will erase all your files but will not erase your device password and
settings. As such, formatting should not be used as a method of securely erasing files. To securely
erase your files, perform a Zeroize function. For more information, see the Zeroize Drive section.
Important: Before you reformat the device, back up your drive to a separate location, for example,
to cloud storage or your computer.
Formatting Your DL4 FE on Windows
1. Connect the DL4 to the computer and log in. See Initializing and Connecting your DL4 FE for
more information.
2. In the search box on the taskbar, type control panel.
3. Click and Open Control Panel.
4. Click on System and Security.
5. Click on Create and format hard disk partitions.
6. Right click on the drive letter that corresponds to your DL4. This example shows (E:).
7. Select Format.
© 2021 DataLocker Inc. All rights reserved. 11

DL4 FE User Guide
8. Choose an appropriate ‘Volume Label’ and ‘File system’. Click OK.
9. You will be warned that all data will be erased and asked if you would like to continue. Click
OK.
When finished, your DL4 will available under This PC.
Formatting Your DL4 FE on macOS
1. Go to Applications under your Finder.
© 2021 DataLocker Inc. All rights reserved. 12

DL4 FE User Guide
2. Click Utilities and open Disk Utility. You will receive a warning message that the drive is not
readable. Click Ignore.
3. Select the unformatted DL4 disk.
4. Click the Erase tab at the top of the screen.
5. Rename the disk label to “DataLocker” and choose a file system.
6. Click Erase. The drive will begin formatting.
© 2021 DataLocker Inc. All rights reserved. 13

DL4 FE User Guide
7. When it is finished formatting, you may get a popup message asking if you would like to
backup your drive with Time Machine. Choose your preferred option.
8. Click Done. Your formatted DL4 should now appear under Devices.
Linux Compatibility and Configuration
The DL4 is platform independent, capable of being run with 100% compatibility on most systems.
For optimal Linux or Unix based system compatibility, we recommend using at least the Linux 2.6.31
Kernel (released 9 September 2009), which implemented the xHCI specification for USB 3.0.
Although older versions should work, they might run in USB 2.0 mode, which can be significantly
slower.
You can check your kernel version by typing the following command in the terminal:
# uname -r
In most newer distributions the drive should automatically mount. To format the drive, first, enter
terminal, then list detected hard disks using:
# fdisk -l | grep ’^Disk’
Your configuration may vary. For this example, we’ll assume the disk is at /dev/sdb.
You will then type:
# fdisk /dev/sdb
Follow the instructions in fdisk to create a new partition. Finally, use the mkfs command to format
the disk for Linux. Here, we use ext4.
# mkfs.ext4 /dev/sdb1
If you want to rename the drive, use the e2label command:
# e2label /dev/sdb1 /DataLocker
© 2021 DataLocker Inc. All rights reserved. 14

DL4 FE User Guide
Features
Administrator Menu
Menu Option Details
Previous Menu/
Back Button
Tap to go back to the previous menu screen
and save the current settings.
Next Menu/
Forward Button
Tap to go forward to the next menu screen.
Change Password Change current administrator password.
Set User Password Configure a user profile for use on your DL4.
Only available to administrator.
SafeConsole Used to Enable SafeConsole functionality for your DL4.
Only available to administrator.
Zeroize Drive Zeroize the device. Only available to administrator.
Self-Destruct Used to configure self-destruct counters and methods.
Only available to administrator.
Strong password Enable various options for increasing password strength.
Only available to administrator.
Required Password
Length
Set the acceptable minimum password length.
Only available to administrator.
Auto-lock Time Modify length of time before your device automatically locks.
Menu sounds Enable or disable menu sounds.
© 2021 DataLocker Inc. All rights reserved. 15

DL4 FE User Guide
Menu Option Details
Brightness Change the level of brightness for your device’s touch
screen.
Read-Only Mode Enable or disable forced read-only mode.
Only available to administrator.
Language Set preferred Language for the profile.
Touch Calibration Calibrate the touch screen interface.
User Menu
NOTE: This menu is only accessible after creating a user in the administrator menu. The User profile is
not available if SafeConsole is enabled for the device.
Menu Option Details
Previous Menu/
Back Button
Tap to go back to the previous menu screen
and save the current settings.
Change Password Change current user password.
Auto-lock Time Modify length of time before your device automatically locks.
Menu sounds Enable or disable menu sounds.
Brightness Change the level of brightness for your device’s touch
screen.
Language Set preferred Language for the profile.
Accessing the Onboard Administrator or User Menu
For detailed menu information, see Using the Administrator Menu OR Using the User Menu.
NOTE: If your drive was connected to your computer, disconnect your DL4 (See Disconnecting Your
DL4 FE), unplug and reinsert the USB cable to your computer.
1. Connect the DL4 to your computer with the included USB Cable.
OPTIONAL: If the USER profile is enabled, you will need to tap ADMIN OR USER when your DL4
loads.
2. Enter your password on the “ENTER PASSWORD” screen and tap Enter.
3. Tap the Gear icon to enter the Onboard Menu.
NOTE: After entering the password the connect screen is briefly shown for 10 seconds. To enter the
onboard administrator menu, you will need to tap the Gear icon quickly.
© 2021 DataLocker Inc. All rights reserved. 16

DL4 FE User Guide
Using the Administrator Menu
The administrator menu has various options and features spread over three screens. The administra-
tor menu helps administrators configure various functions that DL4 offers. The available administrator
menu features and settings are explained in their own sections below.
Once inside the administrator menu, the forward(2) and back(1) button can be used to navigate
through the administrator menu. The Back button can also be used to save and exit out of the
administrator menu to get back to the connect screen.
NOTE: Upon changing the values on the various functions, the DL4 automatically saves the changed
value when the Back button is pressed.
Change Password
This option allows the administrator to change the current administrator password. When setting up
a device, the administrator creates a password and if they desire to change it later this is where
they will update the password. Follow these steps to change the DL4 administrator password.
1. From the administrator menu, tap Change Password.
2. Enter the New Password and tap Enter.
3. Re-enter the password to confirm and tap Enter . You must confirm using the same password
you entered in Step 2.
4. Upon successful completion, the device defaults to page 1 of the administrator menu.
Set User Password
This allows the administrator to either Create or Disable a user password. When a user password
is created your DL4 will show a login selection screen upon the next DL4 connection. If User is
selected upon login, your DL4 will force the user to create a user login password. The user will
use this password to login to the device. The DL4 user has a limited feature set compared to the
administrator. For detailed information, see Using the User Menu. To create a User profile for your
DL4, follow the below steps.
© 2021 DataLocker Inc. All rights reserved. 17

DL4 FE User Guide
NOTE: The User profile is not available if SafeConsole is enabled for your DL4.
Step-by-step Process for Setting a User Password
1. From the administrator menu, Tap Set User Password.
2. Tap Create. (Option is set to Disable as default).
3. Tap Back from upper left to save and exit.
4. Your DL4 will show a “New User Password has been activated” prompt upon successful creation
of the user. Tap OK.
5. Your DL4 should default to the administrator menu.
Note: The above enables the user profile. Your DL4 will need to be ejected and unplugged from
the workstation for this profile to be available. The password for this user profile will be set when the
device is next plugged into a workstation and the User option is selected for log in. Detailed steps
for the user profile configuration are below. The User login will have its own User menu. For detailed
information, see Using the User Menu.
Step by step process for USER configuration
1. Plug your device into the computer.
2. Tap User when prompted to select login mode.
© 2021 DataLocker Inc. All rights reserved. 18

DL4 FE User Guide
3. Tap OK on the “Please create your password” screen.
4. Enter desired password on the “Enter New Password” screen. Tap Enter.
5. Confirm the new password and tap Enter . You must confirm using the same password you
entered in Step 4.
6. Tap Connect to connect the DL4 instantly or wait for 10 seconds for DL4 to automatically
connect to your computer.
Note: The User Menu can be accessed by tapping the Gear icon instead of tapping Connect . For
detailed information, see Using the User Menu.
SafeConsole
This option enables SafeConsole management for your DL4. SafeConsole is a central management
console used to optionally manage DL4 devices. Managed DL4s require a Connection Token upon
initialization. The SafeConsole Connection Token is obtained by the System administrator through
the Quick Connect Guide, located inside of the SafeConsole user interface. SafeConsole requires
a device license for activation. License sold separately.
Users without access to a Management Server, please contact sales: [e-mail] /
[phone]
SafeConsole offers several key features including audit logging, anti-malware services (license sold
separately), remote password reset, and more!
Enabling SafeConsole
1. From the administrator menu, Tap SafeConsole.
2. Tap Enable.
3. Tap Back from the upper left menu to save and exit to the administrator menu.
4. See Registering your DL4 FE to SafeConsole to complete registration.
Zeroize Drive
This feature allows the administrator to zeroize the drive. Performing this action deletes all the
data, removes the user and administrator passwords, and deletes the SilentKill Code. The Digital
Encryption Key will also be wiped and regenerated.
NOTE: Zeroize will retain the configuration set by the administrator.
How to Zeroize your DL4 FE
1. Tap the Zeroize Drive option from the administrator menu.
2. When your device asks for “Zeroize Drive”, tap Yes . Selecting No will cancel the Zeroize
process.
© 2021 DataLocker Inc. All rights reserved. 19

DL4 FE User Guide
3. When your device asks for “Delete ALL drive data?”, tap Yes . Selecting No will cancel the
Zeroize process.
4. When your DL4 shows the “Confirm Delete all drive data?” prompt, tap Continue . Selecting
Cancel will cancel the Zeroize process.
© 2021 DataLocker Inc. All rights reserved. 20