DataLocker H300 User manual

H300/H350 User Guide
DataLocker Inc.
April, 2021
H300/H350
Basic and Enterprise
1

H300/H350 User Guide
Contents
About This Guide 4
Quick Start 4
About My Device 4
How Is This Different Than A Regular Hard Drive? . . . . . . . . . . . . . . . . . . . . . . . . . . 5
WhatSystemsCanIUseItOn?..................................... 6
CitrixCompatibilities........................................... 6
UpdatingYourDevice.......................................... 6
ProductSpecifications.......................................... 6
RecommendedBestPractices..................................... 7
Setting Up My Device 8
Device Access (Windows Environment) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Device Access (macOS Environment) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
BasicDeviceInitialization ........................................ 9
DataLockerControlPanel........................................ 10
Setting Up An Enterprise Device With SafeConsole . . . . . . . . . . . . . . . . . . . . . . . . . 10
Setting Up An Enterprise Device With IronKey EMS . . . . . . . . . . . . . . . . . . . . . . . . . 11
StrongPassword.............................................. 12
Using My Device - Basic And Enterprise Features 13
AccessingMySecureFiles ....................................... 13
UnlockingInRead-OnlyMode..................................... 13
ChangingTheUnlockMessage .................................... 13
LockingTheDevice ........................................... 14
ExitControlPanelOnLock ....................................... 15
Typing Passwords With The Virtual Keyboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
ManagingPasswords .......................................... 15
FormattingMyDevice.......................................... 16
Finding Information About My Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
EditingTheApplicationsList....................................... 17
ResettingMyDevice........................................... 18
© Copyright DataLocker Inc. 2

H300/H350 User Guide
Using My Device - Enterprise Only Features 18
Accessing My Device If I Forget My Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
RestrictedFilesNotifications....................................... 19
ScanningMyDeviceForMalware................................... 19
Sanitize................................................... 20
Using ZoneBuilder In SafeConsole . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Managing My Online Account (EMS Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Using My Device On Linux 22
UsingTheUnlocker ............................................ 22
Where Can I Get Help? 23
© Copyright DataLocker Inc. 3

H300/H350 User Guide
About This Guide
DataLocker H300 and H350 are available in Basic or Enterprise versions. The Basic version of the
H300/H350 does not require a management platform. The Enterprise version requires a device
license and can be managed by either SafeConsole® or IronKey® EMS. Both SafeConsole and
IronKey EMS are secure cloud or on-premises management platforms that allow your organization
to centrally manage compatible USB (Universal Serial Bus) storage devices easily and efficiently.
This guide will explain how to setup and initialize both a Basic and an Enterprise device.
Quick Start
Windows® & macOS® Setup
1. Plug the device into your computer’s USB port.
2. When the Device Setup window appears, follow the on-screen instructions. If this window
does not appear, open it manually:
• Windows: Start > This PC > Unlocker > Unlocker.exe
• macOS: Finder > Unlocker > Unlocker
3. When Device Setup is complete, you can move your important files to the PRIVATE_USB drive
and they will be automatically encrypted.
Some Windows systems prompt to restart after you first plug in your device. You can safely close
that prompt without restarting - no new drivers or software are installed.
About My Device
DataLocker H300 and H350 are USB 3.0, portable hard drives with built-in password security and
data encryption. They are designed to be the world’s most secure USB hard drives. Now you can
safely carry your files and data with you wherever you go.
© Copyright DataLocker Inc. 4

H300/H350 User Guide
How Is This Different Than A Regular Hard Drive?
FIPS 140-2 Level 3 Certification (H350 only) - The H350 is a FIPS-certified device, so you can feel
confident that you’re complying with regulatory requirements.
Hardware Encryption - The Cryptochip in your device protects your data with the same level of
protection as highly classified government information. This security technology feature is always
on and cannot be disabled.
Password-Protected - Device access is secured using password protection. Do not share your
password with anyone so that even if your device is lost or stolen, no one else can access your
data.
Secure Erase - If the Cryptochip detects physical tampering, or if the number of consecutive incor-
rect password attempts exceeds 10, the device will conduct a Secure Erase. This process will erase
all cryptographic components, destroying any data on the device. If configured, this process can
also initiate a permanent destruction of the device.
Simple Device Management - Your device includes the DataLocker Control Panel, a program for
accessing your files, managing your device and editing your preferences, changing your device
password, and safely locking your device.
Anti-Malware Autorun Protection (Enterprise Only) - Your device is capable of protecting you from
many of the latest malware threats targeting USB drives by detecting and preventing autorun
execution of unapproved programs. It can also be unlocked in Read-Only Mode if you suspect
the host computer is infected.
Online account (Enterprise Only) - Your online account allows you to use some Enterprise appli-
cations and features, such as resetting a password. Users can access their online account and
administrators can access the Admin Console through the DataLocker Control Panel.
© Copyright DataLocker Inc. 5

H300/H350 User Guide
What Systems Can I Use It On?
• Windows® 10
• Windows® 8.1
• Windows® 7
• macOS® (v10.13.x - 11.0.x)
• Linux (2.6 or higher) Note: The Linux CLI Unlocker does not support any features that require
network access, for example, setting up your device or changing your password.
Some applications are only available on specific systems:
Windows Only
• Virtual Keyboard (English only)
• Device Updates
Citrix Compatibilities
The H300 and H350 are compatible with:
• XenApp 7.14
• XenApp 7.15 LTSR
• XenApp 7.16
• XenApp 7.17
• XenDesktop 7.14
• XenDesktop 7.15 LTSR
• XenDesktop 7.16
• XenDesktop 7.17
Additionally, the H300 is also compatible with:
• Citrix Virtual Apps and Desktops service and Citrix Virtual Apps and Desktops service on
Azure®
Updating Your Device
For the latest system compatibility, including macOS 64bit support a device update may be re-
quired. It is recommended to always update your device to the latest version.
Updated software and documentation are freely available for download at our website:
• Latest device updates - http://datalocker.com/device-updates
• Documentation and support - https://support.datalocker.com
Important: Only the latest device updates should be applied to the device. Downgrading the
device to an older software or firmware version is not supported and can potential cause a loss of
stored data or impair other device functionality. The latest device updates will always be available
at the link above.
Product Specifications
For further details about your device, see the Device Info page in the DataLocker Control Panel.
© Copyright DataLocker Inc. 6

H300/H350 User Guide
Specification Details
Capacity* Rotational: 500GB, 1TB, 2TB
SSD: 500GB, 1TB
Dimensions 124.6mm x 86.6mm x 26.8mm
Weight 500GB: 10.8oz (306g)
1TB: 11.6oz (328g)
2TB: 11.8oz (334g)
Operating
Temperature
5°C to 55°C
Operating Shock 400 G (2ms)/990 G (1ms)
Hardware Encryption 256-bit AES (XTS Mode)
Hardware: 256-bit AES
Hashing: 256-bit SHA
PKI: 2048-bit RSA
EMI/EMC
Compliance
USA FCC, Europe CE, Canada ICES, Australia
C-Tick Taiwan BSMI, Japan VCCI, Korea KCC
(KCC ID: MSIP-REM-WKY-H300)
(KCC ID:MSIP-REM-WKY-H350)
Certification FIPS 140-2 level 3 certified (H350 only)
Hardware USB 3.0 compliant and USB 2.0 compliant
Requires 2 free drive letters
Hardware
Accessories
USB 3.0 type A to Micro B cable
OS Compatibility Windows 10, Windows 8.1, Windows 7 (SP1)
macOS v10.13.x-11.0.x
Linux 2.6.x**
Accessibility DataLocker Control Panel is designed to be Section 508
compliant. Users with disabilities have keyboard navigation
and screen reader support.
Warranty 5 Years Limited
Designed and assembled in the U.S.A., H300 and H350 devices do not require any software or
drivers to be installed.
* Advertised capacity is approximate. Some space is required for onboard software.
** Limited Feature Set. No online management features.
Recommended Best Practices
1. Lock the device:
© Copyright DataLocker Inc. 7

H300/H350 User Guide
• when not in use
• before unplugging it
• before the system enters sleep mode
2. Never unplug the device when the indicator LED is flashing.
3. The device password should be unique and should not be shared.
4. Perform a computer anti-virus scan before setting up the device
Setting Up My Device
To ensure there is ample power provided to the H300/H350 encrypted hard drive, insert it directly
into a USB 2.0/3.0 port on a notebook or desktop. Avoid connecting it to any peripheral devices
that may feature a USB port, such as a keyboard or USB-powered hub. Initial setup of the device
must be done on a supported Windows or macOS based operating system.
Device Access (Windows Environment)
1. Plug the H300/H350 encrypted hard drive into an available USB port on the notebook or
desktop and wait for Windows to detect it.
• Windows 7/8.1/10 users will receive a device driver notification.
• Once the new hardware detection is complete, Windows will prompt to begin the initial-
ization process.
2. Select the option Unlocker.exe inside of the Unlocker partition that can be found in File Ex-
plorer. Please note that the partition letter will vary based on the next free drive letter. The
drive letter may change depending on what devices are connected. In the image below,
the drive letter is E:.
Device Access (macOS Environment)
1. Plug the H300/H350 encrypted hard drive into an available USB port on the macOS notebook
or desktop and wait for the operating system to detect it.
2. Double click the Unlocker volume that appears on the desktop to start the initialization pro-
cess.
© Copyright DataLocker Inc. 8

H300/H350 User Guide
• If the Unlocker volume does not appear on the desktop, open Finder and locate the
Unlocker volume on the left side of the Finder window (listed under Devices.) Highlight
the volume and double-click the Unlocker application icon in the Finder window. This will
start the initialization process.
Note: macOS may prompt for additional permissions upon initialization to access removable
drives. Please allow this permission for the full functionality of the device.
Basic Device Initialization
Initialization of your H300 or H350 device will depend on if you have the Basic (Optionally Man-
aged) or Enterprise (Forced Managed) device. Initializing an H300/H350 Enterprise will require an
Activation Code or Connection Token from your IronKey EMS or SafeConsole Administrator. Iron-
Key EMS and SafeConsole require a device license for activation. License sold separately. For
information on how to initialize an H300/H350 Enterprise see: Setting Up An Enterprise Device.
1. Select a language preference from the list. By default, device software will use the same
language as your computer’s operating system (if available).
2. Review the license agreement, check the checkbox to accept it, and click Continue.
3. In the Password text box, type a device password, then re-enter your password in the Confirm
text box. The password protects the data on the secure drive. Passwords are case-sensitive
and must have at least 8 characters along with more requirements if Strong Password is en-
abled.
4. Select the action taken if the device is brute-forced either by an attack or a forgotten pass-
word. By default the device will reset, erasing all data. However it is possible to permanently
render the device inoperable if a higher level of security is desired.
Warning: This option can only be changed by unlocking the device with the current pass-
word. If the device is destructed due to a forgotten password the warranty will be voided.
5. If initializing on Windows, you will be given the option of formatting the PRIVATE_USB drive as
FAT32, NTFS, or exFAT. For more information, see Formatting My Device.
6. Click Continue. The device will finish initializing. Once complete, the DataLocker Control
Panel will open. Your device is now ready to store and protect your data.
© Copyright DataLocker Inc. 9

H300/H350 User Guide
DataLocker Control Panel
Upgrading My Device From Basic To Enterprise (Windows And macOS Systems Only)
If notified by your System Administrator, you can upgrade your DataLocker H300/H350 Basic device
to an Enterprise device. Enterprise devices are compatible with SafeConsole or IronKey EMS. When
you upgrade your device, you will be required to activate it using a Connection Token or Activation
Code, provided by your administrator. An internet connection is required to complete this process.
Important: Only start the upgrade process if your System Administrator has asked you to activate
your device with SafeConsole or IronKey EMS. Upgrading a device is not reversible. Once man-
aged, the device will remain managed, even after a reset.
To upgrade from Basic to Enterprise:
1. When you receive the Connection Token or Activation Code from your System Administra-
tor, start the DataLocker Control Panel and click Settings (Gear Icon). See the DataLocker
Control Panel for more information.
2. In the left sidebar, click Tools, then click Manage Device.
3. Paste the Connection Token or Activation Code in the Activation text box.
4. Follow the on-screen instructions.
5. Additional applications may be installed on your device based on the device policy settings
chosen by your System Administrator. You may also be required to change your password so
it conforms to the password security policy set for managed devices in your organization.
Setting Up An Enterprise Device With SafeConsole
The initialization process will begin by allowing the device to be ready to communicate with the
SafeConsole server. The steps needed to register an H300/H350 Enterprise to SafeConsole will
depend on the policies that your administrator is enforcing. Not all options will be shown.
© Copyright DataLocker Inc. 10

H300/H350 User Guide
A SafeConsole Connection Token will be needed. The SafeConsole Connection Token is obtained
by the System Administrator through the Quick Connect Guide, located inside of the SafeConsole
user interface.
Users without access to a Management Server, please contact sales: [e-mail] /
[phone]
1. Enter the SafeConsole Connection Token that is obtained in the steps above. Review the
license agreement, check the checkbox to accept it, and click Activate in the bottom left-
hand corner.
•Optionally Enabled Policies - These policies may or may not be enabled by your System
Administrator. They will appear during device registration if they have been enabled.
–Confirm Ownership of the device: Enter the Windows username and password that
is associated with the login credentials of the computer the device is plugged into.
–Custom Device Information: Required information about you or your device. The
required fields will vary.
–Unique User Token: This token is directly associated with the end user’s account and
will be provided by the System Administrator.
–Administrator Registration Approval: The System Administrator may require their ap-
proval to proceed with device registration.
2. Enter a secure Password and Confirm it. Once the password created meets the requirements
listed to the right side of the input fields, click Continue. The requirements of this password will
depend on the policy selected by your administrator. Passwords are case-sensitive and must
have at least 8 characters along with more requirements if Strong Password is enabled.
3. Choose a Secure Volume File System (see Formatting My Device) and click Continue.
4. The device will now finalize the setup process and be ready for use. Access the Encrypted
Storage by clicking the Folder Icon in the top menu. The settings of the device can be
accessed and altered by clicking the Gear Icon. See the DataLocker Control Panel for more
information.
Setting Up An Enterprise Device With IronKey EMS
The initialization process will begin by allowing the device to be ready to communicate with the
IronKey EMS server. NOTE: Functionality of Managed Sentry ONE Devices varies depending on
whether the device is managed by SafeConsole or IronKey EMS. Some functionality in this guide will
pertain exclusively to SafeConsole Managed Sentry ONE Devices. Examples include Anti-Malware
Quarantine, Device Santize and Restricted File notifications.
An IronKey EMS Activation Code will be needed. The IronKey EMS Activation Code is obtained by
the System Administrator through the IronKey EMS Console. This code can also be emailed to the
end user.
Users without access to a Management Server, please contact sales: [e-mail] /
[phone]
1. Enter the IronKey EMS Activation Code that is obtained in the steps above. Review the license
agreement, check the checkbox to accept it, and click Activate in the bottom left-hand
corner.
2. Enter a secure Password and Confirm it. Once the password created meets the requirements
listed to the right side of the input fields, click Continue.
© Copyright DataLocker Inc. 11

H300/H350 User Guide
3. Depending on the policy created by your System Administrator, you may be required to
create an Online Account. An email will be provided to the end user with the instructions on
how to create an online account. After the account has been confirmed, click OK.
• The user will receive an Online Account Error message if the online account has not been
created or there was an issue while attempting to verify the account.
4. Choose a Secure Volume File System (see Formatting My Device) and click Continue.
5. The device will now finalize the setup process and be ready for use. Access the encrypted
storage by clicking the Folder Icon in the top menu. The settings of the device can be ac-
cessed and altered by clicking the Gear Icon. See the DataLocker Control Panel for more
information.
Strong Password
While creating or changing the password for the device there is an option to enable Enforce
Strong Password. For Enterprise devices this option may be configured or enforced by your System
Administrator. When enabled the following rules are checked against all potential passwords.
• Must be at least eight (8) characters in length.
• Must include characters from at least three (3) of the following character classes:
–ASCII digits (0123456789) Note: If the last character of the password is an ASCII digit, then
it does not count as an ASCII digit for this restriction.
–lowercase ASCII (abc. . . xyz)
–uppercase ASCII (ABC. . . XYZ) Note: If the first character of the password is an uppercase
ASCII letter, then it is not counted as an uppercase ASCII letter for this restriction.
–non-alphanumeric ASCII (!@#$, etc)
–non-ASCII characters
Strong Password Examples
Example Passwords Results
password Failed: 8 characters long, however, only contains 1 unique
character class (lowercase ASCII).
Password1 Failed: 9 characters long, however the Capital ‘P’ and ‘1’ do
not count toward the unique character classes, leaving only
lowercase ASCII.
pa$$Word Pass: 8 characters long. Contains lowercase ASCII, uppercase
ASCII, and non-alphanumeric ASCII.
Note: These passwords are for examples only and should not be used when setting up the device.
© Copyright DataLocker Inc. 12

H300/H350 User Guide
Using My Device - Basic And Enterprise Features
Accessing My Secure Files
After unlocking the device, you can access your secure files. Files are automatically encrypted
and decrypted when you save or open them on the drive. This technology gives you the conve-
nience of working as you normally would with a regular drive, while providing strong, “always-on”
security.
To access your secure files:
1. Click Files on menu bar of the DataLocker Control Panel.
• Windows: Opens Windows Explorer to the PRIVATE_USB drive.
• macOS: Opens Finder to the PRIVATE_USB drive.
2. Do one of the following:
• To open a file, double-click the file on the PRIVATE_USB drive.
• To save a file, drag the file from your computer to the PRIVATE_USB drive.
Hint: You can also access your files by right-clicking the DataLocker Icon in the Windows taskbar
and clicking Secure Files.
Unlocking In Read-Only Mode
You can unlock your device in a read-only state so that files cannot be altered on your secure
drive. For example, when using an untrusted or unknown computer, unlocking your device in
Read-Only Mode will prevent any malware on that computer from infecting your device or modi-
fying your files. Enterprise devices can be forced to unlock in a read-only state by an administrator.
When working in this mode, the DataLocker Control Panel will display the text Read-Only Mode.
In this mode, you cannot perform any operations that involve modifying files on the device. For
example, you cannot reformat the device, restore applications or edit the Applications List, or edit
files on the drive.
To unlock the device in Read-Only Mode:
1. Insert the device into the USB port of the host computer and run the Unlocker.exe.
2. Check the Read-Only Checkbox below the password entry box.
3. Type your device password and click Unlock. The DataLocker Control Panel will appear with
the text Read-Only Mode at the bottom.
Changing The Unlock Message
The Unlock Message is custom text that displays in the Unlocker window when you unlock the
device. This feature allows you to customize the message that displays. For example, adding clas-
sification labels can help identify which documents can be saved to the device due to company
policy. For Enterprise devices, System Administrators have the ability to set a pre-defined message
and disable the ability for it to be changed or created.
To change the Unlock Message:
© Copyright DataLocker Inc. 13

H300/H350 User Guide
1. In the DataLocker Control Panel, click Settings on the menu bar.
2. Click Preferences in the left sidebar.
3. Type the message text in the Unlock Message field. The text must fit in the space provided
(approximately 7 lines and 200 characters).
Locking The Device
Lock your device when you are not using it to prevent unwanted access to your secure files on the
drive. You can manually lock the device or you can set the device to automatically lock after a
specified period of inactivity. For Enterprise devices, this feature may or may not be enabled by
your System Administrator.
Caution: By default, if a file or application is open when the device tries to auto-lock, it will not
force the application or file to close. Although you can configure the auto-lock setting to force
the device to lock, doing so can result in loss of data to any open and unsaved files.
If your files have become corrupt from a forced lock procedure or from unplugging the device
before locking, you might be able to recover the files by running CHKDSK and using data recovery
software (Windows only).
To manually lock the device:
1. Click Lock in the bottom left-hand corner of the DataLocker Control Panel to safely lock your
device.
• You can also use the keyboard shortcut: CTRL + L (Windows only), or right-click the Dat-
aLocker Icon in the system tray and click Lock Device.
Note: Enterprise devices will automatically lock during use if an administrator remotely disables
the device. You will not be able to unlock the device until the System Administrator re-enables the
device.
To set a device to automatically lock:
1. Unlock your device and click Settings on the menu bar in the DataLocker Control Panel.
2. Click Preferences in the left sidebar.
3. Click the Checkbox for auto-locking the device and set the time-out to one of the following
time intervals: 5, 15, 30, 60, 120, or 180 minutes.
To run CHKDSK (Windows only):
1. Unlock the device.
2. Press the WINDOWS LOGO KEY + R to open the Run prompt:
3. Type CMD and press ENTER.
4. From the command prompt, type CHKDSK, the PRIVATE_USB drive letter, then “/F /R”. For
example, if the PRIVATE_USB drive letter is G, you would type: CHKDSK G: /F /R
5. Use data recovery software if necessary in order to recover your files.
© Copyright DataLocker Inc. 14

H300/H350 User Guide
Exit Control Panel On Lock
When your device is locked, the Control Panel will close automatically. To unlock the device and
access the Control Panel, you will need to run the Unlocker application again. If desired, the
Control Panel can be set to return to the Unlock screen after the user locks the device.
To disable Exit Control Panel on lock:
1. Unlock your device and click Settings on the menu bar in the DataLocker Control Panel.
2. Click Preferences in the left sidebar.
3. Click the Checkbox for Exit Control Panel on lock.
Typing Passwords With The Virtual Keyboard
If you are unlocking your device on an unfamiliar computer and are concerned about keylogging
and screen logging spyware, use the Virtual Keyboard. It helps protect your device password by
letting you click out letters and numbers. The underlying techniques in the Virtual Keyboard will
bypass many trojans, keyloggers, and screen loggers.
Note: This feature uses a standard QWERTY key set. It is available on Windows only and the lan-
guage preference for the device must be set to English.
To type a password using the Virtual Keyboard (Windows only):
1. Open the Virtual Keyboard by doing one of the following actions:
• In the password field, click the Virtual Keyboard Icon.
• When the keyboard focus is in a password field, press CTRL+ALT+ V.
2. Click the keys to type your password, and then click Enter.
You can also use the Virtual Keyboard in conjunction with the actual keyboard, so that you type
some characters and click some characters.
Hint: Click Randomize to arrange the keys in a random order. This helps protect against screen
loggers.
Note: When you click a key in the Virtual Keyboard, all of the keys briefly go blank. This feature
prevents screen loggers from capturing what you clicked. To disable this feature, click the icon
(beside the Exit button) and choose Disable Screen Logger Protection.
Managing Passwords
You can change your password on your device by accessing the Password tab in the DataLocker
Control Panel.
For Enterprise devices, password policy settings are determined by your System Administrator.
Sometimes, you may be required to change your password to comply with new corporate pass-
word policies. When a change is required, the Password Change screen will appear the next time
you unlock the device. If the device is in use, it will lock and you will have to change the password
before you can unlock it. Passwords are case-sensitive and must have at least 8 characters along
with more requirements if Strong Password is enabled.
© Copyright DataLocker Inc. 15

H300/H350 User Guide
Note: When a password is required, for example, when logging into the device or during a manual
password change operation, you can use the Virtual Keyboard instead of the actual keyboard to
type the password.
To change your password:
1. Unlock your device and click Settings on the menu bar.
2. Click Password in the left sidebar
3. Enter your current password in the field provided.
4. Enter your new password and confirm it in the fields provided.
5. Click Change Password.
Formatting My Device
Your device will need to be formatted during initialization, before it can be used to store files.
If initializing on Windows, you will be given the option of formatting the PRIVATE_USB drive as FAT32,
NTFS, or exFAT.
Options are for Windows operating systems only - macOS will automatically format to FAT32
•FAT32
–Pros: Cross-platform compatible (Windows, macOS, and Linux)
–Cons: Limited individual file size of 4GB
•NTFS
–Pros: No file size limitations
–Cons: Limited cross-platform compatibility - Windows and macOS (read-only)
•exFAT
–Pros: No file size limitations
–Cons: Microsoft restricts usage by license obligations
After initialization, reformatting the PRIVATE_USB drive will erase all your files and your Application
List, but will not erase your device password and settings.
Important: Before you reformat the device, back up your PRIVATE_USB drive to a separate location,
for example, to cloud storage or your computer.
Note: For managed devices, the System Administrator may limit the ability to reformat drives if a
filesystem already exists on the drive.
To reformat a device:
1. Unlock your device and click Settings on the menu bar of the DataLocker Control Panel.
2. Click Tools on the left sidebar.
3. Under Device Health, select the file format and click Reformat Secure Volume.
© Copyright DataLocker Inc. 16

H300/H350 User Guide
Finding Information About My Device
Use the Capacity Meter, located at the bottom right of the DataLocker Control Panel, to see how
much storage space is still available on your device. The green bar graph represents how full the
device is. For example, the meter will be totally green when the device is full. The white text on
the Capacity Meter displays how much free space remains.
For general information about your device, see the Device Info page.
To view device information:
1. Unlock your device and click Settings on the menu bar of the DataLocker Control Panel.
2. Click Device Info in the left sidebar.
The About This Device section includes the following details about your device:
• Model Number
• Hardware ID
• Serial Number
• Software Version
• Firmware Version
• Release Date
• Secure Files Drive Letter
• Unlocker Drive Letter
• Operating System and System administrative Privileges
• Management Console
Note: To visit the DataLocker website or access more information about legal notices or certifica-
tions for DataLocker products, click one of the information buttons on the Device Info page.
Hint: Click Copy to copy the device information to the clipboard so that you can paste it in an
email or support request.
Editing The Applications List
The Applications List, located in the DataLocker Control Panel, is the area where you can quickly
launch on-board applications and files. Items that appear in the list are shortcuts to the actual
files. Managing the list items does not alter the actual file.
Note: For Enterprise devices, your System Administrator may have this option disabled.
To edit the Applications List:
1. Unlock your device. The DataLocker Control Panel will appear with the Applications List se-
lected by default.
2. If the DataLocker Control Panel is already open, click the Applications Icon on the menu bar
to view the Applications List. Do one of the following:
• To add a file or application shortcut: Drag a file from the desktop to the Applications List
area to add it to the list. You can also right-click the Applications List area and click Add
Application.
• To rename or delete list items: Right-click the application or file and choose the action
from the menu.
• To sort or change the way icons appear in the list: Right-click anywhere in the Applica-
tion list and choose Large Icons, List, Tile, or Sort Alphabetically.
© Copyright DataLocker Inc. 17

H300/H350 User Guide
Functions of the Applications List:
• You can add any file to the list, including documents, images, and batch files.
• For items that are not applications, the operating system opens the item with the default
program associated with that file type.
• Items that are Windows executables will be hidden from view on macOS. Similarly, macOS
application files will be hidden from view on Windows computers.
Resetting My Device
Your device can be reverted back to factory settings. This will securely wipe all data from the
device and a new security key will be created for the next use.
For Enterprise devices, your System Administrator may have this option disabled. Contact your
administrator if you need to reset your device.
Resetting your device:
1. Unlock your device.
2. Right-click on the DataLocker Icon in the system tray.
3. Click Reset Device.
To prevent accidental device resets a popup will ask to enter a random four digits. After entering
the confirmation, the device will now be reset back to factory settings.
Note: If the device was originally Basic and connected to a management server, the manage-
ment requirements will still be enforced even after a reset.
Using My Device - Enterprise Only Features
Accessing My Device If I Forget My Password
If you forget your password and an administrator has granted you password reset privileges, you
can reset it. If your administrator has not granted password reset privileges, you must contact your
administrator for help resetting your password.
To reset your password:
1. Plug in your device and start the Unlocker.
2. Click Password Help.
3. Depending on the management platform, you may receive an email with instructions on
how to obtain your recovery code. Otherwise, you will need to contact your administrator to
obtain this code. In the latter case, you may be required to provide the request code and
serial number to your System Administrator. Your System Administrator’s email and phone
number should be provided for your convenience. Clicking the email address will open up
your default email client and pre-populate this information to be sent.
4. Once received the recovery code will need to be copied and pasted exactly as it is given
to you. Incorrect codes count against the ten unlock attempts before the device is reset.
© Copyright DataLocker Inc. 18

H300/H350 User Guide
5. Type your new password (or use the Virtual Keyboard) and confirm it in the fields provided,
then click Change Password.Note: Passwords are case-sensitive and must have at least 8
characters along with more requirements if Strong Password is enabled.
Warning: If the device is currently offline from the management server a warning will be shown
that the new password will not be able to backed up until the device is unlocked while online. If
you believe this message is shown in error, please contact your System Administrator immediately.
Restricted Files Notifications
If enabled by your SafeConsole administrator, your device may restrict certain files from being
saved to the secure storage. When an affected file is restricted, you will receive a notification
containing the file’s name. If desired, you can disable these notifications.
NOTE: Affected files will still be restricted when notifications are disabled.
To disable restricted files notifications:
1. Unlock your device and click Settings on the menu bar in the DataLocker Control Panel.
2. Click Preferences in the left sidebar.
3. Click the Checkbox for Show restricted files notifications.
Scanning My Device For Malware
If enabled by your SafeConsole administrator, the Malware Scanner is a self-cleaning technology
that detects and quarantines malware on your device. Powered by the McAfee® anti-virus and
anti-malware signature database, and constantly updated to combat the latest malware threats,
the scanner first checks for the latest updates, scans your device, then reports and cleans any
malware that is found.
Your system administrator may require the anti-malware definition to be updated before the de-
vice can be unlocked. In this event, the full anti-malware definition will need to be downloaded to
a temporary folder on the local computer before the password can be entered. This can increase
the time it takes to unlock the device based on the host computer’s networking connection and
the size of malware updates needed.
Some things to know about scanning your device:
• The scanner runs automatically when you unlock your device.
• It scans all onboard files (compressed and uncompressed).
• It will report and delete any detected malware.
• (Optional) If your SafeConsole Administrator has enabled Quarantine, it may quarantine any
malware it finds. See Restoring or Deleting a Quarantined File for more information.
• The scanner will automatically update itself before each scan to protect you from the latest
malware threats.
• An update requires an internet connection. Ensure a minimum of 135 MB of free space on
the device to accommodate the downloaded malware signature files.
• Your first update may take a long time to download, depending on your internet connection.
• The date of the last update is displayed in the Control Panel.
• If the scanner becomes too far out of date, it will need to download a large file to bring it
back up-to-date.
© Copyright DataLocker Inc. 19

H300/H350 User Guide
Restoring or Deleting a Quarantined File
If your SafeConsole administrator has enabled Quarantine, you will have the option of restoring
or deleting detected malware. This process helps when McAfee® detects a valid document as
malware.
NOTE: Depending on the size of infected files, Quarantine may not be available. If the file cannot
be quarantined, it will be deleted. Deleted files cannot be restored using the following process.
If a file is detected as infected, a warning dialog will be shown with the option to lock the drive
at that time. Quarantined files remain on the device in an encrypted state to prevent further
execution.
To view quarantined files:
1. Unlock your device and click Settings in the DataLocker Control Panel.
2. Click Quarantine on the left sidebar.
Selecting a file from the list will display additional details including, Threat Name, Threat Type, anti-
malware definition version, and the date of quarantine. After the file is selected files can either be
Restored or Deleted.
Restored files will be exempt from automatic scanning while the device is currently unlocked. The
file will be scanned during the next unlock or if a manual scan is selected from the Anti-Malware
tab. If the anti-malware definitions still determine that the file is infected, it will quarantine the file
once again.
Deleted files will be permanently deleted.
Sanitize
Sanitize allows for the contents of the encrypted drive to be securely erased. This is accomplished
by erasing the encryption key that the drive uses to access files on the Secure Volume while still
retaining the connection to SafeConsole.
Warning: Performing this action will completely erase all data on the Secure Volume. This action is
permanent.
The ability to sanitize a drive depends on the settings configured by your SafeConsole administra-
tor. If allowed your drive can be sanitized by the following steps:
1. Unlock your device and open the device Control Panel by launching Unlocker.exe.
2. Right click the system tray icon for the Control Panel and select Sanitize Device.
3. Enter the numbers prompted in the dialog box to confirm that all data can be wiped from
the drive.
4. The device will reset. Unplug and plug your device back into your workstation.
5. Launch Unlocker.exe and input the device password.
© Copyright DataLocker Inc. 20