DataLocker H300 User manual

H300/H350 User Guide
DataLocker Inc.
April, 2021
H300/H350
Basic and Enterprise
1

H300/H350 User Guide
Contents
About This Guide 4
Quick Start 4
About My Device 4
How Is This Different Than A Regular Hard Drive? . . . . . . . . . . . . . . . . . . . . . . . . . . 5
WhatSystemsCanIUseItOn?..................................... 6
CitrixCompatibilities........................................... 6
UpdatingYourDevice.......................................... 6
ProductSpecifications.......................................... 6
RecommendedBestPractices..................................... 7
Setting Up My Device 8
Device Access (Windows Environment) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
Device Access (macOS Environment) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 8
BasicDeviceInitialization ........................................ 9
DataLockerControlPanel........................................ 10
Setting Up An Enterprise Device With SafeConsole . . . . . . . . . . . . . . . . . . . . . . . . . 10
Setting Up An Enterprise Device With IronKey EMS . . . . . . . . . . . . . . . . . . . . . . . . . 11
StrongPassword.............................................. 12
Using My Device - Basic And Enterprise Features 13
AccessingMySecureFiles ....................................... 13
UnlockingInRead-OnlyMode..................................... 13
ChangingTheUnlockMessage .................................... 13
LockingTheDevice ........................................... 14
ExitControlPanelOnLock ....................................... 15
Typing Passwords With The Virtual Keyboard . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 15
ManagingPasswords .......................................... 15
FormattingMyDevice.......................................... 16
Finding Information About My Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 17
EditingTheApplicationsList....................................... 17
ResettingMyDevice........................................... 18
© Copyright DataLocker Inc. 2

H300/H350 User Guide
Using My Device - Enterprise Only Features 18
Accessing My Device If I Forget My Password . . . . . . . . . . . . . . . . . . . . . . . . . . . . 18
RestrictedFilesNotifications....................................... 19
ScanningMyDeviceForMalware................................... 19
Sanitize................................................... 20
Using ZoneBuilder In SafeConsole . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Managing My Online Account (EMS Only) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 21
Using My Device On Linux 22
UsingTheUnlocker ............................................ 22
Where Can I Get Help? 23
© Copyright DataLocker Inc. 3

H300/H350 User Guide
About This Guide
DataLocker H300 and H350 are available in Basic or Enterprise versions. The Basic version of the
H300/H350 does not require a management platform. The Enterprise version requires a device
license and can be managed by either SafeConsole® or IronKey® EMS. Both SafeConsole and
IronKey EMS are secure cloud or on-premises management platforms that allow your organization
to centrally manage compatible USB (Universal Serial Bus) storage devices easily and efficiently.
This guide will explain how to setup and initialize both a Basic and an Enterprise device.
Quick Start
Windows® & macOS® Setup
1. Plug the device into your computer’s USB port.
2. When the Device Setup window appears, follow the on-screen instructions. If this window
does not appear, open it manually:
• Windows: Start > This PC > Unlocker > Unlocker.exe
• macOS: Finder > Unlocker > Unlocker
3. When Device Setup is complete, you can move your important files to the PRIVATE_USB drive
and they will be automatically encrypted.
Some Windows systems prompt to restart after you first plug in your device. You can safely close
that prompt without restarting - no new drivers or software are installed.
About My Device
DataLocker H300 and H350 are USB 3.0, portable hard drives with built-in password security and
data encryption. They are designed to be the world’s most secure USB hard drives. Now you can
safely carry your files and data with you wherever you go.
© Copyright DataLocker Inc. 4

H300/H350 User Guide
How Is This Different Than A Regular Hard Drive?
FIPS 140-2 Level 3 Certification (H350 only) - The H350 is a FIPS-certified device, so you can feel
confident that you’re complying with regulatory requirements.
Hardware Encryption - The Cryptochip in your device protects your data with the same level of
protection as highly classified government information. This security technology feature is always
on and cannot be disabled.
Password-Protected - Device access is secured using password protection. Do not share your
password with anyone so that even if your device is lost or stolen, no one else can access your
data.
Secure Erase - If the Cryptochip detects physical tampering, or if the number of consecutive incor-
rect password attempts exceeds 10, the device will conduct a Secure Erase. This process will erase
all cryptographic components, destroying any data on the device. If configured, this process can
also initiate a permanent destruction of the device.
Simple Device Management - Your device includes the DataLocker Control Panel, a program for
accessing your files, managing your device and editing your preferences, changing your device
password, and safely locking your device.
Anti-Malware Autorun Protection (Enterprise Only) - Your device is capable of protecting you from
many of the latest malware threats targeting USB drives by detecting and preventing autorun
execution of unapproved programs. It can also be unlocked in Read-Only Mode if you suspect
the host computer is infected.
Online account (Enterprise Only) - Your online account allows you to use some Enterprise appli-
cations and features, such as resetting a password. Users can access their online account and
administrators can access the Admin Console through the DataLocker Control Panel.
© Copyright DataLocker Inc. 5

H300/H350 User Guide
What Systems Can I Use It On?
• Windows® 10
• Windows® 8.1
• Windows® 7
• macOS® (v10.13.x - 11.0.x)
• Linux (2.6 or higher) Note: The Linux CLI Unlocker does not support any features that require
network access, for example, setting up your device or changing your password.
Some applications are only available on specific systems:
Windows Only
• Virtual Keyboard (English only)
• Device Updates
Citrix Compatibilities
The H300 and H350 are compatible with:
• XenApp 7.14
• XenApp 7.15 LTSR
• XenApp 7.16
• XenApp 7.17
• XenDesktop 7.14
• XenDesktop 7.15 LTSR
• XenDesktop 7.16
• XenDesktop 7.17
Additionally, the H300 is also compatible with:
• Citrix Virtual Apps and Desktops service and Citrix Virtual Apps and Desktops service on
Azure®
Updating Your Device
For the latest system compatibility, including macOS 64bit support a device update may be re-
quired. It is recommended to always update your device to the latest version.
Updated software and documentation are freely available for download at our website:
• Latest device updates - http://datalocker.com/device-updates
• Documentation and support - https://support.datalocker.com
Important: Only the latest device updates should be applied to the device. Downgrading the
device to an older software or firmware version is not supported and can potential cause a loss of
stored data or impair other device functionality. The latest device updates will always be available
at the link above.
Product Specifications
For further details about your device, see the Device Info page in the DataLocker Control Panel.
© Copyright DataLocker Inc. 6

H300/H350 User Guide
Specification Details
Capacity* Rotational: 500GB, 1TB, 2TB
SSD: 500GB, 1TB
Dimensions 124.6mm x 86.6mm x 26.8mm
Weight 500GB: 10.8oz (306g)
1TB: 11.6oz (328g)
2TB: 11.8oz (334g)
Operating
Temperature
5°C to 55°C
Operating Shock 400 G (2ms)/990 G (1ms)
Hardware Encryption 256-bit AES (XTS Mode)
Hardware: 256-bit AES
Hashing: 256-bit SHA
PKI: 2048-bit RSA
EMI/EMC
Compliance
USA FCC, Europe CE, Canada ICES, Australia
C-Tick Taiwan BSMI, Japan VCCI, Korea KCC
(KCC ID: MSIP-REM-WKY-H300)
(KCC ID:MSIP-REM-WKY-H350)
Certification FIPS 140-2 level 3 certified (H350 only)
Hardware USB 3.0 compliant and USB 2.0 compliant
Requires 2 free drive letters
Hardware
Accessories
USB 3.0 type A to Micro B cable
OS Compatibility Windows 10, Windows 8.1, Windows 7 (SP1)
macOS v10.13.x-11.0.x
Linux 2.6.x**
Accessibility DataLocker Control Panel is designed to be Section 508
compliant. Users with disabilities have keyboard navigation
and screen reader support.
Warranty 5 Years Limited
Designed and assembled in the U.S.A., H300 and H350 devices do not require any software or
drivers to be installed.
* Advertised capacity is approximate. Some space is required for onboard software.
** Limited Feature Set. No online management features.
Recommended Best Practices
1. Lock the device:
© Copyright DataLocker Inc. 7

H300/H350 User Guide
• when not in use
• before unplugging it
• before the system enters sleep mode
2. Never unplug the device when the indicator LED is flashing.
3. The device password should be unique and should not be shared.
4. Perform a computer anti-virus scan before setting up the device
Setting Up My Device
To ensure there is ample power provided to the H300/H350 encrypted hard drive, insert it directly
into a USB 2.0/3.0 port on a notebook or desktop. Avoid connecting it to any peripheral devices
that may feature a USB port, such as a keyboard or USB-powered hub. Initial setup of the device
must be done on a supported Windows or macOS based operating system.
Device Access (Windows Environment)
1. Plug the H300/H350 encrypted hard drive into an available USB port on the notebook or
desktop and wait for Windows to detect it.
• Windows 7/8.1/10 users will receive a device driver notification.
• Once the new hardware detection is complete, Windows will prompt to begin the initial-
ization process.
2. Select the option Unlocker.exe inside of the Unlocker partition that can be found in File Ex-
plorer. Please note that the partition letter will vary based on the next free drive letter. The
drive letter may change depending on what devices are connected. In the image below,
the drive letter is E:.
Device Access (macOS Environment)
1. Plug the H300/H350 encrypted hard drive into an available USB port on the macOS notebook
or desktop and wait for the operating system to detect it.
2. Double click the Unlocker volume that appears on the desktop to start the initialization pro-
cess.
© Copyright DataLocker Inc. 8

H300/H350 User Guide
• If the Unlocker volume does not appear on the desktop, open Finder and locate the
Unlocker volume on the left side of the Finder window (listed under Devices.) Highlight
the volume and double-click the Unlocker application icon in the Finder window. This will
start the initialization process.
Note: macOS may prompt for additional permissions upon initialization to access removable
drives. Please allow this permission for the full functionality of the device.
Basic Device Initialization
Initialization of your H300 or H350 device will depend on if you have the Basic (Optionally Man-
aged) or Enterprise (Forced Managed) device. Initializing an H300/H350 Enterprise will require an
Activation Code or Connection Token from your IronKey EMS or SafeConsole Administrator. Iron-
Key EMS and SafeConsole require a device license for activation. License sold separately. For
information on how to initialize an H300/H350 Enterprise see: Setting Up An Enterprise Device.
1. Select a language preference from the list. By default, device software will use the same
language as your computer’s operating system (if available).
2. Review the license agreement, check the checkbox to accept it, and click Continue.
3. In the Password text box, type a device password, then re-enter your password in the Confirm
text box. The password protects the data on the secure drive. Passwords are case-sensitive
and must have at least 8 characters along with more requirements if Strong Password is en-
abled.
4. Select the action taken if the device is brute-forced either by an attack or a forgotten pass-
word. By default the device will reset, erasing all data. However it is possible to permanently
render the device inoperable if a higher level of security is desired.
Warning: This option can only be changed by unlocking the device with the current pass-
word. If the device is destructed due to a forgotten password the warranty will be voided.
5. If initializing on Windows, you will be given the option of formatting the PRIVATE_USB drive as
FAT32, NTFS, or exFAT. For more information, see Formatting My Device.
6. Click Continue. The device will finish initializing. Once complete, the DataLocker Control
Panel will open. Your device is now ready to store and protect your data.
© Copyright DataLocker Inc. 9

H300/H350 User Guide
DataLocker Control Panel
Upgrading My Device From Basic To Enterprise (Windows And macOS Systems Only)
If notified by your System Administrator, you can upgrade your DataLocker H300/H350 Basic device
to an Enterprise device. Enterprise devices are compatible with SafeConsole or IronKey EMS. When
you upgrade your device, you will be required to activate it using a Connection Token or Activation
Code, provided by your administrator. An internet connection is required to complete this process.
Important: Only start the upgrade process if your System Administrator has asked you to activate
your device with SafeConsole or IronKey EMS. Upgrading a device is not reversible. Once man-
aged, the device will remain managed, even after a reset.
To upgrade from Basic to Enterprise:
1. When you receive the Connection Token or Activation Code from your System Administra-
tor, start the DataLocker Control Panel and click Settings (Gear Icon). See the DataLocker
Control Panel for more information.
2. In the left sidebar, click Tools, then click Manage Device.
3. Paste the Connection Token or Activation Code in the Activation text box.
4. Follow the on-screen instructions.
5. Additional applications may be installed on your device based on the device policy settings
chosen by your System Administrator. You may also be required to change your password so
it conforms to the password security policy set for managed devices in your organization.
Setting Up An Enterprise Device With SafeConsole
The initialization process will begin by allowing the device to be ready to communicate with the
SafeConsole server. The steps needed to register an H300/H350 Enterprise to SafeConsole will
depend on the policies that your administrator is enforcing. Not all options will be shown.
© Copyright DataLocker Inc. 10