DataLocker Sentry K350 User manual

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.6.0 - User Guide
User Guide Sentry K350
FIPS 140-2 level 3 Certified
Encrypted USB Flash Drive
© 2022 DataLocker Inc. All rights reserved.

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
Table of Contents
At A Glance 5
Introduction 5
General operation of the encryption 5
Updating Your Device 5
About the K350 5
Getting Started 6
1. Press the power button for 3 seconds 6
2. Create and confirm your password, follow the screen instructions 6
3. Connect and start working 7
General Usage Best Practices - Password, Battery, IP67 7
K350 features and configurations 8
Connect Selection Menu 8
Connect Selection Menu Overview 8
Accessing the Configuration Menu 9
Login Role Selection 9
Configuration Menu Overview 9
Change Password 10
Set User 10
Step-by-step Process to Set User 10
Step by step process for USER configuration 10
Access User data as an Admin 11
Assist a user that forgot their password 11
SafeConsole 11
Self Destruct 11
Brute-Force Self-Destruct Sequence 12
Zeroize Drive 13
Strong Password 13
Password Length 13
Auto-Lock Time 14
Read-Only Mode 14
SilentKill Code 14
Generating a SilentKill Code 15
Registering Your K350 to SafeConsole 15
Using a SafeConsole Managed Device 16
Unlocking in SafeConsole Mode 16
Locking Your Managed K350 17
Manually Locking your K350 17
Setting your K350 to Automatically Lock 17
Standalone Logins 18
Requesting Standalone Logins 18
Using Standalone Logins 19
Password Reset 19
Unlocking In Read-Only Mode 20
Changing the Unlock Message 20
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 2

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
Scanning your Device for Malware 20
Restoring or Deleting a Quarantined File 21
Using ZoneBuilder 21
Reformat Using DataLocker Control Panel 22
Sanitize 22
Device Information 23
Before Unlocking 23
After Unlocking 23
Formatting Your K350 24
Selecting the Correct File System 24
Formatting Your K350 on Windows 24
Formatting Your K350 on macOS 26
Linux Compatibility and Configuration 28
Product Specifications 29
Getting Help 29
Document Version 30
Notices 31
Disclaimer 31
Patents 31
FCC Information 31
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 3

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
At A Glance
Introduction
Congratulations on your purchase of the DataLocker Sentry K350 hardware encrypted USB flash drive.
Although the K350 designed with user friendliness at its core, it is recommended that you review this
guide to ensure that you become fully acquainted with your K350 and make the most of all of its features.
General operation of the encryption
Your K350 utilizes a hardware encryption engine to encrypt and decrypt data that you store on the device.
When your device powered on, you will authenticate with the onboard system using your password to
enable the encryption and then plug into the host and use your data. When you lock, power off or
disconnect your device, the data is stored in an encrypted state.
Updating Your Device
Updated software and documentation are freely available for download at our website:
●Latest device updates - http://datalocker.com/device-updates
●Documentation and support - https://support.datalocker.com
About the K350
The K350 is a password protected, FIPS 140-2 Level 3 certified, encrypted USB drive featuring a screen
that streamlines setup and operation. If the K350 is centrally managed, additional layers of organizational
control strengthen the portable storage security posture further. Meet the strictest requirements and work
with ease anywhere there is USB mass storage. The K350 is the slim and strong addition to DataLocker’s
complete portfolio of securely managed solutions, plus it’s backed by a limited 3-year warranty.
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 4

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
Getting Started
1. Press the power button for 3 seconds
2. Create and confirm your password, follow the screen instructions
Press quickly on the number button to navigate all characters available on the button. Pick a proper
password Note: Linear and repetitive passwords are not supported and passwords must contain a
MINIMUM of 8 characters. It is recommended that you use a combination of letters, numbers and special
characters for your password.
Some examples of invalid passwords are:
‘78901234’, ‘43210987’, ’12345678’, ‘1111111’
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 5

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
3. Connect and start working
Select MENU to access all settings, such as enabling a user login. A white background with black text on
a selection denotes the current selection.
To start working with your data in a regular way confirm CONNECT selection and plug the drive into the
host USB port as shown on the screen.
The encryption is automatic. The K350 locks when it is unplugged from the host.
General Usage Best Practices - Password, Battery, IP67
Use a strong password, keep it to yourself and be sure to remember it. Remote password resets can be
enabled if the device is managed by SafeConsole. If the device is not managed, but there is both a Admin
and User role active, the Admin can assist the User to reset their password (while retaining the stored
data).
Only connect the K350 to USB ports. The K350 draws the correct amount of current (50mA) from the USB
port to charge the integrated Lithium-Ion battery even while in use. If the battery within the device is low,
charge it by plugging it into a USB port for 30 minutes before using the drive. If the device is left unused
for several months the battery will drain slowly. K350 can also be unlocked using solely the power from
the USB-port, should there be an unlikely, unexpected, battery issue.
The K350 is IP67-rated but must be completely dry before connecting to a computer.
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 6

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
K350 features and configurations
Connect Selection Menu
After unlock the Connect Selection Menu is displayed.
Connect Selection Menu Overview
CONNECT - Connect to the host computer (selected in the above example)
READ-ONLY - Connect the device storage as read-only to the host.
BOOT MODE - Boot an installed operating system from the device storage.
MENU - Access the Configration Menu
When the device is managed by SafeConsole the following two options may appear.
SAFECONSOLE - See the section Unlocking in SafeConsole Mode
STANDALONE - If the SafeConsole administrator allows it, the user can utilize Standalone Logins
temporarily when unlocking on systems that do not allow the management system control.
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 7

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
Accessing the Configuration Menu
In the Connect Selection you will select and confirm MENU to get to the Configuration Menu.
Login Role Selection
The contents of the Configuration Menu will depend on the role of the current login, the following roles
may be available:
ADMIN - The role allows full configuration control on the device, see Configuration Menu Overview.
USER - The User menu is available after creating a user in the administrator menu.
In the example below part of the Admin Configuration Menu options are displayed.
Configuration Menu Overview
Menu Option
Details
Available for Login
Change
Password
Change current login password.
USER/ADMIN
Set User
Configure a user profile for use on your
K350. 
ADMIN
SafeConsole
Used to Enable SafeConsole
functionality for your K350.
ADMIN
Self Destruct
Used to configure self-destruct counters
and methods.
ADMIN
Zeroize Drive
Zeroize the device. 
ADMIN
Strong Password
Enable various options for increasing
password strength
ADMIN
Password Length
Set the acceptable minimum password
length.
ADMIN
Auto-lock Time
Modify length of time before your device
auto-locks.
USER ADMIN
Read-Only Mode
Enable or disable forced read-only
mode.
ADMIN
Keypad
Preference
Set letters to appear first on password
entry.
ADMIN
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 8

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
Change Password
Available for Login USER/ADMIN
This option allows the to change the current password.
1. From the configuration menu, select and confirm Change Password.
2. Enter the new Password and confirm with the Enter-button.
3. Re-enter the password, confirm with the Enter-button.
4. Upon successful completion, the device goes back to the configuration menu.
Set User
Available for ADMIN
This allows the administrator to either Enable or Disable a user role. When a user is created your K350 will
show a login selection screen upon the next power up. If User is selected upon login, your K350 will force
the user to create a user unlock password. The user will use this password to unlock the device. The K350
user has a limited feature set compared to the administrator, see Configuration Menu Overview.
NOTE: The User profile is not available if SafeConsole is enabled for your K350.
Step-by-step Process to Set User
1. From the configuration menu, select and confirm Set User.
2. Select Enable and confirm with the Enter-button. In the example disable is selected.
3. Confirm with the Enter-button. Upon successful completion, the device goes back to the
configuration menu.
Step by step process for USER configuration
1. Power on K350.
2. Confirm login User (the default selection when the Set User is enabled) with the Enter-button when
prompted to select login mode.
3. Press Enter-button to proceed from the “Please create your password” screen.
4. Enter the new Password and confirm with the Enter-button.
5. Re-enter the password to confirm with the Enter-button.
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 9

DataLocker Sentry K350 Encrypted USB Flash Drive - v1.51/6.5.0 - User Guide
6. Select and confirm Connect.
Access User data as an Admin
1. Power on.
2. Select Admin role, confirm selection with Enter, unlock with the admin password.
3. Connect. User data is accessible on the private partition.
Assist a user that forgot their password
The scalable method for remote password resets with an audit trail is available when managing K350
with SafeConsole. If the K350 is not centrally managed and a User role is activated, the following
procedure can be used.
1. User forgets password.
2. Power off/on. Select Admin role, unlock with admin password.
3. Enter Configuration Menu and select Set User, select and confirm Disable. Power off/on.
4. Select Admin role, unlock again with Admin password.
5. Enter Configuration Menu and select Set User, select and confirm Enable. Power off/on.
6. Select User role, enter and confirm the new User password. Connect to confirm and access your
data.
SafeConsole
Available for ADMIN
This option enables SafeConsole management for your K350. SafeConsole is a central management
console used to optionally manage K350 devices. Managed K350s require a Connection Token upon
initialization. The SafeConsole Connection Token is obtained by the System administrator through the
Quick Connect Guide, located inside of the SafeConsole user interface. SafeConsole requires a device
license for activation. License sold separately.
Users without access to a Management Server, please contact sales: [e-mail] SafeConsole
offers several key features including audit logging, anti-malware services (license sold separately), remote
password reset, and more!
Enabling SafeConsole
1. From the configration menu, Select SafeConsole, confirm with Enter.
2. Select Enable, confirm with Enter. The device goes back to the configuration menu.
3. Power off/on.
4. See Registering your K350 to SafeConsole to complete registration.
Self Destruct
Available for ADMIN
The self destruct action helps prevent brute force attacks by triggering when an individual inputs an
incorrect password too many times.
This feature allows the administrator to set a threshold of incorrect password attempts for the K350
before the Self Destruct occurs. The administrator can also configure the self destruct to destroy the data,
encryption keys, and settings OR destroy the device (and data) when the defined number of allowed
© 2022 DataLocker Inc. All rights reserved. support.datalocker.com 10