IronKey ENTERPRISE S250 User manual

Last Updated: July15, 2016
IR ONK E Y™ BASIC S250/D250
User Guide

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 2
QUICK START
Windows & Mac Setup
1. Plug the device into your computer’s USB port (Windows Vista (SP2),7 (SP1),8, 8.1 or Mac 10.9.x
- 10.11.x)
2. When theDevice Setupwindowappears,followtheonscreeninstructions.
Ifthiswindowsdoesnotappear,openitmanually:
Windows: Start > My Computer > IronKey Unlocker > IronKey.exe
Mac: Finder > IronKey Unlocker > Mac > IronKey
3. When Device Setup is complete,you can move your important files tothe“SecureFiles” drive
and they will be automatically encrypted.
SomeWindows systems prompt to restart after you first plug in your device.You can safely
close that prompt without restarting—no new drivers or software are installed.
Linux Setup
1. Plugitintoyourcomputer’sUSBport(Linux2.6+)
2. Runthe“ironkey”programfrom the device’slinuxfolderand follow the onscreeninstructions.
デバイスのセットアップ
1.デバイスをコンピューターのUSBポートに接続します。
2.「IronKey Unlocker」ドライブから、「IronKey」アプリケーションを起動します。
3.画面の指示に従い、詳細はユーザーガイドをご覧ください。
デバイスを使う準備はこれで完了です。
장치 설치
1. 컴퓨터 USB 포트로 장치를 플러그 인하세요.
2. “IronKey Unlocker” 드라이브 상에, “IronKey” 어플리케이션을 런치하세요. 3.
화면상설명서를따르고더자세한정보는사용자가이드를참조하세요.고객님의
장치는 사용할 준비가 되었습니다.
设备安装
1. 将设备插到电脑的 USB 接口。
2. 在“IronKey Unlocker”驱动器上，启动“IronKey”应用程序。
3. 按照屏幕上的说明操作。垂询详情，请阅读用户指南。您的设备可以使用了。
裝置安裝
1. 將裝置插到電腦的 USB 埠。
2. 在「IronKey Unlocker」磁碟機上，啟動「IronKey」應用程式。
3. 按照螢幕上的說明操作。垂詢詳情，請閱讀使用者指南。您的裝置可以使用了。
Configuración del dispositivo
1.Conecte el dispositivo en el puerto USB del ordenador.
2. En la unidad “IronKey Unlocker”, ejecute la aplicación “IronKey”.
3. SigalasinstruccionesenpantallaylealaGuíadelusuarioparamásinformación.Sudispositivoestá
preparadopara suuso.
Installation
1.Insérezle lecteur dans un port USB de l’ordinateur.
2. Lancez l’application “IronKey” à partir du lecteur “IronKey Unlocker”
3. Suivez les instructions à l’écran et consultez le guide d’utilisation pour plus d’informations.
Votrelecteur flash USB est prêt à êtreutilisé.
Geräte-Setup
1.Stecken Sie das Gerät in einen freien USB-Port des Computers.
2. Starten Sie die “IronKey”-Anwendung auf dem “IronKey Unlocker”-Laufwerk.
3. Befolgen Sie die Anweisungen auf dem Bildschirm konsultieren Sie das Benutzerhandbuch für
weiterführende Informationen. Ihr Gerät ist einsatzbereit.
Deutsch
français
español
English
中文
한국어
日本語

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 3
CONTENTS
QUICK START ............................................................................................ 2
WHAT IS IT? ................................................................................................... 4
H OW IS IT DIFFERENT THAN ARE REGULAR FLASH DRIVE ? ................................................................................. 4
HOW DO I USE IT?........................................................................................ 5
WHAT SYSTEMS CAN IUSE IT ON?................................................................................................................. 5
HOW DO ISETUP THE DEVICE? ...................................................................................................................... 5
HOW DO IUNLOCK THE DEVICE? ................................................................................................................. 6
WHAT DO IDO IF IFORGET MY PASSWORD?................................................................................................ 7
HOW DO IACCESS MY SECURE FILES?............................................................................................................. 7
H OW DO I ENCRYPT AND DECRYPT FILES ? ...................................................................................................... 7
HOW DO IUSE THE CONTROL PANEL? ........................................................................................................ 7
QUICKLY ASSESSING SECURE FILES ................................................................................................................................................ 8
LOCKINGTHE DEVICE ............................................................................................................................................................................ 8
DETERMINE HOW MUCH SPACE ISAVAILABLEONTHE DEVICE .............................................................................. 8
USINGTHEAPPLICATIONSLIST ........................................................................................................................................................ 8
CONFIGURING DEVICE RESET AND SELF-DESTRUCTION .......................................................................................... 9
CHANGINGTHE DEVICE PASSWORD ........................................................................................................................................ 9
INSTALLINGTHEAUTO-LAUNCHASSISTANT ONA MAC .........................................................................................10
REFORMATTINGTHE DEVICE ...........................................................................................................................................................10
CREATINGA MESSAGETHAT IS DISPLAYEDINTHE UNLOCKER .............................................................................10
AUTO-LOCKINGTHEDEVICEIFITISLEFTUNATTENDED .........................................................................................10
VIEWING DEVICE INFORMATION ...............................................................................................................................................11
HOW DO IUSE THE SECURE BACKUP SOFTWARE?.....................................................................................12
BACKING UP FILES FROM YOUR DEVICE ..................................................................................................................................12
RESTORING BACKED UP FILESTOYOUR DEVICE ..............................................................................................................12
HOW DO IUSE THE VIRTUAL KEYBOARD?.................................................................................................. 13
HOW DO IUSE READ-ONLY MODE? ..........................................................................................................14
HOW DO IUSE THE DEVICE ON LINUX?......................................................................................................14
SETTING UPTHE DEVICE ON LINUX .............................................................................................................................................14
USINGTHE UNLOCKER ON LINUX ...............................................................................................................................................15
B EST P RACTICES ...............................................................................................................................................16
HOW DOES IT WORK? .................................................................................17
DEVICE SECURITY .................................................................................................................................................................. 17
APPLICATIONSECURITY ................................................................................................................................................... 18
ADDITIONAL NOTES ......................................................................................................................................................... 18
WHERE CAN I GET HELP? .........................................................................20
WHERE CAN IGO FOR MORE INFO?.............................................................................................................20
S UPPORT C ONTACT I NFORMATION ..............................................................................................................20

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 4
What is it?
IronKeyBasicisdesignedtobetheworld’smostsecureUSBflashdrive.Nowyou can safely
carry your files and data with you wherever you go.
Howisit differentthan a regularflash drive?
Hardware Encryption
Inside your device is the IronKey Cryptochip,which protects your data to the same level as
highly classified government information. This security technology is always on and cannot be
disabled.
Password-Protected
To access your secure data, you unlock the device with a password using the Unlocker software
that is carried on the device. Do not share your password with anyone. That way,even if your
device is lost or stolen,no one else can access your data.
Self-Destruct Sequence
Ifthe Cryptochip detects physical tampering by ahacker,orif10consecutiveincorrect
password attempts have been entered, it initiates a permanent self-destruct sequence that
securely erases all onboard data using flash-trash technology— so remember your password .
Anti-MalwareAutorunProtection
Your device helps protect you from many ofthe latest malware threats targeting USB flash
drivesby detecting andpreventing autorun execution ofunapprovedprograms. It can also be
unlocked in Read-Only Mode if you suspect the host computer is infected.
Simple Device Management
Your device includes the IronKey ControlPanel,a central management area foraccessing your
files, editing your preferences, changing your device password and safely locking your device.
Secure Local Backup and Data Recovery
Securely back up your secure files using the onboard Secure Backup software (Windows only).
ItallowsyoutorecoveryourdatatoanewIronKeyBasicincasethisoneiseverlostorstolen.
Waterproof and Tamper-Resistant
Designedtosurvivetheextremes,IronKeyBasic’sruggedmetalencasingisinjectedwith
anepoxycompoundthat makesitnotonlytamper-resistant,butwaterprooftomilitary
specifications (MIL-STD-810F).

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 5
How do I use it?
WhatsystemscanIuseiton?
» Windows® 8.1
» Windows® 8
» Windows® 7 (SP1)
» Windows® Vista (SP2)
» Mac OS® X (10.9.x - 10.11.x)
» Linux (2.6+)
ThecomputermusthaveaUSB2.0portforhigh-speeddatatransfer.AUSB1.1portor
powered hub will also work,but will be slower.
Some applications are available only for specific systems:
» Secure Backup -Windows Only
» Virtual Keyboard -Windows Only
» Auto-LaunchAssistant - Mac Only
HowdoIset upthe device?
The setup process is the same forWindows and Mac systems.For Linux systems, see the details
inthesection later inthisdocument.
1. Plug the IronKey device into your computer’s USB port. The “Device Setup” screen ap-
pears.
• The setup software autoruns from a virtual DVD. This screen might not appear if
your computer does not allow devices to autorun. You can start it manually by:
• WINDOWS: Double-clicking the “IronKey Unlocker” drive in “My Computer”
and launching“IronKey.exe”.
• MAC: Opening the IronKey Unlocker drive in Finder and opening the IronKey
application in the Mac folder.
2. Select a default language preference and agree to the end-user license agreement.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 6
• Bydefault,theIronKeysoftware willuse thesamelanguageasyourcomputer’s
operating system.
3. Createa devicepassword.
• Your password is case-sensitive and must be atleast 4 characters long.
4. Choose whether to enable Device Reset.
• Ifyou forget your password and haveenabled Device Reset,the device will return
to its initial state after the final password attempt (instead of self-destructing the
device). When reset,allonboard datawillbelost,butthedevicewillbereusable.
• This setting can also beenabled in the ControlPanel’sSettings menu;however,it
cannotbeconfiguredwhilethedeviceislocked.
5. The deviceinitializes.
• During thisprocess,it generatestheAES encryption key,creates the filesystem
forthe secure volume,and copies secureapplications andfilesto thesecure
volume.
6. When initialization is complete,the IronKey ControlPanel appears. Your device is then
ready to protect your data and can be used on aWindows,Mac or Linux computer.
HowdoIunlockthedevice?
The unlock process is the same forWindows and Mac systems. For Linux systems, see the
detailsinthesectionlaterinthisdocument.
1. Plug in your device and wait for the Unlocker window to appear.
• Ifthe Unlocker window does not appear,youcan start it manually by:
• WINDOWS: Double-clicking the “IronKey Unlocker” drive in “My Computer”
and launching“IronKey.exe”.
• MAC: Opening the IronKey Unlocker drive in Finder and opening the IronKey.
app application in the Mac folder.
• NOTE : On a Mac you can install theAuto-Launch Assistant, which automatically
opens the Unlocker when you plug in an IronKey Basic device.
2. Enter your device password and click“Unlock”.The IronKeyControl Panel will appear.
• Optionally,you can check the Read-Only Mode checkbox to unlock the device in
Read-Only Mode.
• Entering your password correctly (which is verified in hardware) will mount your
secure volume with all your secure applications and files.
• Entering the wrong password 10 consecutive times will permanently destroy the
deviceandallyouronboarddata(unlessDeviceResethasalreadybeenenabled).
• Asa security precaution,youmust unplug and reinsert the device after every
three failed password attempts.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 7
What do I doif I forget mypassword?
TherearenobackdoorstoanIronKeyBasicdevice.Inotherwords,thereisnowaytounlockit
if you do not have the correct password.
• Ifyou have enabled device reset,you can resetthe device back to its pre-setup
state;however,all onboard data will be permanently lost.
• Ifyou have not enabled device reset,you haveonly 10 password attempts before
the device will permanently self-destruct. You will not be able to use the device
again and your data will be erased.
HowdoIaccessmysecurefiles?
After unlocking the device,youcan access thefiles securelystoredon thedeviceby:
• Clicking the Files button (folder icon) in the IronKey Control Panel
• WINDOWS:OpeningWindowsExplorertothe“SecureFiles”drive
• MAC:Opening Finder to the“Secure Files” drive
How do I encrypt and decrypt files?
Everything you store on your IronKey Basic device will be encrypted. Since the device has a
builtinCryptochip,allofthe encryption anddecryptionisdoneforyou“on-the-fly”,givingyou
the convenience ofworking asyou normally would with a regular flash drive,while providing
strong and “always-on” security.
• SimplydragafileontotheSecureFilesdriveanditisautomaticallyencrypted.
• Filesopened fromtheSecure Filesdrive areautomaticallydecrypted right asyou
open them.
How do I use the Control Panel?
The IronKey Control Panel appears as soon as you unlock the device. It is a central location for:
» Accessingyoursecurefiles
» Launching Secure Backup software (Windows only)
» Configuring your device settings
» Changingyourdevicepassword
» Reformatting your device
» Safely locking your device
NOTE:TheIronKeyControlPanelisavailableforWindowsandMacsystemsonly.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 8
QUICKLY ASSESSING SECURE FILES
ClicktheFilesbuttonintheControlPaneltoopenWindowsExplorer(orFinderonthe
Mac) to the Secure Files drive.
LOCKINGTHE DEVICE
Click the Lock button in the bottom left of the Control Panel to safely lock
yourdevice.Youcanalsousethekeyboardshortcut:CTRL+L
Ifyou have applications or files open on the Secure Files drive,you
might not be able to lock your device (this prevents potential file corruption). Close open onboard
applications and files and try again to lock the device.
TIP: Once the device is locked,you can safely unplug the device.However,do not unplug the device
whenit is unlocked.
DETERMINE HOW MUCH SPACE ISAVAILABLE ONTHE DEVICE
The Capacity Meter at the bottom right of the Control Panel
provides current information about how much data storage is
availableon yourdevice. The greenbargraph represents how full
the deviceis (e.g.the meter willbefullygreenwhenthedeviceisfull),whilethe white text onthe
CapacityMeterdisplayshow muchfreespace remains.
USINGTHE APPLICATIONS LIST
TheApplications Lististheareawhereyoucanquicklylaunchonboardapplicationsandfiles.
ToedittheApplicationsList:
1. Unlock yourdevice. The ControlPanel willappearwiththeApplicationsListselectedbydefault.
• Ifyou already havethe Control Panel open,you can click theApplications button in the
menubarto view the Applications List.
2. Drag a file from the desktop to theApplications List area to add it to the list.
3. Right-click anywherein theApplication List to access the options menu,which allows youto add,
rename,sort or delete items inthe list.
Some things to know about theApplications List:

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 9
» Items in the list are shortcuts to actual files.Managing the items in the list does not alter the
actual file.
» Anyfilecanbeaddedtothelist,includingdocuments,images,andbatchfiles.
» For itemsthat arenot applications,the operating system opens the item with the default
program associated with that filetype.
» Items that areWindows executables will be hidden from view on the Mac.Similarly,Mac
applicationfiles will be hiddenfrom view onWindows computers.
CONFIGURING DEVICE RESET AND SELF-DESTRUCTION
Bydefault,yourdevicewillself-destructafter10consecutiveincorrectpasswordattempts. Self-
destruction is thorough (i.e.every block of data is erased) and permanent (i.e.you can neveruse
the deviceagain). Self-destruction isthe most secure waytoprotectyourdata.
You can configure your device to reset instead of self-destructing. This allows you to continue
using your device if you forget your password; however,after thedevice is reset,all of your
onboarddatawillstillbelost.
To configure this setting:
1. Unlock your device
2. Click on the Settings button in the menu bar
3. Click on Password button in the left sidebar
4. Toggle the checkbox in the Device Reset area
NOTE : Device Reset is an important security feature of the product,and changing this setting
requires you to enter your password.
CHANGING THE DEVICE PASSWORD
1. Unlock your device and click on the Settings button in the menu bar
2. Click on the Password button in the left sidebar
3. Enter your current password in the field provided
4. Enter your new password and confirm it in the fields provided
5. Click the“Change Password” button
NOTE :If you created backups with the Secure Backup application,restoring those backups will
require you to enter the device password that was current at the time of back up.
TIP :Changing your password on a regular basis is a good security practice.However,be
especially careful to remember your device password.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 10
INSTALLING THE AUTO-LAUNCH ASSISTANT ON A MAC
Installing the Auto-Launch Assistant will automatically open theIronKeyUnlocker when you
plug in your device on that computer. This feature is only available on a Mac.
1. Unlock your device and click on the Settings button in the menu bar
2. To install it, click on the “Install Auto-Launch Assistant” button
3. To uninstall it, click on the “Uninstall Auto-Launch Assistant” button
REFORMATTING THE DEVICE
Reformattingthe SecureFiles drivewill eraseall your securefiles andyourApplication List,but
it will not erase your device password andsettings.
1. Unlock your device and click on the Settings button in the menu bar
2. Click on the“Reformat SecureVolume” button
TIP :Back up your data prior toreformatting;otherwise,it will beerased.
CREATINGA MESSAGETHAT IS DISPLAYED INTHE UNLOCKER
This feature allows you to create a message that appears on the IronKey Unlocker window. For
example,in the event that you lose your device,someone can return it to you if you provide
your contact information.
1. Unlock your device and click on the Settings button in the menu bar
2. Click on the Preferencesbutton in the leftsidebar
3. Enter text in the Unlock Message field
You can only enter a long a message as will fit in the space provided (approximately 7 lines and
200 characters).
AUTO-LOCKINGTHE DEVICE IF IT IS LEFT UNATTENDED
You can seta device time-out toautomatically lock your device after a specified period of
inactivity. This will help prevent others from accessing your secure files.
1. Unlock your device and click on the Settings button in the menu bar
2. Click on the Preferencesbutton in the leftsidebar
3. Toggle the checkboxforauto-locking thedevice and setthetime-out foreither 5,15,
30,60,120,or180 minutes.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 11
Ifa securefile hasbeen opened,it maynot be safetolock thedevice;otherwise,thefilechanges
may be lost or the file corrupted. The device will continue to try to lock in this situation,but
will not force quit theapplication. You can configure thesetting toforce thedevice tolock;
however,yourisk thepotential lossofdata ofanyopened andmodified files.
NOTE:Forcelockingcanresultindataloss.Ifyourfileshavebecomecorruptduetoaforce
lock or unplugging the device before locking,you might be able to recover the files by running
CHKDSK and using data recovery software. For example,
1. Unlock the device
2. Usethefollowingkeyboardshortcuttobringupthe“Run”prompt:WINDOWS
BUTTON + R
3. Type in“ CMD ”and press enter
4. From the command prompt, type in CHKDSK and then the Secure files drive let-
ter,and then“ /F /R ”. For example,if the Secure Files drive letter is G,you would
enter:
• CHKDSK G: /F /R
5. You may also need to use data recovery software in order to recovery your files
VIEWING DEVICE INFORMATION
1. Unlock your device and click on the Settings button in the menu bar
2. Click on the“Device Info” button in the left sidebar
Onthis screenyou can view detailsabout yourdevice,including:
• Model number
• Serial number,
• Software and firmware versions
• Secure files drive letter
• Operating System and system administrative privileges
You can also click the copy button to copy the device information to the clipboard for your
email, forum posting or support request.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 12
HowdoIusetheSecureBackupsoftware?
If your device is lost or stolen:
• No one can access your data without the password
• You can restore an encrypted backup of your data
to a new or existing IronKey Basic device by using the
Secure Backup software (Windows only,English only)
Secure Backup works by savingan encrypted backup
ofsomeorallofyouronboardfilestoyourlocal
computer or network fileshare. You use the same
application to restore one or all of your files.
BACKING UP FILES FROMYOUR DEVICE
1. Click the “Secure Backup” button in the IronKey Control Panel to open the program (Win-
dows only)
• The Secure Backup window should appear, displaying the Secure Files drive.
2. Select the files you want to back up.
3. Check the checkboxes next the files you want to back up.
• A greencheckmark means all files in this folder andall sub-folders will bebacked
up
• A red minus sign means only some of the files in this folder or its subfolders will
bebackedup
4. Select the destination folder for the backed up files.
• The location ofthe backup can bean existing folder,a new folder,or a separate
drive (e.g. a network fileshare)
5. Click“Backup Now”. The files will be encrypted and backed up.
NOTE : While the files are securely encrypted, the filenames will not be. Zipping the files to be backed
up first will hide the file names.
NOTE :Do not add,alter, or delete the backed up files or it could prevent you from being able
torestorethem later.
RESTORING BACKED UP FILES TOYOUR DEVICE
1. Click the “Secure Backup” button in the IronKey Control Panel to open the program (Win-
dows only)
• The Secure Backup window should appear, displaying the Secure Files drive.
2. Select the“Restore from My Computer” tab.
3. Selectthedestination folderyouhadchosen previouslywhenbackingupyourdata.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 13
• Make sureto select thefolder that contains thebackup,not files or folders within
that folder.
4. Select which files/folders torestoreandclick“RestoreNow”. Restored files will overwrite
existing files of the same name on the Secure Files drive.
NOTE :If the data was backed up from a different IronKey Basic device, you will have to supply the
device password forthat devicein orderto restore the files to a different device.
HowdoIusetheVirtualKeyboard?
Ifyou are unlocking your device on an unfamiliar computer
and are concerned about keylogging and screenlogging
spyware,use the IronKeyVirtual Keyboard. It helps protects
your device password by letting you click out letters and
numbers.TheunderlyingtechniquesintheVirtualKeyboard
will bypass many trojans,keyloggers,and screenloggers.
TheVirtual Keyboard can be launched a couple of ways:
•
In places where youenter a password into thedevice (e.g.theUnlocker,changing your
devicepassword,settingupyourdevice),clicktheVirtualKeyboardicon
•
When the keyboard focus is in a password field,use the keyboard shortcut
CTRL+ALT+ V
NOTE: ThisfeatureisavailableonWindowsonlyandusesastandardQWERTYkeyset.
1. ClicktheVirtualKeyboardiconinapasswordfieldontheIronKeyUnlockerorControl
Panel. The Virtual Keyboard appears.
• Alternatively, you can press CTRL+ALT+V
2. Click the keys to type your password. Click“Enter” when you are finished.
• You can use theVirtualKeyboard in conjunction with theactualkeyboard,sothat
youtypesomecharacters andclicksomecharacters.
• Youcan also optionally click the“Randomize” button to randomize wherethe
keys are. This helps protect against screenloggers.
3. When you click a key in theVirtual Keyboard,all of the keys briefly go blank. This feature
prevents screenloggers from capturing what you clicked.
• If you do not want to use this feature,you can disable it in the options menu next
tothe close button.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 14
How do I use Read-Only Mode?
You can unlock your device in a read-only state such that files on your Secure Files drive cannot
be edited. An example of when this is useful is when you want to access a file on your device
while using an untrusted or unknown computer. If you unlock your device in Read-Only Mode,
malwareonthat machine cannot infectyour device ormodify your files.
1. Plug in your device and launch the Unlocker
2. Check the“Read-Only Mode” checkbox
3. Unlock your device
» YouwillseeamessageintheControlPanelthatyouareinRead-OnlyMode.
» WhenyouunlockyourdeviceinRead-OnlyMode,youwillremaininRead-OnlyModeuntil
you lock your device.
» Note that some features are not available in Read-Only Mode because they require
modifying files on your device. Examples of unavailable features include reformatting,
restoring applications, editing files on the Secure Files drive, and editing the Applications List.
» TounlockyourdeviceinRead-OnlyModeonLinux,enter: ironkey --readonly
Howdo I use the deviceon Linux?
If you prefer to use a Linux computer,you can use your IronKey Basic device on several
distributions of Linux (x86 systems only with kernel version 2.6+).
SETTING UPTHE DEVICE ON LINUX
1. Plug it into your computer’s USB port and run the ironkey program from the device’s linux
folder.
• The device mounts as a virtual DVD.
• You must start the Unlocker manually by going to the linux folder and running
ironkey.
2. Agreetothelicenseagreement.
• Press Q (Quit) to exit orpressY (Yes) to agree to theterms.
3. Createa devicepassword.
• Your password is case-sensitive and must be at least 4 characters long .
4. You can also choose to enable Device Reset, which will allow you to reset the device (in-
stead of self-destructing the device)in case you forgetyourpassword. When reset,all
onboarddata willbelost,butthedevicewillbereusable.
5. Thedeviceinitializes. Duringthisprocess,itgeneratestheAESencryption key,and
createsthe filesystem forthesecurevolume.
6. When this is complete, your device is ready for use.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 15
USING THE UNLOCKER ON LINUX
Use the Unlocker for Linux to access your files and change your device password on Linux,
allowingyou tosecurelytransferfiles from andbetweenWindows,Mac,and Linuxcomputers.
Depending on your Linux distribution,you might need root privileges to use the program
“ ironkey ”found in the Linux folder of the mounted virtual DVD.If you have only one IronKey
Basic attached tothe system,simply run the program from a command shell with no arguments
(e.g. ironkey ).Ifyouhavemultiple IronKeyBasic devices,you must specify which one you
wanttounlock.
NOTE: ironkeyonlyunlocksthesecurevolume;itmustthenbemounted.Manymodern
Linuxdistributions dothisautomatically;ifnot,runthemountprogramfromthecommandline,
using the device name printed by ironkey .
To change the password of the device named “devicename,”enter:
ironkey --changepwd [devicename]
To lock the IronKey named “devicename,” enter:
ironkey --lock [devicename]
To unlock the IronKey in Read-Only Mode, enter:
ironkey --readonly
To unlock theIronKey with the password“devicepassword,”enter:
ironkey --password [devicepassword]
Simply unmounting the device does not automatically lock thesecure volume. To lock the
device,youmusteitherunmount andphysicallyremove(unplug)it,orelserun:
ironkey --lock
Please note the following important details for using your device on Linux:
1. Kernel Version must be 2.6 or higher
Ifyou compile your own kernel,you must include the following in it:
» DeviceDrivers->SCSIDeviceSupport-><*>SCSICDROMSupport
» DeviceDrivers-><*> Support for Host-side USB
» DeviceDrivers-><*> USB device filesystem
» DeviceDrivers-><*> EHCI HCD (USB 2.0) support
» DeviceDrivers-><*> UHCI HCD (most Intel and VIA) support
» DeviceDrivers-><*> USB Mass Storage Support

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 16
Thekernelsthatareincludedbydefaultinmostmajordistributionsalreadyhavethesefeatures,
so if you are using the default kernel that comes with a supported distribution you do not need to
take any other action.
Also,on 64-bit linux systems the 32-bit libraries must be installed in order to run the ironkey
program.Consultthedistribution’shelpresourcesforassistanceandmoreinformation.
2. Mounting problems
» MakesureyouhavepermissionstomountexternalSCSIandUSBdevices
» Some distributions do not mount automatically and require the following command to be run:
mount /dev/<name of the device> /media/<mounted device name>
» The name of the mounted device varies depending on the distribution. The names of the
IronKey Basic devices can be discoveredby running:
ironkey --show
3. Permissions
» Youmust havepermissionstomount external/usb/flash devices
» You must have permissions to run executables off the device’s virtual DVD in order to launch
the Unlocker
» Youmightneedrootuserpermissions
See the Linux folder on the device’s virtual DVD for information about how to set up permissions
to allow non-root users to access their IronKey Basic devices. All of these methods require
that the system administrator take (one time) action to enable access; after that, ordinary users
can lock,unlock,and change passwordsonanyIronKey Basic devicesthey plug in.
4. Supported distributions
NotalldistributionsofLinuxaresupported. Pleasevisit http://support.ironkey.com forthelatestlist
of supported distributions.
5. The IronKey Unlocker for Linux only supports x86 systems at this time.
Best Practices
» Lockthe device
• whennotinuse
• before unplugging it
• beforesystementerssleepmode
» Neverunplug the device when theLED is on
» Nevershareyourdevicepassword
» Perform a computer anti-virus scan before setting up the device

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 17
How does it work?
TechnicalandSecurityNotes
IronKey Basic has been designed from the ground up with security in mind. A combination
ofadvanced security technologies are used to ensurethat onlyyou can access your data.
Additionally,it has been designed to be physically secure, to prevent hardware-level attacks and
tampering, as well as to make the device rugged and long-lasting.
This IronKey Cryptochip is hardened against physical attacks such as power attacks and bus
sniffing.Itisphysicallyimpossible totamperwithitsprotecteddataorresetthepassword
counter.IftheCryptochipdetectsaphysicalattack fromahacker,itdestroystheencryption
keys,making the stored encrypted files inaccessible.
We are endeavoring to be very open about the security architecture and technology that we
use in designing and building this product. There is no hocus-pocus or handwaving here.We
use established cryptographic algorithms, we develop threat models, and we perform security
analyses(internalandthirdparty) ofoursystemsallthewaythroughdesign,developmentand
deployment.
DEVICE SECURITY
Data Encryption Keys
» AESkeygeneratedbyonboardRandomNumberGenerator
» AES key generated at initialization time and encrypted with hash of user password
» Nobackdoors: AESkeycannotbedecryptedwithouttheuserpassword
» AES key never leaves the hardware and is not stored in NAND flash
Data Protection
» Secure volume does not mount until password is verified in hardware
» Password try-counter implemented in tamper-resistanthardware
» Once password try-count is exceeded,all data is erased by hardware
» Secure box architecture accessible only to firmware to store sensitive data and settings

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 18
Physical Security
» Solid,rugged metal case
» Encryption keys stored in the tamper-resistant Cryptochip
» All chips are protected by black epoxy-based potting compound
» Exceeds military waterproof standards (MIL-STD-810F)
APPLICATIONSECURITY
Device Password Protection
» USB command channel encryption to protect device communications
» Password-in-memory protection to protect against cold-boot and other attacks
» Virtual Keyboard to protect against keyloggers and screenloggers
The device password is hashed using salted SHA-256 before being transmitted to the device
firmware over a secure and unique USB channel. It is stored in an extremely inaccessible
locationintheprotectedCryptochip hardware. The hashedpasswordisvalidated inhardware
(thereisno“getPassword”function thatcanretrievethehashedpassword),andonlyafterthe
password is validated is theAES encryption keydecrypted. The password try-counter is also
implementedinhardwaretopreventmemory rewindattacks. Typingyourpasswordincorrectly
too many times initiates a permanent “flash-trash” self-destruct sequence, which is run in
hardware rather than using software, ensuring the ultimate protection for your data.
ADDITIONAL NOTES
Section 508 Compliance
The IronKey Control Panel is designed to be Section 508 compliant.Users with disabilities have
keyboard navigation and screen reader support.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 19
Product Specifications
Fordetailsabout yourdevice,see“DeviceInfo”inthe Control Panel settings.
CAPACITY*
Up to 64GB, depending on the model
DIMENSIONS
75mmX19mmX9mm
WEIGHT
0.8 oz
WATERPROOF
MIL-STD-810F
OPERATING TEMPERATURE
0C, 70C
OPERATING SHOCK
16G rms
ENCRYPTION
Hardware:256-bitAES
Hashing:256-bit SHA
PKI: 2048-bitRSA
FIPS CERTIFICATIONS
See www.ironkey.com/en-US/website/certification-and-compliance for details.
HARDWARE
USB 2.0 (High-Speed) port recommended,USB 1.1
OS COMPATIBILITY
WindowsXP(SP2+),Vista,7,8,or8.1
Mac 10.5+
Unlocker for Linux (2.6+,x86)
Designed andAssembled in the U.S.A.
IronKey Basic devices do not require any
softwareor drivers tobe installed.
*Advertised capacity is approximate and not all of it will be available for storage. Some space is required for onboard software.

IRONKEYBASIC S250/D250 USER GUIDE
PAGE 20
Where Can I Get Help?
Wherecan I go for moreinfo?
support.ironkey.com Support information, knowledgebase and video tutorials
www.ironkey.com General information
SupportContactInformation
http://support.ironkey.com/