iStorage datashur User manual

#1
www.istorage-uk.com
iStorage datAshur Personal ®Manual – v 21
personal
User Manual
personal
Remember to save your PIN in a safe place.
If lost or forgotten, there is no way to access the drive.
If you are having difficulty using your datAshur Personal®drive please contact our technical department at
email address - [email protected] or by phone on [phone].

#2
iStorage datAshur Personal ®Manual – v 21
www.istorage-uk.com
personal
Copyright © iStorage Limited 2014. All rights reserved.
Windows™ is a registered trademark of Microsoft Corporation.
All other trademarks and copyrights referred to are the property of their respective owners.
Distribution of modied versions of this document is prohibited without the explicit permission of the copyright holder.
Distribution of the work or derivative work in any standard (paper) book form for commercial purposes is prohibited
unless prior permission is obtained from the copyright holder.
DOCUMENTATION IS PROVIDED AS IS AND ALL EXPRESS OR IMPLIED CONDITIONS, REPRESENTATIONS AND
WARRANTIES, INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE
OR NON-INFRINGEMENT, ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH DISCLAIMERS ARE HELD TO BE
LEGALLY INVALID.
N30732
iStorage datAshur Personal®is developed and manufactured by
iStorage Ltd. and is based on DataLock®technology licensed from
ClevX, LLC
All trademarks and brand names are the
property of their respective owners

#3
www.istorage-uk.com
iStorage datAshur Personal ®Manual – v 21
personal
Table of Contents
Introduction.............................................................................................................................. 4
Package contents ..................................................................................................................... 4
Layout...................................................................................................................................... 5
LED indicators and their actions............................................................................................... 5
Customer delivery.................................................................................................................... 5
How to change the User PIN .................................................................................................... 6
How to create a New User PIN - when all cryptographic parameters have been zeroed ............ 6
Unlocking the drive with the User PIN...................................................................................... 8
Locking the drive...................................................................................................................... 8
Configuring the Admin PIN...................................................................................................... 8
How to unlock the drive with the Admin PIN ............................................................................ 10
Changing the Admin PIN.......................................................................................................... 11
Administrator Privilege Commands ......................................................................................... 12
i. Clear the User PIN:..................................................................................................... 12
ii. Enable write protect - read only mode: ....................................................................... 12
iii. Disable write protect - read only mode:...................................................................... 12
iv. Show security controller firmware version: ................................................................ 13
How to reset the drive .....................................................................................................14
Configuring the drive with Windows OS after a complete reset .......................................14
Configure the drive with Mac OS ....................................................................................20
Brute Force Hacking Detection........................................................................................22
Booting from the datAshur Personal ...............................................................................22
FAQ’s - Frequently Asked Questions ............................................................................... 23
Technical support & Warranty ......................................................................................... 27

#4
iStorage datAshur Personal ®Manual – v 21
www.istorage-uk.com
personal
Thank you for purchasing the iStorage datAshur Personal®drive, an ultra secure and easy to use,
hardware encrypted USB PIN activated ash drive.
The datAshur Personal®drive uses military grade AES 256-bit CBC hardware encryption, which
encrypts all data stored on the drive in real-time. The datAshur Personal®drive requires no software
and is OS and host independent.
The datAshur Personal®drive incorporates a rechargeable battery allowing the user to enter a 7-15
digit PIN (Personal Identication Number) onto the on-board keypad before connecting the drive to a
USB port.
Should the drive be lost or stolen, the user can rest assured that all data held on the
datAshur Personal®drive is safe and cannot be accessed by any unauthorised person.
The datAshur Personal®drive can be congured with both a User and Admin PIN, making it perfect
for corporate and government deployment. As the datAshur Personal®drive is unlocked via the
onboard keypad and not a host computer, it is not vulnerable to software/hardware based key-loggers
or brute force attacks.
Package contents
• datAshur Personal®USB ash drive
• Quick Start Guide
Introduction

#5
www.istorage-uk.com
iStorage datAshur Personal ®Manual – v 21
personal
1. Layout
LOCK LED, stand by while the drive is locked
UNLOCK LED, drive is unlocked when ashing
Keypad
Key Button, used to activate the drive and to enter PIN codes
BLUE LED, when solid, the drive is connected to the computer, when
ashing data is being transferred.
3. Customer delivery
• datAshur Personal®is shipped with a default User PIN 1-1-2-2-3-3-4-4
• Rechargeable battery installed and charged
• Admin PIN is not set
When all LEDs are OFF the datAshur Personal
is locked and secure.
blink Drive is locked and secure
blink Drive is unlocked in User Mode solid No User PIN is congured
double
blink
Drive is unlocked in Admin Mode blink
together
Accepting User PIN verication when
setting / changing the PIN
solid Drive is connected to a powered
USB port
double
blink
Accepting Admin PIN verication when
setting / changing the PIN
solid Drive is connected to host computer
and is idle
illuminate
together
Accepting new PIN
blink Data exchange with host computer blink
alternately
Error
2. LED indicators and their actions

#6
iStorage datAshur Personal ®Manual – v 21
www.istorage-uk.com
personal
4. How to change the User PIN
PIN requirements:
• Must be between 7-15 digits in length
• Must not contain only repetitive numbers e.g. 3-3-3-3-3-3-3
• Must not contain only consecutive numbers e.g. (1-2-3-4-5-6-7),(7-8-9-0-1-2-3-4),(7-6-5-4-3-2-1)
• Drive must NOT be connected to a host
Note: If a mistake was made while dening a new PIN or the procedure was aborted,
the drive will retain the old PIN.
5. How to create a new User PIN
INSTRUCTIONS LED ACTIVITY
Press KEY Button
Enter User PIN to unlock drive
(Factory default PIN 1,1,2,2,3,3,4,4)
and press KEY Button
will blink together
will illuminate together for approximately
4 seconds and then:
will blink indicating correct PIN entry
Press and hold KEY Button for 3 seconds will illuminate together
While illuminated enter New User PIN
and press KEY Button
will blink in unison
Re-enter New User PIN
and press KEY Button
will illuminate and then
change to blinking
Insert datAshur Personal into USB port blinks if 1st and 2nd entries match
blink alternately if PIN entry incorrect
All cryptographic parameters (including User PIN and Admin PIN) are zeroed after hacking detection
has been triggered by 10 consecutive failed attempts to unlock, or when the drive has been manually
reset (see section No. 12)
This state is evident by a solid lit RED LED indicator. It will be necessary to set a New User PIN by
following these instructions.
Once the User PIN has been dened, a new encryption key is generated using the on-board random
number generator.
Conguring a New User PIN overleaf
when all cryptographic parameters have been zeroed
N.B.

#7
www.istorage-uk.com
iStorage datAshur Personal ®Manual – v 21
personal
Note:
It becomes necessary to format
the drive at this point as all
previous data is obscured with the
previous encryption key (including
the le allocation table).
INSTRUCTIONS LED ACTIVITY
Press and hold KEY Button for 3 seconds will illuminate together
While are illuminated enter a
New User PIN and press KEY Button
will blink in unison
Re-enter New User PIN
and press KEY Button
will illuminate together for approximately
4 seconds and then:
will blink indicating correct PIN entry
Insert datAshur Personal into USB port will illuminate in a constant state
blink alternately if PIN entry incorrect
5. How to create a new User PIN - continued
PIN requirements:
• Must be between 7-15 digits in length
• Must not contain only repetitive numbers e.g. 3-3-3-3-3-3-3
• Must not contain only consecutive numbers e.g. (1-2-3-4-5-6-7),(7-8-9-0-1-2-3-4),(7-6-5-4-3-2-1)
• Drive must NOT be connected to a host
A User PIN can only be created when the
RED LED is lit in a constant state (datAshur
Personal®reset) or changed when the
GREEN LED is blinking (datAshur Personal®
unlocked).
Neither User nor Admin PIN can be created
while the drive is connected to a host com-
puter.

#8
iStorage datAshur Personal ®Manual – v 21
www.istorage-uk.com
personal
6. Unlocking the drive with User PIN
All data stored on the drive is encrypted using AES 256-bit CBC encryption. In order to access, the
drive must rst be unlocked. A locked drive is not accessible by the host computer.
INSTRUCTIONS LED ACTIVITY
Press KEY Button
Enter User PIN to unlock drive
(Factory default PIN 1,1,2,2,3,3,4,4)
and press KEY Button
will blink together
will illuminate together for
approximately 4 seconds and then:
will blink indicating correct PIN entry
Note that at this point the
following occurs: will blink indicating the correct PIN entry
will blink indicating the incorrect PIN entry
Insert your datAshur Personal into USB port
will illuminate in a constant state
will illuminate and icker
Note: Once unlocked, the GREEN LED will blink for 30 seconds, within which time
the drive needs to be connected to a USB port.
If no connection has been detected within 30 seconds the drive will lock.
7. Locking the drive
The datAshur Personal®drive automatically locks when unplugged from the host computer or power
to the USB port is turned off.
8. Configuring the Admin PIN
PIN requirements:
• Must be between 7-15 digits in length
• Must not contain only repetitive numbers e.g. 3-3-3-3-3-3-3
• Must not contain only consecutive numbers e.g. (1-2-3-4-5-6-7),(7-8-9-0-1-2-3-4),(7-6-5-4-3-2-1)
• Drive must NOT be connected to a host
If a User PIN exists, the datAshur Personal®drive must be unlocked with the User’s PIN rst.
If the drive is in a reset state (solid RED indicator), an Admin PIN can be set at any time.
For details please see the table overleaf.

#9
www.istorage-uk.com
iStorage datAshur Personal ®Manual – v 21
personal
The following table depicts the possible actions when the drive is in different states:
User PIN Admin PIN Possible Actions
NOT SET NOT SET
Can set either User or Admin PIN
Cannot access drive until User or Admin PIN is dened
SET NOT SET
Can change User PIN when unlocked as User
Can set Admin PIN when unlocked with User PIN
Can access data when unlocked as User
NOT SET SET
Can set User PIN when drive is locked
Can unlock drive with Admin PIN
Can change Admin PIN when unlocked as Administrator
Can perform Administrator commands
SET SET
Can unlock drive with either User or Admin PIN
Can change User PIN when unlocked as User
Can change Admin PIN when unlocked as Administrator
INSTRUCTIONS LED ACTIVITY
Double press the KEY Button
and hold on the 2nd press for 3 seconds will double blink once and then turn solid
Enter the New Admin PIN
and press KEY Button
will double blink if correct PIN entry or
will blink alternately if PIN entry incorrect
Re - Enter the New Admin PIN
and press KEY Button
will illuminate together for approximately
2 seconds and then:
will double blink indicating correct PIN entry
Note that at this point the
following occurs:
will double blink if 1st and 2nd entries match
will blink alternately if PIN entry incorrect
Insert your datAshur Personal into USB port will illuminate in a constant state
will illuminate and icker
Note: A double blink indicates the drive is unlocked in Admin mode.
A single blink indicates the drive is unlocked in User mode.
The drive has to be unlocked in user mode in order to proceed with conguring an Admin PIN.
It is set by following the instructions below:

#10
iStorage datAshur Personal ®Manual – v 21
www.istorage-uk.com
personal
Figure 1 shows the GREEN blinking characteristics when the drive is opened in user mode (top)
and admin mode (bottom).
Figure 2 shows the difference between pressing KEY Button to set a User PIN vs. setting the
Admin PIN.
Figure 2: Key entry for mode selection
User
Administrator
3 seconds
3 seconds
1/4 sec
Figure 1: Mode indication
t
Single Blink
Double Blink
User
Administrator
On On
On On On On
Off Off Off
Off
Note: Once unlocked, the GREEN LED will blink for 30 seconds, within which time
the drive needs to be connected to a USB port.
If no connection has been detected within 30 seconds the drive will lock.
9. How to unlock with Admin PIN
INSTRUCTIONS LED ACTIVITY
Press the KEY Button twice
in succession
(similar to double-clicking a mouse)
will double blink together (Figure 1. above)
Enter Admin PIN
Press KEY Button will illuminate together as self-tests are run
will double blink if admin entered correct PIN
will blink if incorrect PIN was entered