Kanguru Defender 2000 User manual

Kanguru Defender 2000
User Manual
Copyright 2014, All Rights Reserved Model no: KDF2K

2
NOTICES AND INFORMATION
Please be aware of the following points before using your Kanguru Defender 2000
Copyright © 2014 Kanguru Solutions. All rights reserved.
Windows XP®, Windows Vista®, Windows 7® and Windows 8® are registered trademarks of Microsoft
Inc. All other brands or product names are trademarks of their respective companies or organizations.
Kanguru Solutions will not be held responsible for any illegal use of this product nor any losses incurred
while using this product. The user is solely responsible for the copyright laws, and is fully responsible
for any illegal actions taken.
Customer Service
To obtain service or technical support for your system, please contact Kanguru Solutions Technical
Support Department at 508-376-4245, or visit www.Kanguru.com for web support.
Legal notice
In no event shall Kanguru Solutions’ liability exceed the price paid for the product from direct, indirect,
special, incidental, or consequential software, or its documentation. Kanguru Solutions offers no refunds
for its products. Kanguru Solutions makes no warranty or representation, expressed, implied, or statutory,
with respect to its products or the contents or use of this documentation and all accompanying software,
and specifically disclaims its quality, performance, merchantability, or fitness for any particular purpose.
Kanguru Solutions reserves the right to revise or update its products, software, or documentation without
obligation to notify any individual or entity.
Export Law Compliance
Regardless of any disclosure made to Kanguru Solutions pertaining to the ultimate destination of the
specific Kanguru product, you warrant that you will not export, directly or indirectly, any Kanguru
product without first obtaining the approval of Kanguru Solutions and the appropriate export license from
the Department of Commerce or other agency of the United States Government. Kanguru Solutions has
a wide range of products and each product family has different license requirements relative to exports.
Defragmenting Flash Memory Warning
Do not attempt to defragment your Kanguru Defender Flash Drive. Flash memory does not need to
be defragmented and does not gain any performance by doing so. Defragmenting your flash drive can
actually degrade the flash memory which may reduce the drive’s total capacity and lifespan.
Notices and Information

3
Table of Contents
Table of Contents
1. Introduction.................................................................................................... 5
1.1 Package Contents....................................................................................... 5
1.2 System Requirements ................................................................................ 5
1.3 Features...................................................................................................... 6
1.4 Kanguru Defender 2000 Models ............................................................... 7
1.5 Technical Specifications ............................................................................ 7
2. Kanguru Defender Manager 2000................................................................ 8
2.1 Identifying the Device Edition .................................................................. 8
2.2 Running KDM2000................................................................................... 9
2.2.1 Running KDM2000 on Windows ..................................................... 9
2.2.2 Running KDM2000 on Mac OS X ................................................... 11
2.2.3 Running KDM2000 on Ubuntu Linux.............................................. 12
2.2.4 Running KDM2000 on Red Hat Enterprise Linux 5 ........................ 13
2.3 The Setup Wizard ...................................................................................... 14
2.3.1 Selecting a Setup Language.............................................................. 14
2.3.2 Activating On-board Antivirus Protection (Windows only) ............. 15
2.3.3 Setting a Password ............................................................................ 16
2.3.4 KRMC Cloud.................................................................................... 17
2.3.5 Contact Info ...................................................................................... 18
2.3.6 Resetting the Device through the Setup Wizard ............................... 19
2.4 Unlocking the Security Partition ............................................................... 20
2.4.1 Resetting from the Login Screen ...................................................... 21
2.5 Using the Virtual Keyboard to Enter Your Password ................................ 22
2.6 Encrypting Files and Folders..................................................................... 23
2.7 On-board Antivirus (Windows only)......................................................... 24
2.7.1 Device Scan........................................................................................ 25
2.7.2 Path Scan ............................................................................................ 26
2.7.3 File Scan ............................................................................................. 27
2.8 Changing Your Password........................................................................... 28
2.9 KRMC Cloud Settings .............................................................................. 29
2.10 Changing Languages ............................................................................... 30
2.11 Online Documentation............................................................................. 31
2.12 About KDM2000..................................................................................... 31
2.13 Unmounting Your Defender 2000 ........................................................... 32

4
Table of Contents
3. Updating Your Defender 2000....................................................................... 33
3.1 Updating Cloud edition drives................................................................... 33
3.2 Updating KRMC enterprise edition drives................................................ 33
3.3 Updating No-Comms edition drives.......................................................... 33
3.4 Verifying the download checksum ............................................................ 34
4. Safely Removing Your Kanguru Defender 2000 ......................................... 35
4.1 Safely Removing from Windows .............................................................. 35
4.2 Safely Removing from Mac OS X ............................................................ 36
4.3 Safely Removing from Linux.................................................................... 36
5. Warranty Information................................................................................... 37
6. Tech Support .................................................................................................. 37
Appendix A - Common Criteria Certified Versions............................................. 38
Appendix B - Proxy Support.................................................................................. 39

5
Introduction
1. Introduction
The Kanguru Defender 2000 is a hardware encrypted, tamper proof USB flash drive. The Defender 2000
contains two partitions: a CD-ROM partition and a secure, encrypted partition. The CD-ROM partition
contains the login application that will allow you to access the secured partition.
The Kanguru Defender 2000 flash drive secures your sensitive data using:
• 256-bit AES hardware encryption
• Secure password protection
1.1 Package Contents
Please check the contents of the package you received. If any of the parts listed below are missing, please
contact Kanguru Solutions (508-376-4245) and you will be shipped replacement parts immediately.
• Kanguru Defender 2000 USB Flash Drive
• Quick Start Guide
• Registration Form
• USB Extension Cable (select models only)
1.2 System Requirements
• 1 Available USB port (USB 2.0 Recommended)
• 256MB of internal DDR RAM or more
• 500MHz internal CPU or faster
• Operating Systems (32 and 64 bit compatible)
○Windows XP SP3*, Windows Server 2003, Win Vista, Win 7, Win 8
○Max OS X 10.5 and above (Intel based Macs only)
○Red Hat Enterprise Linux 5, Ubuntu 9/10, OpenSUSE 11.1 gnome
○Linux Kernel 2.6.02 - 2.634
Note: Linux Red Hat users must have Super User or Root privileges in order to run KDM2000
* In line with Microsoft’s End-of-Support announcement for Windows XP, Kanguru Solutions is
ending support for its line of products running on the Windows XP platform. While our products
have been quality tested internally on Windows XP, we cannot guarantee normal product operation
on an unsupported OS.

6
Features
1.3 Features
√256-bit AES hardware encryption
√FIPS 140-2 Certified
√Password protected data partition for your secure files
√Does NOT require Admin privileges (except with Red Hat Enterprise Linux 5)
√Driverless installation (Plug & Play)
√High-strength alloy housing
√Tamper-proof design
√On-board antivirus protection
√HIPAA Compliant
√Sarbanes Oxley Compliant
√GLB Compliant
Remote Management Capability
The Kanguru Defender 2000 flash drive can be remotely managed using the Kanguru Remote
Management Console (KRMC). KRMC is a web-based application that gives administrators a complete
USB management system.
With KRMC you will be able to:
√Create and manage a master password for your Defender drives
√Remotely delete all data on a target drive
√Schedule actions for present or future times
√Audit at administrator and super administrator level
√Locate devices via IP address (IP Address / network location)
√Locate devices via hostname
√Create remote policy modifications like:
○Password Strength and Length (e.g. 10 characters: 2 upper, 2 numbers, etc)
○Limit Invalid Login Attempts (e.g. 3 retries before drive is wiped)
○Rate at which password should be changed (e.g. every 30, 60, or 90 days)
○Change user password
○Change master password
√Create user groups
You Kanguru Defender 2000 does not come with KRMC enabled by default.
For more information about KRMC, visit: https://www.kanguru.com/index.php/flash-management

7
1.4 Kanguru Defender 2000 Models
The Kanguru Defender 2000 comes in two models, depending on your drive’s capacity. Differences
between the models are detailed in section 1.5 Technical Specifications on page 7.
1.5 Technical Specifications
General Specifications
Interface USB 2.0 (USB 1.1 compatible)
Encryption Features Hardware based 256-bit AES encryption
OS Compatibility
Windows Server 2003, Vista, 7, 8
Max OS X 10.5 and above (Intel based only)
Red Hat Enterprise Linux 5, Ubuntu 9/10, OpenSUSE 11.1
Linux Kernel 2.6.02 - 2.6.34
32 and 64 bit compatible
Write Cycles 10,000 write cycles / block
Data Retention 10 years or more
Operating Temp 0°C – 70°C
Humidity Range 20% - 90%
Shock Resistance 1000G Max
Vibration 15G Peak to Peak Max
4GB - 16GB Defender 2000 Specifications
Data Transfer Rate Read: 30 MB/s
Write: 20 MB/s
Weight 35g
Dimensions 72.6mm x 19.5mm x 9mm
Power (Read) Max Read: 5 VDC @ 122mA
Power (Write) Max Write: 5 VDC @ 182mA
32GB - 64GB Defender 2000 Specifications
Data Transfer Rate Read: 30 MB/s
Write: 20 MB/s
Weight 51g
Dimensions 77.3mm x 26.6mm x 9mm
Power (Read) Max Read: 5 VDC @ 150mA
Power (Write) Max Write: 5 VDC @ 266mA
Technical Specifications

8
2. Kanguru Defender Manager 2000
Kanguru Defender Manager 2000 (KDM2000) is the client program preloaded on the Defender 2000’s
CD-ROM partition. The user needs to login to KDM2000 in order to access the secure, encrypted partition.
KDM2000 comes pre-installed on your Defender 2000. No installation on your PC is necessary.
2.1 Identifying the Device Edition
Users can open the version.ini file located in the CD-ROM partition to verify whether the device is
running a Cloud edition, Enterprise edition or No-Comms edition client.
Open the version.ini file in a text editor and check the line for “Product Version” and check whether the
product version number ends in - 2, - 3 or - 6 suffix.
Version suffix Edition Description
-2 Cloud edition The standard Defender model.
-3 Enterprise edition Enterprise edition devices have been configured to be
able to communicate with KRMC Enterprise.
-6 No-Comms edition The No-Comms version is identical to the Cloud version
but with all communication functionality disabled.
Some other general differences are identified below:
In KDM Cloud:
• Anti-Virus (AV) definitions are downloaded from Kanguru server. The list with the most current
definitions is received from the Kanguru Central Server (KCS).
• Cannot be managed by KRMC Enterprise
In KDM Enterprise:
• AV definitions are downloaded from a KRMC enterprise server.
• Devices must be provisioned using UKLA - setting device properties and exporting them to a .krm
file that is added in KRMC Enterprise.
• “Enterprise Edition” appears on the splash screen
In KDM No-Comms:
• There is no AV functionality.
• There is no communication to any network or internet server.
• All drive communications, including live updates for the KDM client software for the drive, are
disabled.
• The drive operates in a completely offline mode, and cannot be managed by KRMC.
Kanguru Defender Manager 2000/ Identifying the Device Edition

9
2.2 Running KDM2000
The Kanguru Defender 2000 is compatible with multiple operating systems. Running the KDM2000
application can be different depending on the OS your computer is running.
2.2.1 Running KDM2000 on Windows
To run KDM2000 from a Windows operating system, simply connect your Defender 2000 to your
computer through a USB port. The KDM2000 application should start automatically if Autorun is
enabled.
If KDM2000 does not start automatically:
1. Open My Computer and open the Defender 2000’s CD-ROM partition named KDM2000. The
drive letter (e.g. D:, E:, F:) will depend on your computer.
2. Double-click on the KDM2000.exe file to launch the KDM2000 application.
If it is your first time running KDM2000 you will need to complete the setup wizard in order to set your
security password (see section 2.3 The Setup Wizard on page 14). If you have already setup your
security password, you will be prompted to login (see section 2.4 Unlocking the Security Partition on
page 20).
Caution! The KDM2000.exe file needs to remain on your Defender 2000’s CD-ROM partition at all
times. Always run the application from the Defender 2000’s CD-ROM partition. Do not try to copy
KDM2000 or run KDM2000 from your computer’s hard drive.
Note: Windows 7 users may not see the removable disk partition until you have logged into KDM2000.
If you are running Windows 7 and for any reason need to see the removable disk before you log into
KDM2000 please refer to the instructions on p.10.
Running KDM2000

10
Attention Windows 7 Users
Windows 7 users may not see the removable disk partition until you have logged into KDM2000 (see
section 2.4 Unlocking the Security Partition on page 20 for more information). This is normal.
If you are running Windows 7 and for any reason need to see the removable disk before you log into
KDM2000, you will need to configure Windows in the following manner:
Note: This is user preference only. There is no need to configure Windows in order to use your Defender
2000.
1. From My Computer, click on the Organize tab and then select Folder and search options.
2. The Folder Options window appears. Scroll down to the option for Hidden Files and Folders and
select Show hidden files, folders, and drives.
3. Click on the OK button to finish configuring Windows. The removable disk is now visible before
you log into KDM2000.
Attention Windows 7 Users

11
2.2.2 Running KDM2000 on Mac OS X
To run KDM2000 from Mac OS X, connect your Defender 2000 to your computer through a USB port. A
CD icon named ‘KDM2000’ will appear on the desktop. Double click on the KDM2000 icon to open it.
In the window that opens, double-click on the KDM2000.app file to launch the KDM2000 application.
If it is your first time running KDM2000 you will need to complete the setup wizard in order to set your
security password (see section 2.3 The Setup Wizard on page 14). If you have already setup your
security password, you will be prompted to login (see section 2.4 Unlocking the Security Partition on
page 20).
Caution! The KDM2000.app file needs to remain on your Defender 2000’s CD-ROM partition at all
times. Always run the application from the Defender 2000’s CD-ROM partition. Do not try to copy
KDM2000 or run KDM2000 from your computer’s hard drive.
Note: The KDM2000 icon is not always displayed on the desktop. If you do not see the KDM2000 icon
on your desktop, you can locate the KDM2000.app file on the CD-Rom partition through the Finder
window.
Running KDM2000 on Mac OS X

12
2.2.3 Running KDM2000 on Ubuntu Linux
To run KDM2000 from a Ubuntu Linux operating system, connect your Defender 2000 to your computer
through a USB port. A ‘KDM2000’ icon will appear on the desktop. Double click on the KDM2000 icon
to open it.
In the window that opens, double-click on the KDM2000 file to launch the KDM2000 application.
If it is your first time running KDM2000 you will need to complete the setup wizard in order to set your
security password (see section 2.3 The Setup Wizard on page 14). If you have already setup your
security password, you will be prompted to login (see section 2.4 Unlocking the Security Partition on
page 20).
Caution! The KDM2000 file needs to remain on your Defender 2000’s CD-ROM partition at all times.
Always run the application from the Defender 2000’s CD-ROM partition. Do not try to copy KDM2000
or run KDM2000 from your computer’s hard drive.
Running KDM2000 on Ubuntu Linux

13
2.2.4 Running KDM2000 on Red Hat Enterprise Linux 5
Note: You must have Super User or Root privileges in order to run KDM2000 on Red Hat Enterprise
Linux 5.
To run KDM2000 from the Red Hat Enterprise Linux 5 operating system, connect your Defender 2000
to your computer through a USB port. A CD icon named ‘KDM2000’ will appear on the desktop. If the
KDM2000 window doesn’t open automatically, double click on the KDM2000 icon to open it.
From the window that opens, copy the kdm2000_exec.sh shell script file to a location on your
computer’s local hard drive.
Once the kdm2000_exec.sh shell script has been copied to a local hard drive, you can execute
KDM2000 through the Terminal:
1. Open the Terminal window by clicking on Applications →Accessories →Terminal. The Terminal
location may be different depending on which version of Red Hat you are running.
2. From the Terminal, navigate to the directory where you copied the kdm2000_exec.sh shell script
file to.
3. Type, “chmod 007 kdm2000_exec.sh” to allow full execute permission.
4. Type, “./kdm2000_exec.sh” to execute the shell script.
If it is your first time running KDM2000 you will need to complete the setup wizard in order to set your
security password (see section 2.3 The Setup Wizard on page 14). If you have already setup your
security password, you will be prompted to login (see section 2.4 Unlocking the Security Partition on
page 20).
Running KDM2000 on Red Hat Enterprise Linux 5

14
2.3 The Setup Wizard
When you start KDM2000 for the first time you will be greeted by the Setup Wizard. Follow the Setup
Wizard instructions to create a security password for your Defender 2000’s secure, encrypted partition.
Caution! Once the Setup Wizard has started, you should not disconnect your Defender 2000 without
either first completing the Setup Wizard or closing the Setup Wizard by clicking on the X button.
2.3.1 Selecting a Setup Language
The default language for the Setup Wizard is set to English. To run the Setup Wizard in a different
language:
1. From the Welcome screen, click on the icon next to the Language Menu.
2. A list of available languages will appear in a drop down menu. Select your desired language from
the drop down menu. The Setup Wizard will switch to the new language.
3. Click on the Next button to continue to the next step.
The Setup Wizard / Selecting a Setup Language

15
2.3.2 Activating On-board Antivirus Protection (Windows only)
Note: This section does not apply if you are running the Setup Wizard in Linux or Mac OS X.
Note: This section does not apply to Enterprise Edition devices. Antivirus for Enterprise Edition is
activated by an administrator using Kanguru Remote Management Console (KRMC).
Note: This section does not apply to No-Comms Edition devices.
KDM2000 will automatically check if your device has a valid antivirus license key.
Note: Your Defender 2000 will need to be connected to a computer with internet access in order to
register for on-board antivirus protection.
If your Defender 2000 does not already have a valid antivirus license key, then you must fill out the
following registration form with the required information and then click on the Apply button in order to
activate your free antivirus trial.
Click on the Skip button if you do not wish to activate antivirus protection. If you decide to skip activating
your antivirus now, you will not be able to activate it in the future without first resetting your drive to
the factory default setting.
Click on the Next button to continue with setting up your Defender 2000’s security password.
Activating On-board Antivirus Protection

16
2.3.3 Setting a Password
From the Set Password screen:
1. Enter your password in the Password data field. You can enter your password using KDM2000’s
Virtual Keyboard by clicking the VK button. For more information on using the Virtual Keyboard
see section 2.5 Using the Virtual Keyboard to Enter Your Password on page 22.
Note: For security reasons, it is recommended that you incorporate letters, numbers and symbols
to achieve maximum security.
2. Enter the same password in the Confirm Password field for verification. If your passwords do not
match or there is any other issue with the password which you have entered in the Set Password
section, an explanation will be visible in the Password Info window.
Note: The Password Info window will inform you if there are any password requirements. It
updates in real time. Disregard the messages in the Password Info box until you have finished
entering your password into both the Password and Confirm Password fields.
3. Click on the Apply button to set your password. Once the password has been set you will see the
following message in the Password Info box:
4. Click the Next button and KDM2000 will automatically configure the security parameters.
Note: If you are managing your Defender 2000 with an administrative program like KLA or KRMC, you
can set a Master Password which can be used to reset the user password if it is lost or forgotten.
Setting a Password

17
2.3.4 KRMC Cloud
Note: This section does not apply to Enterprise Edition devices
Note: This section does not apply to No-Comms edition devices
Note: KRMC Cloud has not been evaluated for Common Criteria.
Kanguru Defender 2000 drives can be remotely managed using the Kanguru Remote Management
Console (KRMC). KRMC Cloud is hosted on Kanguru’s server and can be enabled on any Cloud edition
Defender 2000 drive.
To Enable KRMC Cloud functionality:
1. Select the Enable KRMC Cloud option and then click on the Apply button.
2. A dialog box will appear asking if you want to register your device with KRMC Cloud. Click on
the Yes button.
3. Your web browser will open and direct you to the KRMC Cloud login page. If you do not have an
account, you will need to register before logging in.
4. Purchase a license for your drive in order to use it with KRMC Cloud.
If you choose not to remotely manage your Defender using KRMC Cloud, select the Disable KRMC
Cloud option and then click on the Apply button. You will not be able to enable KRMC Cloud
functionality again, unless you first reset your drive to the factory default.
Click on the Next button to continue setting up your drive.
KRMC Cloud

18
2.3.5 Contact Info
Note: This section does not apply to Enterprise Edition users.
Your contact info will be saved to the drive. If you are managing your drive using KRMC Cloud, the
information entered here will be automatically be imported to the KRMC Cloud server when you register
your drive.
Fill in your information in the appropriate fields and then click on the Apply button. A window will
appear confirming that your data has been saved. Click on the OK button to close the window and then
click on the Next button to finish setting up your drive.
Congratulations! Your Defender 2000 is now ready to use.
Contact Info

19
2.3.6 Resetting the Device through the Setup Wizard
If you experience any problems during the Setup Wizard, you may have to perform a device reset before
you can complete the setup process.
To perform a device reset while in the Setup Wizard:
1. From anywhere in the Setup Wizard, click on the Prev button until you return to the Welcome
Screen.
2. On the Welcome Screen you will see a Reset button in the lower-left side of the application window.
Click on the Reset button.
3. A dialog box appears asking you to confirm the reset. Click on Ye s to reset your device to the
factory default settings.
After the device has been reset to the factory default setting you will be required to restart the Setup
Wizard.
Resetting from the Setup Wizard

20
2.4 Unlocking the Security Partition
Anytime you run KDM2000, you will be asked to login using your security password. You need to
provide the correct security password in order to access the Defender 2000’s secure partition.
When the login screen appears:
1. Enter your password in the Password field.
2. Click on the Login button.
Caution! If you enter your password incorrectly six times in a row (six is the default setting, this may
be different depending on your setup), for security purposes, any data stored on the secure partition will
automatically be erased. You will be issued an on-screen warning when you have one attempt remaining,
to prevent accidental erasure. To cancel the login process, click on the Cancel button. Unplugging and
then reinserting your Defender 2000 or manually running KDM2000.exe will bring the login window
back.
Once you have successfully logged in to KDM2000, the Defender 2000’s secure partition will be
accessible through My Computer or Windows Explorer. For more information on accessing the secure
partition, see section 2.6 Encrypting Files and Folders on page 23.
Caution! Once KDM2000 has started, you should never disconnect your device without first closing
KDM2000 properly by clicking the KDM2000 task bar icon and selecting Unmount Kanguru Defender
as described in section 2.13 Unmounting Your Defender 2000 on page 32.
Note: If your Defender 2000 drive is being managed by KRMC, you may see an Autorun checkbox.
This means that your administrator has configured your drive to auto-execute a file saved on your
drive’s secure partition every time you successfully login. You can disable the Autorun functionality by
unchecking this box.
Unlocking the Security Partition