Kanguru Defender Basic User manual

Kanguru Defender
Secure USB Flash Drive
User Manual
Copyright 2015, All Rights Reserved
For Defender Models:
• Defender 2000
• Defender 3000
• Defender Elite30
• Defender Elite200
• Defender Elite300

2
NOTICES AND INFORMATION
Please be aware of the following points before using your Kanguru Defender flash drive
Copyright © 2015 Kanguru Solutions. All rights reserved.
Windows XP®, Windows Vista®, Windows 7® and Windows 8® are registered trademarks of Microsoft
Inc. All other brands or product names are trademarks of their respective companies or organizations.
Kanguru Solutions will not be held responsible for any illegal use of this product nor any losses incurred
while using this product. The user is solely responsible for the copyright laws, and is fully responsible
for any illegal actions taken.
Customer Service
To obtain service or technical support for your system, please contact Kanguru Solutions Technical
Support Department at 508-376-4245, or visit www.Kanguru.com for web support.
Legal notice
In no event shall Kanguru Solutions’ liability exceed the price paid for the product from direct, indirect,
special, incidental, or consequential software, or its documentation. Kanguru Solutions offers no refunds
for its products. Kanguru Solutions makes no warranty or representation, expressed, implied, or statutory,
with respect to its products or the contents or use of this documentation and all accompanying software,
and specifically disclaims its quality, performance, merchantability, or fitness for any particular purpose.
Kanguru Solutions reserves the right to revise or update its products, software, or documentation without
obligation to notify any individual or entity.
Export Law Compliance
Regardless of any disclosure made to Kanguru Solutions pertaining to the ultimate destination of the
specific Kanguru product, you warrant that you will not export, directly or indirectly, any Kanguru
product without first obtaining the approval of Kanguru Solutions and the appropriate export license from
the Department of Commerce or other agency of the United States Government. Kanguru Solutions has
a wide range of products and each product family has different license requirements relative to exports.
Defragmenting Flash Memory Warning
Do not attempt to defragment your Kanguru Defender Flash Drive. Flash memory does not need to
be defragmented and does not gain any performance by doing so. Defragmenting your flash drive can
actually degrade the flash memory which may reduce the drive’s total capacity and lifespan.
Notices and Information

3
Table of Contents
Table of Contents
1. Introduction................................................................................................................ 5
1.1 Package Contents................................................................................................... 5
1.2 System Requirements ............................................................................................ 5
1.3 Features.................................................................................................................. 5
1.4 Remote Management Capability ........................................................................... 6
1.5 FIPS 140-2 Certified Drives.................................................................................. 6
1.6 Common Criteria Certified Drives ........................................................................ 6
1.7 The Write Protect Switch....................................................................................... 7
2. Kanguru Defender Manager..................................................................................... 8
2.1 Running KDM....................................................................................................... 8
2.1.1 Running KDM on Windows........................................................................ 8
2.1.2 Running KDM on Mac OS X...................................................................... 10
2.1.3 Running KDM on Ubuntu Linux ............................................................... 11
2.1.4 Running KDM on Red Hat Enterprise Linux 5........................................... 12
2.2 The Setup Wizard .................................................................................................. 13
2.2.1 Selecting a Setup Language ........................................................................ 13
2.2.2 Resetting the Device through the Setup Wizard.......................................... 14
2.2.3 Activating On-board Antivirus Protection (Windows only)........................ 15
2.2.4 KRMC Cloud .............................................................................................. 16
2.2.5 Contact Info................................................................................................. 17
2.2.6 Setting a Password....................................................................................... 18
2.2.7 Enabling Self Service Password Reset........................................................ 19
2.3 The Login Screen................................................................................................... 20
2.3.1 Enabling and Disabling Autorun Functionality........................................... 21
2.3.2 Enabling Software Write Protection............................................................ 21
2.3.3 Resetting You Device from the Login Screen ............................................. 22
2.3.4 Using the Virtual Keyboard to Enter Your Password .................................. 23
2.4 The KDM Taskbar Menu....................................................................................... 24
2.4.1 Encrypting Files and Folders....................................................................... 25
2.4.2 Enabling On-board Antivirus (Windows only) ........................................... 26
2.4.3 The Onboard Antivirus console................................................................... 26
2.4.3.1 Device Scan..................................................................................... 27
2.4.3.2 Path Scan ......................................................................................... 28
2.4.3.3 File Scan .......................................................................................... 29
2.4.3.4 Antivirus License............................................................................. 30
2.4.4 Changing Your Password ............................................................................ 31
2.4.4.1 Self Service Password Reset ........................................................... 32
2.4.5 KRMC Cloud Settings ................................................................................ 33
2.4.6 Changing Languages ................................................................................... 34
2.4.7 Connection Settings and Configuring a Proxy Server................................. 35

4
Table of Contents
2.5 Online Documentation........................................................................................... 36
2.6 About KDM........................................................................................................... 36
2.7 Unmounting Your Defender .................................................................................. 37
3. Updating Your Defender Flash Drive....................................................................... 38
3.1 Updating standard edition drives........................................................................... 38
3.2 Updating KRMC enterprise edition drives............................................................ 39
3.3 Verifying the download checksum ........................................................................ 39
4. Safely Removing Your Defender Flash Drive .......................................................... 40
4.1 Safely Removing from Windows .......................................................................... 40
4.2 Safely Removing from Mac OS X ........................................................................ 41
4.3 Safely Removing from Linux................................................................................ 41
5. Technical Specifications............................................................................................. 42
5.1 Defender 2000 ...................................................................................................... 42
5.2 Defender 3000 ...................................................................................................... 43
5.3 Defender Elite30.................................................................................................... 44
5.4 Defender Elite200.................................................................................................. 45
5.5 Defender Elite300.................................................................................................. 46
6. Warranty Information............................................................................................... 47
7. Tech Support .............................................................................................................. 47
Appendix A - Common Criteria Certified Versions......................................................... 48
Appendix B - Proxy Support.............................................................................................. 49

5
Introduction
1. Introduction
The Kanguru Defender flash drive is a hardware encrypted, tamper proof USB flash drive. The Defender
flash drive contains two partitions: a CD-ROM partition and a secure, encrypted partition. The CD-ROM
partition contains the login application that will allow you to access the secured partition. The secure
partition is where your actual data will be stored.
The Kanguru Defender flash drive secures your sensitive data using:
• 256-bit AES hardware encryption
• Secure password protection
1.1 Package Contents
Please check the contents of the package you received. If any of the parts listed below are missing, please
contact Kanguru Solutions (508-376-4245) and you will be shipped replacement parts immediately.
• Kanguru Defender USB Flash Drive
• Quick Start Guide
• Registration Form
1.2 System Requirements
• 1 available USB port (USB 2.0 or higher recommended)
• 256MB of internal DDR RAM or more
• 500MHz internal CPU or faster
• For supported operating systems see Chapter 5. Technical Specifications on page 42
1.3 Features
√256-bit AES hardware encryption
√Password protected secure partition for your important data
√Does NOT require Admin privileges (except with Red Hat Enterprise Linux 5)
√Driverless installation (Plug & Play)
√High-strength alloy housing
√On-board antivirus protection
√HIPAA compliant
√Sarbanes Oxley compliant
√GLB compliant
√Remote Management ready
√TAA compliant

6
Introduction
1.4 Remote Management Capability
The Kanguru Defender flash drive can be remotely managed using the Kanguru Remote Management
Console (KRMC). KRMC is a web-based application that gives administrators a complete USB
management system.
With KRMC you will be able to:
√Remotely manage your Defender drives
√Remotely delete all data off a drive
√Reset user passwords
√Locate devices via IP address (IP Address / network location)
√Locate devices via hostname
√Create remote policy modifications like:
○Password Strength and Length (e.g. 10 characters: 2 upper, 2 numbers, etc)
○Limit Invalid Login Attempts (e.g. 6 retries before drive is wiped)
○Rate at which password should be changed (e.g. every 30, 60, or 90 days)
√Create user groups
You Kanguru Defender flash drive does not come with KRMC enabled by default. For more information
about KRMC, visit: https://kanguru.com/remote-management/remote-management-suite.shtml
1.5 FIPS 140-2 Certified Drives
The Federal Information Processing Standard (FIPS) Publication 140-2 is a U.S. government computer
security standard used to accredit cryptographic modules.
• The Defender Elite200 and Elite300 have been certified for FIPS 140-2 Security Level 2
○Security Level 2 improves upon the physical security mechanisms of the cryptographic module
by requiring features that show evidence of tampering, including tamper-evident coatings or
seals that must be broken to attain physical access to the plaintext cryptographic keys and
critical security parameters within the module.
• The Defender 2000 and Defender 3000 have been certified for FIPS 140-2 Security Level 3
○In addition to the tamper-evident physical security mechanisms required at Security Level
2, Security Level 3 attempts to prevent an intruder from gaining access to critical security
parameters held within the cryptographic module. Physical security mechanisms required at
Security Level 3 have a high probability of detecting and responding to attempts at physical
access, use or modification of the cryptographic module.
1.6 Common Criteria Certified Drives
Common Criteria provides an international set of guidelines for evaluating data security products,
ensuring that they meet strict, security standards for government deployments. Several specific Defender
flash drives have been Common Criteria certified. For more information please refer to Appendix A -
Common Criteria Certified Versions on page 48

7
1.7 The Write Protect Switch
Kanguru Defender Elite30, Elite200 and Elite300 flash drives have a physical write protect switch
located on the edge of the drive, near the USB connector:
• Unlocked - Push the write protect switch towards the USB connector side of the device to set it in
the unlocked position. When the write protect switch is set in the unlock position, the device will
function normally.
• Locked - Push the write protect switch towards the LED side of the device to set it in the locked
position. When set in the lock position, the write protect switch will prevent data from being written
to the device’s secure partition.
Important! For devices with a physical write protect switch, the write protect switch must be set in the
intended functioning position (i.e. locked or unlocked) prior to connecting the drive to the computer.
WARNING! You may receive an error if you attempt to setup or login to your device while the write
protect switch is set in the locked position. Please check and make sure that the write protect switch is
set in the unlocked position. It is highly recommended to go through the setup wizard, login and mount
the device’s secure partition before setting the write protect switch to the locked position.
Note: The Defender 2000 and Defender 3000 flash drives use software based write protection and do not
have a physical switch. To enable the software write protection on a Defender 2000 or Defender 3000,
please refer to section 2.3.2 Enabling Software Write Protection on page 21.
Introduction

8
2. Kanguru Defender Manager
Kanguru Defender Manager (KDM) is the client program preloaded on the Defender’s CD-ROM
partition. The user needs to login to KDM in order to access the secure, encrypted partition. KDM comes
pre-installed on your Defender flash drive. No installation to your PC is necessary.
KDM is named differently for each model:
• KDM2000 = Defender 2000
• KDM3000 = Defender 3000
• KDME30 = Defender Elite30
• KDME200 = Defender Elite200
• KDME300 = Defender Elite300
2.1 Running KDM
The Kanguru Defender flash drive is compatible with multiple operating systems. Running the KDM
application can be different depending on the operating system your computer is running. For more
info on which operating systems are supported by your device, please refer to Chapter 5. Technical
Specifications on page 42
2.1.1 Running KDM on Windows
To run KDM from a Windows operating system, simply connect your Defender flash drive to your
computer through a USB port. The KDM application should start automatically if Autorun is enabled.
If KDM does not start automatically:
1. Open an explorer window and open the Defender’s CD-ROM partition. The drive letter (e.g. D:, E:,
F:) will depend on your computer.
2. Double-click on the KDM.exe file to launch the KDM application.
○If it is your first time running KDM you will need to complete the setup wizard (see section 2.2
The Setup Wizard on page 13).
○If you have already gone through the setup wizard, you will be prompted to login (see section
2.3 The Login Screen on page 20).
Caution! The ‘KDM.exe’ file needs to remain on your Defender’s CD-ROM partition at all times.
Always run the application from the Defender’s CD-ROM partition. Do not try to copy KDM or run
KDM from your computer’s hard drive.
Note: Windows 7 users may not see the removable disk partition until you have logged into KDM. If
you are running Windows 7 and for any reason need to see the removable disk before you log into KDM
please refer to the instructions on p.9.
Running Kanguru Defender Manager

9
Attention Windows Users
Windows 7 users may not see the removable disk partition until you have logged into KDM. This is
normal. If you are running Windows 7 or 8 and for any reason need to see the removable disk before you
log into KDM, you will need to configure Windows in the following manner:
Note: This is user preference only. There is no need to configure Windows in order to use your Defender
flash drive.
1. Open the Folder and search options.
○Windows 7 : Open My Computer, click on the Organize tab and then select Folder and
search options.
○Widows 8 : Open a explorer window, click on the View tab, click on Options > Change
Folder and Search Options
Windows 7 Windows 8
2. The Folder Options window appears. Scroll down to the option for Hidden Files and Folders and
select Show hidden files, folders, and drives.
3. Click on the OK button to finish configuring Windows. The removable disk should now be visible
before you login to KDM.
Running Kanguru Defender Manager

10
2.1.2 Running KDM on Mac OS X
To run KDM from Mac OS X, connect your Defender flash drive to your computer through a USB port.
A CD icon named ‘KDM’ will appear on the desktop. Double click on the KDM icon to open it.
In the window that opens, double-click on the KDM.app file to launch the KDM application.
• If it is your first time running KDM you will need to complete the setup wizard in order to set your
security password (see section 2.2 The Setup Wizard on page 13).
• If you have already setup your security password, you will be prompted to login (see section 2.3
The Login Screen on page 20).
Caution! The ‘KDM.app’ file needs to remain on your Defender’s CD-ROM partition at all times.
Always run the application from the Defender’s CD-ROM partition. Do not try to copy KDM or run
KDM from your computer’s hard drive.
Note: The KDM icon is not always displayed on the desktop. If you do not see the KDM icon on your
desktop, you can locate the ‘KDM.app’ file on the CD-Rom partition through the Finder window.
Running Kanguru Defender Manager

11
2.1.3 Running KDM on Ubuntu Linux
The following Defender flash drive models are supported on Linux Ubuntu:
• Defender 2000
• Defender 3000
• Defender Elite200
• Defender Elite300
To run KDM from an Ubuntu Linux operating system, connect your Defender to your computer through
a USB port. A ‘KDM’ icon will appear on the desktop. Double click on the KDM icon to open it.
In the window that opens, double-click on the KDM file to launch the KDM application.
• If it is your first time running KDM you will need to complete the setup wizard in order to set your
security password (see section 2.2 The Setup Wizard on page 13).
• If you have already setup your security password, you will be prompted to login (see section 2.3
The Login Screen on page 20).
Caution! The KDM file needs to remain on your Defender’s CD-ROM partition at all times. Always
run the application from the Defender’s CD-ROM partition. Do not try to copy KDM or run KDM from
your computer’s hard drive.
Running Kanguru Defender Manager

12
2.1.4 Running KDM on Red Hat Enterprise Linux 5
Only the following Defender flash drive models are supported on Red Hat Enterprise Linux 5:
• Defender 2000
• Defender Elite200
Note: You must have Super User or Root privileges in order to run KDM on Red Hat Enterprise Linux 5.
To run KDM from the Red Hat Enterprise Linux 5 operating system, connect your Defender flash drive
to your computer through a USB port. A CD icon named ‘KDM’ will appear on the desktop. If the KDM
window doesn’t open automatically, double click on the KDM icon to open it.
From the window that opens, copy the kdm_exec.sh shell script file to a location on your computer’s
local hard drive.
Once the kdm_exec.sh shell script has been copied to a local hard drive, you can execute KDM
through the Terminal:
1. Open the Terminal window by clicking on Applications →Accessories →Terminal. The Terminal
location may be different depending on which version of Red Hat you are running.
2. From the Terminal, navigate to the directory where you copied the kdm_exec.sh shell script file to.
3. Type, “chmod 007 kdm_exec.sh” to allow full execute permission.
4. Type, “./kdm_exec.sh” to execute the shell script.
○If it is your first time running KDM you will need to complete the setup wizard in order to set
your security password (see section 2.2 The Setup Wizard on page 13).
○If you have already setup your security password, you will be prompted to login (see section 2.3
The Login Screen on page 20).
Running Kanguru Defender Manager

13
2.2 The Setup Wizard
When you start KDM for the first time you will be greeted by the Setup Wizard. Follow the Setup Wizard
instructions to create a security password for your Defender’s secure, encrypted partition.
Caution! Once the Setup Wizard has started, you should not disconnect your Defender flash drive
without either first completing the Setup Wizard or closing the Setup Wizard by clicking on the X button.
2.2.1 Selecting a Setup Language
The default language for the Setup Wizard is English. To run the Setup Wizard in a different language:
1. From the Welcome screen, click on the icon in the Language Menu.
2. A list of available languages will appear in a drop down menu. Select your desired language from
the drop down menu. The Setup Wizard will switch to the new language.
3. Click on the Next button to continue to the next step.
The Setup Wizard

14
2.2.2 Resetting the Device through the Setup Wizard
If you experience any problems during the Setup Wizard, you may have to perform a device reset before
you can complete the setup process.
To perform a device reset while in the Setup Wizard:
1. From anywhere in the Setup Wizard, click on the Prev button until you return to the Welcome
Screen.
2. On the Welcome Screen you will see a ‘Reset’ button in the lower-left side of the application
window. Click on the Reset button.
3. A dialog box appears asking you to confirm the reset. Click on Ye s to reset your device to the
factory default settings.
After the device has been reset to the factory default setting you will be required to restart the Setup
Wizard.
The Setup Wizard

15
2.2.3 Activating On-board Antivirus Protection (Windows only)
This section does not apply if you are running the Setup Wizard in Linux or Mac OS X. This section
does not apply to Enterprise Edition users. Antivirus for Enterprise Edition is activated through Kanguru
Remote Management Console (KRMC). Enterprise Edition users, please contact your administrator.
Note: Your Defender flash drive will need to be connected to a computer with internet access in order to
register for on-board antivirus protection.
KDM will automatically check during the Setup Wizard for a valid antivirus license key.
If your Defender flash drive does not already have a valid antivirus license key, then you must fill out
the registration form with the required information and then click on the Apply button to activate your
free antivirus trial.
Click on the Skip button if you do not wish to activate antivirus protection. If you decide not to activate
your antivirus at this point, you will not be able to activate it in the future without first resetting your
drive back to the factory default setting.
Click on the Next button to continue with setting up your Defender’s security password.
The Setup Wizard

16
2.2.4 KRMC Cloud
Note: This section does not apply to KRMC Enterprise Edition users.
Kanguru Defender flash drives can be remotely managed using the Kanguru Remote Management
Console (KRMC). KRMC Cloud is hosted on Kanguru’s server and can be enabled on any non-Enterprise
Defender flash drive.
To Enable KRMC Cloud functionality:
1. Select the Enable KRMC Cloud option and then click on the Apply button.
2. A dialog box will appear instructing you to enter your KRMC Cloud Account ID. Click on the OK
button.
3. Enter your KRMC Cloud Account ID in the field provided, and then click on the Register button.
This will register your device with your KRMC Cloud account.
Note: If you have not purchased a KRMC Cloud license and do not have a KRMC Cloud Account ID
then please contact Kanguru Sales to purchase a KRMC Cloud license. If you have a KRMC Cloud
account but do not remember your KRMC Cloud Account ID, please contact Kanguru Technical Support.
If you choose not to remotely manage your Defender using KRMC Cloud, select the Disable KRMC
Cloud option and then click on the Apply button. You will not be able to enable KRMC Cloud
functionality again, unless you first reset your drive to the factory default.
Click on the Next button to continue setting up your drive.
The Setup Wizard

17
2.2.5 Contact Info
If you chose to manage your drive using KRMC Cloud, then the information entered in the Contact Info
window will automatically be imported to the KRMC Cloud server when you register your drive. If you
did not enable KRMC Cloud then you can skip this step.
Note: This section does not apply to KRMC Enterprise Edition users.
Fill in your information in the appropriate fields and then click on the Apply button. Any field that
appear with a *next to it is a mandatory field and must be filled out.
A window will appear confirming that your data has been saved. Click on the OK button to close the
window and then click on the Next button to finish setting up your drive.
The Setup Wizard

18
2.2.6 Setting a Password
From the Set Password screen:
1. Enter your password in the ‘Password’ field. You can enter your password using KDM’s Virtual
Keyboard by clicking the VK button. For more information on using the Virtual Keyboard see
section 2.3.4 Using the Virtual Keyboard to Enter Your Password on page 23.
Note: For security reasons, it is recommended that you incorporate letters, numbers and symbols
to achieve maximum security.
2. Enter the same password in the ‘Confirm Password’ field for verification. If your passwords do not
match or there is any other issue with the password which you have entered in the Set Password
section, an explanation will be visible in the ‘Password Info’ window.
Note: The ‘Password Info’ window will inform you if there are any password requirements. It
updates in real time. Disregard the messages in the Password Info box until you have finished
entering your password into both the Password and Confirm Password fields.
3. Click on the Apply button to set your password. Once the password has been set you will see the
following message in the ‘Password Info’ box:
4. Click the Next button and KDM will automatically configure the security parameters.
The Setup Wizard

19
2.2.7 Enabling Self Service Password Reset
Enabling Self Service Password Reset (SSPR) functionality will allow you to reset your Defender’s
password without first needing to wipe the data stored in the secure partition. The SSPR feature is a
subscription service and requires a license key. If you do not have a license key, either contact Kanguru
to purchase one, or select the Disable Service option and then click on the Apply button.
If you decide to enable the SSPR service:
1. Select the Enable Service option and then click on the Apply button.
Note: If you want to enable SSPR but have not yet purchased your SSPR subscription, you can
select ‘I will set this up later’ and then click on the Next button.
2. Next you’ll need to designate an email address that you can have a password reset link sent to in
case you forget your login password. Enter your email in the corresponding fields.
3. Enter your SSPR license key in the ‘Enter License Key’field and then click on the Send button. Your
SSPR license key should have been e-mailed to you when you purchased your SSPR subscription.
Contact Kanguru if you did not receive your SSPR license.
4. An email containing your activation code will be sent to the email address you entered above. Enter
the activation code into the ‘Enter Activation Code’ field and then click on the Activate button.
Note: The activation code field is case sensitive. Please enter your activation code exactly as it
appears in the email that you received from Kanguru.
5. Click on the OK button to close the window, and then click on the Next button.
Congratulations! Your Defender flash drive is now setup and ready to use.
The Setup Wizard

20
2.3 The Login Screen
Anytime you run KDM, you will be asked to login using your security password. You need to provide
the correct security password in order to access the Defender’s secure partition.
When the login screen appears:
1. Enter your password in the ‘Password’ field.
2. Click on the Login button.
Caution! By default, if you enter your password incorrectly six times in a row any data stored on the
secure partition will automatically be erased for security purposes. You will be issued an on-screen
warning when you have one attempt remaining, to prevent accidental erasure. To cancel the login process,
click on the Cancel button. Unplugging and then reinserting your Defender flash drive or manually
restarting KDM.exe will bring the login window back.
Once you have successfully logged in to KDM, the Defender’s secure partition will be accessible through
My Computer or Windows Explorer. For more information on accessing the secure partition, see section
2.4.1 Encrypting Files and Folders on page 25.
Caution! Once KDM has started, you should never disconnect your device without first closing KDM
properly by clicking the KDM task bar icon and selecting Unmount Kanguru Defender as described
in section 2.7 Unmounting Your Defender on page 37.
The Setup Wizard