Kingston Technology DTVP30M-R User manual

User Manual
DataTraveler®Vault Privacy 3.0 Managed-Ready Solution
Find the language and latest documentation for your Kingston®DTVP30M-R here.
DTVP30M-R Installation Guide
Simplied Chinese .....
Traditional Chinese ....
............For instructions in English
. . . . . . . . . . . . . . . . . . Para instrucciones en español
.........Für Anleitungen in Deutsch
. . . . . . . . . . . . . . . . . . Pour des instructions en français
. . . . . . . . . . . . . . . . . . Per le istruzioni in italiano
............Por as instruções em português
. . . . . . . . . . . . . . . . . . Instrukcje w jezyku polskim
. . . . . . . . . . . . . . . . . . Для инструкции на русском
. . . . . . . . . . . . . . . . . . Turkce talimatlar icin
. . . . . . . . . . . . . . . . . . Japanese
. . . . . . . . . . . . . . . . . . Thai
. . . . . . . . . . . . . . . . . . Vietnamese

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 1 of 14
DataTraveler® Vault Privacy 3.0
Managed-Ready Solution
User Manual

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 2 of 14
About This User Guide
This quick start guide is for Kingston's DataTraveler® Vault Privacy 3.0 – Managed-Ready
Secure USB device (referred to simply as DTVP30M-R from this point forward) using the
default system values and no customisations.
System Requirements
PC Platform
 Pentium III processor or equivalent (or
faster)
 15MB free disk space
 USB 2.0/3.0
 Two available consecutive drive letters
after the last physical drive
Supported PC Operating Systems
 Windows 8, 8.1 (non RT)
 Windows 7 (SP1)
 Windows Vista® (SP2)
Mac Platform
 15MB free disk space
 USB 2.0/3.0
Supported Operating Systems
 Mac OS X 10.6.x - 10.9x
(Note: Administrator privileges are required to set up console preferences on Mac clients.)
Figure 1.1 – USB 2.0/3.0 ports, type A
Figure 1.2 – DTVP30M-R

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 3 of 14
Recommendations
To ensure that ample power is supplied to the DTVP30M-R device, insert it directly into a USB
2.0/3.0 port on your notebook or desktop, as seen in Figure 1.3. Avoid connecting it to any
peripheral device(s) that may feature a USB port, such as a keyboard or USB-powered hub, as
seen in Figure 1.4.
Figure 1.3 – Recommended usage
Figure 1.4 – Not recommended

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 4 of 14
Setup (Windows environment)
1. Insert the DTVP30M-R into an available USB port
on your notebook or desktop and wait for
Windows to detect it.
 Windows Vista/7/8 users will receive a device
driver notification as seen in Figure 2.1.
Once the new hardware detection is complete,
Windows will prompt you to begin the initialisation
process.
 Windows Vista/7/8 users will see an AutoPlay
window similar to the one in Figure 2.2.
2. Select the option ‘Run DTVP30M-R.exe’.
If Windows does not AutoPlay, you can browse to
the CD-ROM partition (Figure 2.3) and manually
execute the DTVP30M-R program. This will also
start the initialisation process.
Figure 2.3 – DTVP30M-R contents
Figure 2.1 – Device driver installation
Figure 2.2 – AutoPlay window
(Note: Menu options in the AutoPlay
window may vary depending on what
programs are currently installed on
your computer. AutoRun will start the
initialisation process automatically.)

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 5 of 14
Device Initialisation (Windows Environment)
DTVP30M-R can be initialised one of two ways: standalone or managed. When you insert the
drive into a USB port on the host, DTVP30M-R will look for a 'safestick' registry key* which
provides the location of the SafeConsole server:
(*Note: You can also use the Windows installer from the SafeConsole's deployment page.)
'HKey_Current_User\Software\BlockMaster\DTVPM
If the registry key does NOT exist, DTVP30M-R will bypass the management option and allow
you to initialise the device as a standalone drive. If the registry key DOES exist, a message
box prompt is displayed that allows you to decide whether or not the DTVP30M-R drive will be
managed. Figure 3.1
Figure 3.1 – Found SafeConsole
1. Decide whether DTVP30M-R will be managed or not.
Clicking 'Yes' will register DTVP30M-R with SafeConsole and inherit the policies that are
in place on the management console, including password criteria, device auditing and
other managed features. To confirm ownership of this device, you will be prompted for
the credentials of the local host/domain user prior to initialisation. Figure 3.2
Figure 3.2 – Confirm ownership
The DTVP30M-R will remain in the managed state until the device is reset. Continue on
next page.

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 6 of 14
Device Initialisation (Windows Environment), Continued:
Clicking 'No' will prevent the DTVP30M-R from registering with SafeConsole and it will
initialise as a standalone drive. This message box will continue to appear each time the
device is plugged in, until you opt to register with SafeConsole.
2. Select a password. Non-managed and standalone drives require a password with the
following criteria (Figure 3.3):
Minimum of eight (8) characters, including 1 upper-case, 1 lower-case and 1 digit
Figure 3.3 – Confirm password
Managed drives require passwords that meet the criteria set forth in the policy of the
SafeConsole management server.
3. Once a password has been selected (and it meets the specified criteria), you must enter
it a second time in the 'Confirm Password' text box to ensure proper entry.
4. Click the checkbox to accept the warranty statement.
5. Click [Confirm] to complete initialisation.

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 7 of 14
Device Usage (Windows Environment)
Each time that you insert the DTVP30M-R, you will be prompted to enter the password created
during the initialisation process (Figure 4.1). During the login process, if you enter an invalid
password (Figure 4.2), you will be given another opportunity to enter the correct password. Note
that there is a built-in security feature that tracks the number of invalid login attempts. If this
number reaches the pre-configured value of 10 (maximum number of invalid logins), the
DTVP30M-R will lock you out and require a device reset. Figure 4.3 on next page
(Note: If you log in successfully before reaching the limit of 10 invalid password attempts, the
login counter will reset.) Continues on next page.
Figure 4.1 – Enter password
Figure 4.2 – Login failure

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 8 of 14
Device Initialisation (Windows Environment), Continued:
Figure 4.3 – MaxNoA reached

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 9 of 14
Setup (Mac Environment)
Insert the DTVP30M-R into an available USB port on your Mac notebook or desktop and wait
for the operating system to detect it. If the 'DTVP30M-R' volume (Figure 5.1) does not appear
on the desktop, open Finder and locate the 'DTVP30M-R' volume (Figure 5.2) on the left side
of the Finder window (listed under DEVICES.) Highlight the volume and double-click the
'DTVP30M-R' application icon in the 'Finder' window. (Figure 5.2) This will start the initialisation
process.
Figure 5.1 – DTVP30M-R
Figure 5.2 – Contents

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 10 of 14
Device Initialisation (Mac Environment)
DTVP30M-R can be initialised one of two ways: standalone or managed. Upon launching the
DTVP30M-R application on the DTVP30M-R volume, DTVP30M-R will look for a SafeConsole
server. If the Mac has been set up for SafeConsole, it will prompt for the DTVP30M-R to be
managed.
Mac SafeConsole Setup:
To initialise the DTVP30M-R on a Mac client, the application must know where to locate the
SafeConsole server. To enable this, follow these steps prior to inserting the device:
1. Click on the "Go" menu in the upper left-hand corner of the OS X desktop.
2. Select 'Utilities' from the drop-down menu.
3. Launch the 'Terminal' application.
4. Using the admin account, type " defaults write
/Library/Preferences/com.blockmaster.device console https://<IP Address of
SafeConsole Server>/safestick " in the terminal window and press [ENTER]. (NOTE: This
command does require elevated privileges.)
5. Exit the terminal window.
6. Insert the DTVP30M-R into an available USB port on your notebook or desktop.
a. Open Safari and browse to the SafeConsole login address you specified in Step 4.
b. When the certificate warning appears, click “Show certificate”.
c. Press the arrow to the left of the “Trust” menu to show the trust options.
d. Change the “When using this certificate” to “Always Trust”.
e. Click the 'Continue' button.
f. Enter your credentials to connect to SafeConsole.
(Note: You can also use the Mac installer from the SafeConsole's deployment page.)
If the Mac hasn't been setup to connect to a SafeConsole Server, DTVP30M-R will bypass the
management option and allow you to initialise the device as a standalone drive. If the Mac has
been setup, a message box prompt is displayed that allows you to decide whether or not the
DTVP30M-R drive will be managed.
1. Decide whether DTVP30M-R will be managed or not.
Clicking 'Yes' will register DTVP30M-R with SafeConsole and inherit the policies that are
in place on the management console, including password criteria, device auditing and
other managed features. (Figure 6.1) Continue on next page.
Figure 6.1 – Found SafeConsole

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 11 of 14
Device Initialisation (Mac Environment), Continued:
Click 'Yes" to confirm ownership of this device, you will be prompted if you are the user
responsible for the device. Figure 6.2
Figure 6.2 – Confirm user (continued on next page)

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 12 of 14
Device Initialisation (Mac Environment), Continued:
1. Select a password. Non-managed drives require a password with the following criteria:
Minimum of eight (8) characters, including 1 upper-case, 1 lower-case and 1 digit
Managed drives require passwords that meet the criteria set forth in the policy of the
SafeConsole management server.
2. Once a password has been selected (and it meets the specified criteria), you must enter
it a second time in the 'Confirm Password' text box to ensure they match. Figure 6.3
3. Click the checkbox to accept the warranty statement.
Figure 6.3 – Confirm password
4. Click [Confirm] to complete initialisation.

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 13 of 14
Device Usage (Mac Environment)
Each time that you insert the
DTVP30M-R into a Mac system, the
Kingston DTVP30M-R application will
need to be launched. This initiates the
login routine that authenticates the user
and protects the secure data partition.
When the login window appears
(Figure 7.1), enter your password and
press [ENTER] or click on the arrow to
proceed.
Figure 7.1 – Enter password
During the login process, if you enter
an invalid password (Figure 7.2), you
will be given another opportunity to
enter the correct password. Note that
there is a built-in security feature that
tracks the number of invalid login
attempts. If this number reaches the
pre-configured value of 10 (maximum
number of invalid logins), the
DTVP30M-R will lock you out and
require a device reset.
Figure 7.2 – Login failure
(Note: If you log in successfully before reaching the limit of 10 invalid password attempts, the
login counter will reset.) Continued on next page.

Document No. 480DTVP30M-R.A01
Managed-Ready Solution
Page 14 of 14
Device Usage (Mac Environment), Continued:
When you enter the correct password, you can access the secure data partition and the
DTVP30M-R menu in the upper left-hand corner. The menu options that appear will vary
based on the policies configured in SafeConsole. By default, users will be able to change their
password, lock the device, and change the lockout timer settings. Figure 7.3
Figure 7.3 – MaxNoA reached

No. de documento 480DTVP30M-R.A01
Solución "Listo para ser Administrado"
Página 1 de 14
DataTraveler® Vault Privacy 3.0
Solución "Listo para ser Administrado"
Manual del usuario

No. de documento 480DTVP30M-R.A01
Solución de "Listo para ser Administrado"
Página 2 de 14
Acerca de esta Guía del Usuario
Esta guía de inicio rápido es para el dispositivo USB Seguro DataTraveler® Vault Privacy 3.0 –
Managed-Ready de Kingston (mencionado simplemente como DTVP30M-R desde este punto
hacia adelante) utilizando los valores predeterminados de sistema y sin personalizaciones.
Requerimientos del sistema
Plataforma de PC
 Procesador Pentium III o equivalente
(o más rápido)
 15MB de espacio libre en disco
 USB 2.0/3.0
 Dos letras de dispositivo consecutivas
después del último dispositivo físico
Soporte para sistema operativo de PC
 Windows 8, 8.1 (no RT)
 Windows 7 (SP1)
 Windows Vista® (SP2)
Plataforma Mac
 15MB de espacio libre en disco
 USB 2.0/3.0
Soporte para sistema operativo
 Mac OS X 10.6.x - 10.9x
(Nota: Son necesarios privilegios de administrador para configurar preferencias de la
consola de clientes Mac.)
Figura 1.1 – Puertos USB 2.0/3.0, Tipo A
Figura 1.2 – DTVP30M-R

No. de documento 480DTVP30M-R.A01
Solución de "Listo para ser Administrado"
Página 3 de 14
Recomendaciones
Para asegurarse que disponga de la conexión de energía adecuada para el dispositivo
DTVP30M-R, insértelo directamente en el puerto USB 2.0/3.0 de su notebook o computadora
de escritorio, como se ve en la Figura 1.3. Evite conectarlo a cual(es)quier dispositivo(s)
periférico(s) que pueda contar con un puerto USB, tal como un teclado o un concentrador
alimentado por USB, como se ve en la Figura 1.4.
Figura 1.3 - Uso recomendado
Figura 1.4 - No se recomienda

No. de documento 480DTVP30M-R.A01
Solución de "Listo para ser Administrado"
Página 4 de 14
Configuración (entorno de Windows)
1. Inserte el DTVP30M-R en un puerto USB
disponible en su notebook o computadora de
escritorio, y espere a que Windows lo detecte.
 Los usuarios de Windows Vista/7/8 recibirán
una notificación sobre el controlador de
dispositivo tal como se ve en la Figura 2,1.
Una vez que la detección del nuevo hardware se
haya terminado, Windows comenzará con el
proceso de inicialización.
 Los usuarios de Windows Vista/7/8 verán una
ventana de Reproducción automática similar a
la de la Figura 2.2.
2. Seleccione la opción ‘Run DTVP30M-R.exe'.
Si Windows no lo ejecuta automáticamente, puede
navegar a la partición del CD-ROM (Figura 2.3), y
ejecute manualmente el programa DTVP30M-R.
Esto también dará comienzo al proceso de inicio.
Figura2.3 – Contenido del DTVP30M-R
Figura 2.1 – Instalación del controlador del
dispositivo
Figura 2.2 – Ventana de Reproducción
automática
(Nota: Las Opciones de menú en la
ventana de Reproducción automática
pueden variar dependiendo de qué
programas están actualmente
instalados en la computadora. La
Ejecución automática dará comienzo
al proceso de inicio de forma
automática.)

No. de documento 480DTVP30M-R.A01
Solución de "Listo para ser Administrado"
Página 5 de 14
Inicio del dispositivo (entorno de Windows)
El DTVP30M-R puede ser iniciado en una de dos maneras: Autónomo o administrado. Luego
de insertar el dispositivo en un puerto USB en el huésped, el DTVP30M-R buscará una clave
de registro 'safestick'* que proporciona la ubicación del Servidor de SafeConsole:
(*Nota: También puede utilizar el instalador de Windows desde la página de despliegue de
SafeConsole.)
'HKey_Current_User\Software\BlockMaster\DTVPM
Si la clave del registro NO existe, el DTVP30M-R dejará de lado la opción de gestión y le
permitirá iniciar el dispositivo como una unidad autónoma. Si EXISTE la clave del registro, se
producirá un cuadro de mensaje guía que permite al usuario decidir si o no se gestionará el
dispositivo DTVP30M-R. Figura 3,1
Figura 3.1 – SafeConsole ubicada
1. Decida si el DTVP30M-R será administrado o no.
Al hacer clic en 'Sí' el DTVP30M-R será registrado con SafeConsole y heredará las
políticas que están en efecto en la consola de administración, incluyendo criterios de
contraseña, auditoría del dispositivo y otras características administrados. Para
confirmar la propiedad de este dispositivo, se le pedirán las credenciales del usuario del
huésped/dominio local antes del inicio. Figura 3,2
Figura 3.2 – Confirmar propiedad