Kingston Technology imation S250 User manual

PAGE 1IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
Imation Personal
User Guide
Models: S250, D250
Updated: October 2012

PAGE 1IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
Thank you for your interest in Imation Personal
- Powered by IronKeyTM.
Imation’s Mobile Security Group is committed
to creating and developing the best security
technologies and making them simple-to-use
and widely available. Years of research and
millions of dollars of development have gone
into bringing this technology to you.
We are very open to user feedback and would
appreciate hearing about your comments,
suggestions, and experiences with this product.
Feedback:
securityfeedbac[email protected]
User Forum:
https://ik.imationmobilesecurity.com/forum

PAGE 2IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
CONTENTS
Quick Start ...............................................4
About my device...........................................5
How is it different than a regular ash drive? .................................5
What systems can I use it on? .............................................6
How secure is it?........................................................7
Device Security........................................................7
Application Security ....................................................7
Identity Manager Protection ..............................................8
Product specications....................................................8
Recommended best practices .............................................9
How do I...? ..............................................10
Set up the device.......................................................10
Unlock and lock the device ..............................................11
Unlock device ........................................................11
Lock device..........................................................12
Type passwords with theVirtual Keyboard ..................................13
Access my device if I forget my password ...................................14
Change my password ...................................................14
Access my secure les ..................................................15
Encrypt and decrypt les ................................................15
Create a secure backup of my les ........................................15
Restore les to device from backup le . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 16
Update my device .....................................................16
Reformat my device ....................................................17
Use my device on Linux .................................................17
Setup up the device ...................................................17
Use the Unlocker .....................................................17
Find information about my device .........................................19
View device information ................................................19
Determine the storage space available on the device..........................20
Use onboard applications ................................................20
Browse the web with onboard Firefox......................................20
Open a secure browsing session..........................................20
Edit the Applications List................................................21
Restore onboard applications ............................................22

PAGE 3IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
Import digital certicates . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 22
Use Identity Manager ...................................................23
Add accounts and passwords ............................................24
Log into an account automatically ........................................25
Edit and delete accounts and logins .......................................25
Lock down accounts with VeriSign VIP ......................................25
Back up and restore my Identity Manager data..............................25
Manage my online account settings ........................................25
Change device nickname ...............................................26
Manage account settings ..............................................26
Where can I get Help? ....................................28
For more information...................................................28
To contact support ....................................................28
はじめに . . . . . . . . . . . . . . . . . . . . . . . . . . .29
시작하기 ................................................ 40
入门 ................................................... 50
開始使用 ................................................ 59
Primeros pasos ...........................................68
Mise en route ............................................79
Erste Schritte ............................................90

QUICK START
Windows & Mac Setup
1. Plug the device into your computer’s USB port (Windows XP, Vista, 7, or Mac 10.5+)
2.When the Device Setup window appears, follow the onscreen instructions.
If this windows does not appear, open it manually:
Windows: Start > My Computer > IronKey Unlocker > IronKey.exe
Mac: Finder > IronKey Unlocker > IronKey.app
3. During Device Setup, you can create an online account to enable password reset. Enter your email
address, click Continue, and follow the instructions in the email you receive.
4. When Device Setup is complete, you can move your important les to the “Secure Files” drive
and they will be automatically encrypted.
Some Windows systems prompt to restart after you rst plug in your device. You can safely
close that prompt without restarting—no new drivers or software are installed.
Linux Setup
1. Plug it into your computer’s USB port (Linux 2.6+)
2. Run the “ironkey” program from the device’s linux folder and follow the onscreen instructions.
デバイスのセットアップ
1.デバイスをコンピューターのUSBポートに接続します。
2.「IronKey Unlocker」ドライブから、「IronKey」アプリケーションを起動します。
3.画面の指示に従い、詳細はユーザーガイドをご覧ください。
デバイスを使う準備はこれで完了です。
장치 설치
1. 컴퓨터 USB 포트로 장치를 플러그 인 하세요.
2. “IronKey Unlocker” 드라이브 상에, “IronKey” 어플리케이션을 런치하세요.
3. 화면상 설명서를 따르고 더 자세한 정보는 사용자 가이드를 참조하세요. 고객님의
장치는 사용할 준비가 되었습니다.
设备安装
1. 将设备插到电脑的 USB 接口。
2. 在“IronKey Unlocker”驱动器上，启动“IronKey”应用程序。
3. 按照屏幕上的说明操作。垂询详情，请阅读用户指南。您的设备可以使用了。
裝置安裝
1. 將裝置插到電腦的 USB 埠。
2. 在「IronKey Unlocker」磁碟機上，啟動「IronKey」應用程式。
3. 按照螢幕上的說明操作。垂詢詳情，請閱讀使用者指南。您的裝置可以使用了。
Conguración del dispositivo
1. Conecte el dispositivo en el puerto USB del ordenador.
2. En la unidad “IronKey Unlocker”, ejecute la aplicación “IronKey”.
3. Siga las instrucciones en pantalla y lea la Guía del usuario para más información. Su dispositivo está
preparado para su uso.
Installation
1. Insérez le lecteur dans un port USB de l’ordinateur.
2. Lancez l’application “IronKey” à partir du lecteur “IronKey Unlocker”
3. Suivez les instructions à l’écran et consultez le guide d’utilisation pour plus d’informations.
Votre lecteur ash USB est prêt à être utilisé.
Geräte-Setup
1. Stecken Sie das Gerät in einen freien USB-Port des Computers.
2. Starten Sie die “IronKey”-Anwendung auf dem “IronKey Unlocker”-Laufwerk.
3. Befolgen Sie die Anweisungen auf dem Bildschirm konsultieren Sie das Benutzerhandbuch für
weiterführende Informationen. Ihr Gerät ist einsatzbereit.
PAGE 4IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
English
日本語한국어中文
españolfrançaisDeutsch

PAGE 5IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
About my device
Imation Personal - Powered by IronKey - is designed to be the world’s most secure USB ash
drive. Now you can safely carry your les and data with you wherever you go.
How is it different than a regular ash drive?
Hardware Encryption
Inside your device is the Imation Cryptochip, which protects your data to the same level as
highly classied government information. This security technology is always on and cannot be
disabled.
Password-Protected
To access your secure data, you unlock the device with a password using the Unlocker software
that is carried on the device. Do not share your password with anyone. That way, even if your
device is lost or stolen, no one else can access your data.
Self-Destruct Sequence
If the Cryptochip detects physical tampering by a hacker, or if 10 consecutive incorrect
password attempts have been entered, it initiates a permanent self-destruct sequence that
securely erases all onboard data using ash-trash technology—so remember your password.
Anti-Malware Autorun Protection
Your device helps protect you from many of the latest malware threats targeting USB ash
drives by detecting and preventing autorun execution of unapproved programs. It can also be
unlocked in Read-Only Mode if you suspect the host computer is infected.
Simple Device Management
Your device includes the Imation Control Panel, a central management area for accessing your
les, editing your preferences, changing your device password, and safely locking your device.
Secure Local Backup and Data Recovery
Securely back up your secure les using the onboard Secure Backup software (Windows only).
It allows you to recover your data to a new Imation Personal device in case this one is ever lost
or stolen.

PAGE 6IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
Stealth BrowsingTechnology
Surf the web safely and privately through almost any network, even across unsecured wireless
hotspots, with Secure Session browsing.You can open a secure session using the onboard
Mozilla Firefox web browser.
This security gives you anti-phishing and anti-pharming protection (for example, we do our own
DNS checking), as well as enhanced privacy protection (for example your IP address will not be
available to other websites and ISPs).You can verify this using a site such as whatismyip.com or
ipchicken.com.
Online account
Your online account allows you use some applications and features, such as resetting a password,
browsing the web using secure sessions, updating your device software and creating online
backups of Identity Manager data.Your online account includes the Security Vault. If your device
is ever lost or stolen, you can easily restore your online passwords from this encrypted online
backup.
Self-Learning Password Management
Securely store and back up all your online passwords with the IronKey Identity Manager. It
allows you to automatically log into your online accounts to avoid keylogging spyware and
phishing attacks.
Waterproof andTamper-Resistant
Designed to survive the extremes, Imation Personal’s rugged metal encasing is injected with
an epoxy compound that makes it not only tamper-resistant, but waterproof to military
specications (MIL-STD-810F).
What systems can I use it on?
»Windows®7
»Windows® Vista
»Windows®XP (SP2+)
»Mac OS® X (10.5+)
»Linux (2.6+)
The computer must have a USB 2.0 port for high-speed data transfer. A USB 1.1 port or
powered hub will also work, but will be slower.
Some applications are available only for specic operating systems:
»Windows Only
• Onboard Firefox
• Secure Backup
• Virtual Keyboard
• IronKey Identity Manager

PAGE 7IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
• Secure Sessions
• Device Updates
»Mac Only—Auto-Launch Assistant
How secure is it?
Imation Personal has been designed from the ground up with security in mind. A combination
of advanced security technologies are used to ensure that only you can access your data.
Additionally, it has been designed to be physically secure, to prevent hardware-level attacks and
tampering, as well as to make the device rugged and long-lasting.
The Imation Cryptochip is hardened against physical attacks such as power attacks and bus
snifng. It is physically impossible to tamper with its protected data or reset the password
counter. If the Cryptochip detects a physical attack from a hacker, it destroys the encryption
keys, making the stored encrypted les inaccessible.
We strive to be very open about the security architecture and technology that we use in
designing and building this product. There is no hocus-pocus or handwaving here.We use
established cryptographic algorithms, we develop threat models, and we perform security
analyses (internal and third party) of our systems all the way through design, development and
deployment.
DEVICE SECURITY
Data Encryption Keys
»AES key generated by onboard Random Number Generator
»AES key generated at initialization time and encrypted with hash of user password
»No backdoors: AES key cannot be decrypted without the user password
»AES key never leaves the hardware and is not stored in NAND flash
Data Protection
»Secure volume does not mount until password is verified in hardware
»Password try-counter implemented in tamper-resistant hardware
»Once password try-count is exceeded, all data is erased by hardware
»Secure box architecture accessible only to firmware to store sensitive data and settings
APPLICATION SECURITY
Device Password Protection
»USB command channel encryption to protect device communications
»Password-in-memory protection to protect against cold-boot and other attacks
»Virtual Keyboard to protect against keyloggers and screenloggers

PAGE 8IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
The device password is hashed using salted SHA-256 before being transmitted to the device
rmware over a secure and unique USB channel. It is stored in an extremely inaccessible
location in the protected Cryptochip hardware.The hashed password is validated in hardware
(there is no “getPassword” function that can retrieve the hashed password), and only after the
password is validated is the AES encryption key decrypted.The password try-counter is also
implemented in hardware to prevent memory rewind attacks.Typing your password incorrectly
too many times initiates a permanent “ash-trash” self-destruct sequence, which is run in
hardware rather than using software, ensuring the ultimate protection for your data.
IDENTITY MANAGER PROTECTION
The Identity Manager and your online account work together, allowing you to back up your
online passwords to your Online SecurityVault. First, you must unlock your device using two-
factor authentication.Your passwords are securely stored in a hidden hardware-encrypted area
inside the device (not in the le system), being rst locally encrypted with 256-bit AES, using
randomly generated keys encrypted with a SHA-256 hash of your device password.All of this
data is then doubly encrypted with 128-bit or 256-bit AES hardware encryption.This is the
strongest password protection we have ever seen in the industry.
When you back up your passwords online, your device performs a complicated public key
cryptography handshake with Imation’s services using RSA 2048-bit keys.After successful
authentication, your encrypted block of password data is securely transmitted over SSL to your
encrypted Online SecurityVault within one of our highly-secure data facilities.
Product specications
For details about your device, see “Device Info” in the Control Panel settings.
Specication Details
Capacity* Up to 64GB, depending on the model
Dimensions 75mm X 19mm X 9mm
Weight 0.8 oz
Waterproof MIL-STD-810F
Operating Temperature 0C, 70C
Operating Shock 16G rms
Hardware Encryption • Data: 256-bit AES (CBC Mode)
• Hardware: 256-bit AES
• Hashing: 256-bit SHA
• PKI: 2048-bit RSA
FIPS Certications See www.imation.com/en-US/Mobile-Security/Certications for details.
Hardware USB 2.0 (High-Speed) port recommended, USB 1.1

PAGE 9IMATION PERSONAL - POWERED BY IRONKEY - USER GUIDE
Specication Details
OS Compatibility • Windows XP (SP2+),Windows Vista,Windows 7
• Mac OS 10.5+
• Unlocker for Linux (2.6+, x86)
Accessibility Imation Control Panel is designed to be Section 508 compliant. Users
with disabilities have keyboard navigation and screen reader support.
Designed and Assembled in the U.S.A.
Imation Personal devices do not require any software or drivers to be installed.
* Advertised capacity is approximate and not all of it will be available for storage. Some space is required for onboard software.
Recommended best practices
»Create an online account so that you can:
• reset a forgotten device password
• back up your Identity Manager passwords
»Lock the device
• when not in use
• before unplugging it
• before the system enters sleep mode
»Never unplug the device when the LED is on
»Never share your device password
»Perform a computer anti-virus scan before setting up the device