Kingston Technology IRONKEY D300SM User manual

IRONKEY™D300SM
SECUREUSB3.0FLASHDRIVE
User Guide
1

2


Contents
About This Guide.........................................................................................................................................3
Quick Start ...................................................................................................................................................... 4
About My Device...............................................................................................................................................4
How Is This Different Than A Regular USB Drive?..........................................................................................4
What Systems Can I Use It On? ..................................................................................................................5
Someapplicationsareonlyavailableonspecificsystems:WindowsOnly ...................................................5
ProductSpecifications....................................................................................................................................5
RecommendedBestPractices..................................................................................................................6
Setting Up My Device ................................................................................................................................... 6
DeviceAccess (Windows Environment) .........................................................................................................6
Device Access (macOS Environment).........................................................................................................7
IronKey Control Panel......................................................................................................................................7
Setting Up A Managed Device With IronKeyEMS......................................................................................8
Using My Device - Managed Features ...................................................................................................... 9
Accessing My Secure Files..............................................................................................................................9
Unlocking In Read-Only Mode ......................................................................................................................9
Changing The Unlock Message...................................................................................................................10
Locking The Device .......................................................................................................................................10
Typing Passwords With The Virtual Keyboard..................................................................................................12
ManagingPasswords....................................................................................................................................... 12
Formatting My Device ..................................................................................................................................13
OptionsareforWindowsoperatingsystemsonly‐macOSwillautomaticallyformattoFAT32................. 13
FAT32 ........................................................................................................................................................................ 13
exFAT .............................................................................................................................................................................13
Finding Information About My Device .......................................................................................................13
Editing The Applications List......................................................................................................................14
Resetting My Device........................................................................................................................................ 14
Using My Device - Managed Only Features........................................................................................... 15
Accessing My Device If I Forget My Password........................................................................................... 15
Scanning My Device For Malware................................................................................................................ 15
Using ZoneBuilderIn SafeConsole............................................................................................................16
Using My Device On Linux ......................................................................................................................16
Using The Unlocker ........................................................................................................................................... 16
Where Can I Get Help?............................................................................................................................... 17

3


About This Guide
IronKeyTM D300SMisa Managed drive that requires a device license and can be managed by
either SafeConsole or IronKey EMS. Both SafeConsole and IronKey EMS are secure cloud or on-
premises management platforms that allow your organization to centrally manage compatible
USB (Universal Serial Bus) storage devices easily and efficiently.
This guide will explain how to setup and initialize a D300SM drive as either a SafeConsole or IronKey
EMS managed drive.

4


Figure1: IronKey D300SM
Quick Start
Windows (7, 8.1,10) & macOS Setup (v.10.11.x - 10.14.x)
1. Plug the device into your computer’s USB port.
2. WhentheDeviceSetupwindowappears,followtheon-screeninstructions.Ifthiswindowdoes
not appear,open it manually:
• Windows: Start > This PC> IronKeyUnlocker> IronKey.exe
• macOS:Finder > IRONKEY > IronKey.app
3. When Device Setup is complete, you can move your important files to the IRONKEY SECURE
FILESUSB drive and they will be automaticallyencrypted.
Some Windows systems prompt to restart after you first plug in your device. You can safely close
that promptwithout restarting - no newdrivers orsoftware are installed.
About My Device
IronKey D300SM USB 3.0 is a portable flash drive with built-in password security and data
encryption. It is designed with advanced AES 256-bit encryption and other features that enhance mobile
data security. Now you can safely carry your files and data with you wherever you go.
How Is This Different Than A Regular USB Drive?
FIPS 140-2 Level 3 Certification - The IronKey D300SM is a FIPS-certified device, so you can feel
confident that you’recomplyingwithregulatoryrequirements.
Hardware Encryption – The Advanced Encryption Controller in your device protects your
data with the same level of protection as highly classified government information. This security
technology featureis alwayson and cannot be disabled.
Password-Protected - Device access is secured using password protection. Do not share your
passwordwithanyonesothatevenifyourdeviceis lost orstolen,nooneelsecan accessyourdata.
Device Reset - If the Advanced Encryption Controller detects physical tampering, or if the
number of consecutive incorrect password attempts exceeds 10 attempts, the device will
initiate a reset sequence. Important - When a device is reset, all onboard data will be erased
and the device returns to factory settings - so remember your password. NOTE: Admins can reset
password using either SafeConsole or EMS depending on which management server the device is
being managed by.
Anti-Malware Autorun Protection (Managed Only) - Your device is capable of protecting you from
many of the latest malware threats targeting USB drives by detecting and preventing autorun
execution of unapprovedprograms. It can also be unlocked in Read-Only Mode if you suspect the
host computer is infected.

5


Simple Device Management - Your device includes the IronKey Control Panel, a program for
accessing your files, managing your device and editing your preferences, changing your device
password,and safely locking yourdevice.
What Systems Can I Use It On?
• Windows® 10
• Windows® 8.1
• Windows® 7
• macOS® (10.11 - 10.14)
• Linux (2.6 or higher) Note: The Linux CLI Unlocker does not support any features that require
network access, for example, setting up your device or changing your password.
Some applications are only available on specific systems:
Windows Only
• Virtual Keyboard (English only)
• Anti-MalwareScanner (NOTE: Optional Management Feature)
• DeviceUpdates
ProductSpecifications
For further details about your device,see the Device Info page in the IronKey Control Panel.
Specification Details
Capacity* 4GB,8GB,16GB,32GB,64GB,128GB
Speed** USB 3.0:
- 4GB:80MB/s read,12MB/s write
- 8GB & 16GB:165MB/s read,22MB/s write
- 32GB: 250MB/s read,40MB/s write
- 64GB & 128GB:250MB/s read,85MB/s write
USB 2.0:
- 4GB:30MB/s read,12MB/s write
- 8GB-128GB:30MB/s read,20MB/s write
Dimensions 77.9 mm x 22.2 mm x 12.05 mm
Waterproof Up to 4 ft. (1.2m)
Conforms to IEC 60529 IPX8
Product must be clean and dry before use
Temperature Operating: 0°C to 60°C
Storage: -20°C to 85°C
HardwareEncryption 256-bit AES (XTS Mode)
EMI/EMC
Compliance TAA Compliant, FCC, CE, VCCI & KC, RoHS & WEEE

6


Specification Details
Certification FIPS 140-2 level 3 certified
Hardware USB 3.0 compliant and USB 2.0 compliant
Requires 2 free drive letters
OSCompatibility Windows 10, Windows 8.1, Windows 7 (SP1)
macOSv.10.11.x-10.14.x
Linux 2.6.x***
Accessibility IronKeyControl Panel is designed to be Section 508
compliant. Users with disabilities have keyboardnavigation
andscreen readersupport.
Warranty 5YearsLimited
DesignedandassembledintheU.S.A.,D300SMdevicesdonotrequireanysoftwareordriversto be
installed.
* Advertised capacity is approximate. Some space is required for onboard software.
** Speed varies with host hardware,software,and usage.
*** Limited Feature Set. No online management features.
Recommended Best Practices
1. Lock the device:
• when not in use
• beforeunplugging it
• beforethe system enters sleep mode
2. Neverunplug the device when the LED is lit.
3. Nevershareyourdevicepassword.
4. Perform a computer anti-virus scan beforesetting up and using the device.
Setting Up My Device
To ensure there is ample power provided to the D300SM encrypted USB drive, insert it directly into
a USB 2.0/3.0 port on a notebook or desktop. Avoid connecting it to any peripheral devices that
may feature a USB port, such as a keyboard or USB-powered hub. Initial setup of the device
must be done on a supported Windows or macOSbased operatingsystem.
Device Access (Windows Environment)
1. Plug the D300SM encrypted USB drive into an available USB port on the notebook
or desktop and wait for Windows to detect it.
• Windows7/8.1/10 users will receive a device driver notification.
• Once the new hardware detection is complete, Windows will prompt to begin the
initializationprocess.

7


2. Select the option IronKey.exe inside of the Unlocker partition that can be found in File Explorer.
Please note that the partition letter will vary based on the next free drive letter. The drive letter
maychange depending on what devices are connected. In the image below,the drive letter
is (E:).
Device Access (macOS Environment)
1. Plug the D300SM encrypted USB drive into an available USB port on the macOS notebook or
desktop and wait for the operating system to detect it.
2. DoubleclicktheIRONKEY volumethatappearsonthedesktoptostarttheinitializationprocess.
• If the Unlocker volume does not appear on the desktop, open Finder and locate the
Unlocker volume on the left side of the Finder window (listed under Devices.) Highlight
the volume and double-click the Unlocker application icon in the Finder window. This will
start the initialization process.
IronKey Control Panel

8


Setting Up A D300SM Device With SafeConsole
The initialization process will begin by allowing the device to be ready to communicate with the
SafeConsole server. The steps needed to register a D300SM to SafeConsole will depend on the
policies that youradministrator is enforcing. Not all dialogs will be shown.
A SafeConsole Connection Token will be needed. The SafeConsole Connection Token is obtained
by the System Administrator through the Quick Connect Guide, located inside of the SafeConsole
userinterface.
1. Enter the SafeConsole Connection Token that is obtained in the steps above. Review the
license agreement, check the checkbox to accept it, and click Activate in the bottom
left-handcorner.
• Optionally Enabled Policies - These policies mayor may not be enabled byyourSystem
Administrator. They will appear during device registration if they have been enabled.
– ConfirmOwnershipofthedevice: Enterthe Windowsusername andpasswordthat is
associatedwiththe login credentialsof the computer the device is pluggedinto.
– Unique User Token: This token is directly associated with the end user’s account and
will be providedby the System Administrator.
– Administrator Registration Approval: The System Administrator may require their
approvalto proceedwith device registration.
2. Enter a secure Password and Confirm it. Once the password created meets the requirements
listed to the right side of the input fields, click Continue. The requirements of this password will
dependon the policyselected byyouradministrator.
3. Choose a Secure VolumeFile System (see Formatting My Device)and click Continue.
4. The device will now finalize the setup process and be ready for use. Access the Encrypted
Storage by clicking the Folder Icon in the top menu. The settings of the device can be
accessed and altered by clicking the Gear Icon. See the IronKey Control Panel for more
information.
Setting Up A Managed Device With IronKey EMS
The initialization process will begin by allowing the device to be ready to communicate with the
IronKeyEMS server.
An IronKey EMS Activation Code will be needed. The IronKey EMS Activation Code is obtained by
the System Administrator through the IronKey EMS Console. This code can also be emailed to the
enduser.
1. Enter the IronKey EMS Activation Code that is obtained in the steps above. Review the license
agreement, check the checkbox to accept it, and click Activate in the bottom left-hand
corner.
2. Enter a secure Password and Confirm it. Once the password created meets the requirements
listedto the right side of the input fields, clickContinue.

9


3. Depending on the policy created by your System Administrator, you may be required to create
an Online Account. An email will be provided to the end user with the instructions on how to
create an online account. After the account has been confirmed,click OK.
• TheuserwillreceiveanOnlineAccountErrormessageiftheonlineaccounthasnotbeen
created or there was an issue while attemptingto verifythe account.
4. Choose a Secure VolumeFile System (see Formatting My Device)and click Continue.
5. The device will now finalize the setup process and be ready for use. Access the encrypted
storage by clicking the Folder Icon in the top menu. The settings of the device can be
accessed and altered by clicking the Gear Icon. See the IronKey Control Panel for more
information.
Using My Device - Managed Features
Accessing My Secure Files
After unlocking the device, you can access your secure files. Files are automatically encrypted and
decrypted when you save or open them on the drive. This technology gives you the convenience
of working as you normally would with a regular drive, while providing strong, “always-on” security.
Toaccess your secure files:
1. Click Files on menu bar of the IronKeyControl Panel.
• Windows: Opens Windows Explorer to the IRONKEY SECURE FILESUSB drive.
• macOS:Opens Finder tothe KINGSTONUSB drive.
2. Do one of the following:
• Toopen a file, double-click the file on the D300SMUSB drive.
• Tosave a file, drag the file fromyourcomputerto the D300SMUSB drive.
Hint: You can also access your files by right-clicking the IronKey Icon in the Windows taskbar
and clicking Secure Files.
Unlocking In Read-Only Mode
You can unlock your device in a read-only state so that files cannot be altered on your secure drive.
For example, when using an untrusted or unknown computer, unlocking your device in Read-Only
Mode will prevent any malware on that computer from infecting your device or modifying your files.
Managed devices can be forcedto unlock in a read-only state byan administrator.
When working in this mode, the IronKey Control Panel will display the text Read-Only Mode. In
this mode, you cannot perform any operations that involve modifying files on the device. For
example, you cannot reformat the device, restore applications or edit the Applications List, or edit
files on the drive.
Tounlock the device in Read-Only Mode:
1. Insert the deviceintotheUSB port of the host computerand runtheIronKey.exe.
2. Checkthe Read-Only Checkbox below the password entry box.
3. Type your device password and click Unlock. The IronKey Control Panel will appear with the
text Read-Only Mode at the bottom.

11


Changing The Unlock Message
The Unlock Message is custom text that displays in the Unlocker window when you unlock the
device. This feature allows you to customize the message that displays. For example, adding
contact information will display information on how a lost drive can be returned to you. For
Managed devices,this feature may or may not be enabled by your System Administrator.
Tochange the Unlock Message:
1. In the IronKey Control Panel,click Settings on the menu bar.
2. Click Preferences in the left sidebar.
3. Type the message text in the Unlock Message field. The text must fit in the space provided
(approximately7 lines and 200 characters).
Locking The Device
Lock your device when you are not using it to prevent unwanted access to your secure files on the
drive. You can manually lock the device or you can set the device to automatically lock after a
specified period of inactivity. For Managed devices, this feature may or may not be enabled by
yourSystem Administrator.
Caution: By default, if a file or application is open when the device tries to auto-lock, it will not
force the application or file to close. Although you can configure the auto-lock setting to force the
device to lock,doing so can result in loss of data to any open and unsaved files.
If your files have become corrupt from a forced lock procedure or from unplugging the device
before locking, you might be able to recover the files by running CHKDSK and using data recovery
software (Windowsonly).
Tomanually lock the device:
1. Click Lock in the bottom left-hand cornerof the IronKeyControl Panelto safely lock your
device.
• You can also use the keyboard shortcut: CTRL + L (Windows only), or right-click the
IronKey Icon in the system tray and click Lock Device.
Note: Managed devices will automatically lock during use if an administrator remotely disables
the device. You will not be able to unlock the device until the System Administrator re-enables the
device.
Toset a device to automaticallylock:
1. Unlock your device and click Settings on the menu bar in the IronKey Control Panel.
2. Click Preferences in the left sidebar.
3. Click the Checkbox for auto-locking the device and set the time-out to one of the following
time intervals: 5, 15, 30, 60,120, or 180 minutes.
Torun CHKDSK (Windows only):
1. Unlock the device.
2. Press the WINDOWS LOGO KEY + R to open the Run prompt:
3. TypeCMD and press ENTER.

12


4. From the command prompt, type CHKDSK, the IRONKEYSECUREFILES USB drive letter,
then “/F /R”. For example, if the IRONKEYSECUREFILESUSB drive letter is G,you would type:
CHKDSK G: /F /R
5. Use data recovery software if necessary in order to recoveryour files.
Typing Passwords With The Virtual Keyboard
If you are unlocking your device on an unfamiliar computer and are concerned about keylogging
and screen logging spyware, use the Virtual Keyboard. It helps protect your device password by
letting you click out letters and numbers using your mouse and the virtual keyboard. The
underlying techniques in the Virtual Keyboard will bypass many trojans, keyloggers, and screen
loggers.
Note: This featureuses a standard QWERTY keyset. It is available on Windows only and the language
preference forthe devicemust be set to English.
Totype a passwordusing the Virtual Keyboard (Windowsonly):
1. Open the Virtual Keyboardby doing one of the followingactions:
• In the password field, clickthe Virtual Keyboard Icon.
• When the keyboardfocus is in a password field, press CTRL+ALT+ V.
2. Click the keys to type yourpassword, and then click Enter.
You can also use the Virtual Keyboard in conjunction with the actual keyboard, so that you type
some characters and click some characters.
Hint: Click Randomize to arrange the keys in a random order. This helps protect against screen
loggers.
Note: When you click a key in the Virtual Keyboard, all of the keys briefly go blank. This feature
prevents screen loggers from capturing what you clicked. To disable this feature, click the icon
(beside the Exit button) and choose Disable Screen Logger Protection.
ManagingPasswords
You can change your password on your device by accessing the Password tab in the IronKey
ControlPanel.
For Managed devices, password policy settings are determined by your System Administrator.
Sometimes, you may be required to change your password to comply with new corporate password
policies. When a change is required, the Password Change screen will appear the next time you
unlock the device. If the device is in use, it will lock and you will have to change the password
before you can unlock it.
Note: When a password is required, for example, when logging into the device or during a manual
password change operation, you can use the Virtual Keyboard instead of the actual keyboard to
typethe password.
Tochange your password:
1. Unlock your device and click Settings on the menu bar.
2. Click Password in the left sidebar
3. Enter your current password in the field provided.
4. Enter yournew password and confirm it in the fields provided.
5. ClickChange Password.

13


Formatting My Device
Yourdevice will need to be formattedduring initialization before it can be usedto store files.
If initializing on Windows, you will be given the option of formatting the IRONKEYSECUREFILESUSB
drive as either FAT32or exFAT.
Options are for Windows operating systems only - macOS will automatically format to FAT32
FAT32
– Pros: Cross-platformcompatible (Windows and macOS)
– Cons: Limited individual file size of 4GB
exFAT
– Pros: No file size limitations
– Cons: Microsoft restricts usage by license obligations
Afterinitialization,reformattingtheIRONKEYSECUREFILESUSBdrivewilleraseallyourfilesandyour
ApplicationList, but will not erase yourdevice password and settings.
Important: Before youreformat the device,back up yourIRONKEYSECUREFILESUSB driveto a
separatelocation, forexample,to cloud storage or your computer.
Toreformat a device:
1. Unlock your device and click Settings on the menu bar of the IronKey Control Panel.
2. Click Tools on the left sidebar.
3. Under Device Health, select the file format and click Reformat Secure Volume.
Finding Information About My Device
Use the Capacity Meter, located at the bottom right of the IronKey Control Panel, to see how
much storage space is still available on your device. The green bar graph represents how full the
device is. For example, the meter will be totally green when the device is full. The white text on the
Capacity Meter displays how much free space remains.
For general information about yourdevice,see the Device Info page.
Toview device information:
1. Unlock your device and click Settings on the menu bar of the IronKey Control Panel.
2. Click Device Info in the left sidebar.
The About This Device section includes the followingdetails about yourdevice:
• ModelNumber
• SerialNumber
• Software and Firmware Version
• ReleaseDate
• ManagementConsole
• Secure Files Drive Letter
• Unlocker Drive Letter
• OperatingSystem and System AdministrativePrivileges
Note:To visittheIronKeywebsiteoraccessmoreinformationaboutlegalnoticesorcertifications for
IronKey products, click one of the information buttons on the Device Info page.

14


Hint: Click Copy to copy the device information to the clipboard so that you can paste it in an
email or support request.
Editing The Applications List
The Applications List, located in the IronKey Control Panel, is the area where you can quickly
launch on-board applications and files. Items that appear in the list are shortcuts to the actual files.
Managing the list items does not alter the actual file.
Toedit the Applications List:
1. Unlock your device. The IronKey Control Panel will appear with the Applications List
selectedby default.
2. If the IronKey Control Panel is already open, click Applications on the menu bar to view the
Applications List. Do one ofthe following:
• To add a file or application shortcut: Drag a file from the desktop to the Applications List
area to add it to the list. You can also right-click the Applications List area and click Add
Application.
• To rename or delete list items: Right-click the application or file and choose the action
from the menu.
• Tosort or change the wayicons appear in the list: Right-click anywhere in the Application
list andchoose Large Icons,List,Tile, or Sort Alphabetically.
Functions of the Applications List:
• Youcan add any file to the list, including documents, images, and batch files.
• For items that are not applications, the operating system opens the item with the default
programassociated withthat file type.
• Items that are Windows executables will be hidden from view on macOS. Similarly, macOS
application files will be hidden from view on Windowscomputers.
Resetting My Device
Your device can be reverted back to factory settings. This will securely wipe all data from the
device and a new security keywill be created forthe next use.
For Managed devices, your System Administrator may have this option disabled. Contact your
administrator if you need to reset your device.
Resettingyourdevice:
1. Unlockyour device.
2. Right-click on the IronKey Icon in the system tray.
3. ClickReset Device.
Yourdevicewill now be reset back to factory settings.

15


Using My Device - Managed Only Features
Accessing My Device If I Forget My Password
If you forget your password and an administrator has granted you password reset privileges, you
can reset it. If your administrator has not granted password reset privileges, you must contact your
administrator forhelp resetting yourpassword.
Toreset your password:
1. Plug in yourdeviceand start the Unlocker.
2. ClickPassword Help.
3. At the Password Help prompt, click Reset Password. Follow the onscreen instructions to
completethe password reset.
4. Depending on the management platform, you may receive an email with instructions on
how to obtain your recovery code. Otherwise, you will need to contact your administrator
to obtain the recovery code. You may be required to provide the request code and serial
number.
• The recovery code will need to be copied and pasted exactly as it is given to you.
Incorrect codes count against theten unlockattempts beforethe deviceis reset.
5. Type your new password (or use the Virtual Keyboard) and confirm it in the fields provided,
then clickChange Password.
Scanning My Device For Malware
If enabled by your System Administrator, the Malware Scanner is a self-cleaning technology that
detects and removes malware on your device from an infected file or computer. Powered by the
McAfee® AntiVirus and Anti-Malware signature database, and constantly updated to combat
the latest malware threats, the scanner first checks for the latest updates, scans your device, then
reports and cleans any malwarethat is found.
Some things to knowabout scanning yourdevice:
• The scanner runs automaticallywhen you unlock yourdevice.
• It scansanyrunningsystemprocessesandall onboardfiles (compressedanduncompressed).
• It reports and cleans any malware it finds.
• The scanner will automatically update itself before each scan to protect you from the latest
malwarethreats.
• An update requiresan internet connection.
• Ensureaminimum of135MB offreespace onthe deviceto accommodatethe downloaded
malwaresignaturefiles.
• Yourfirst update maytake a long time to download, dependingon yourinternet connection.
• The date of the last update is displayedonscreen.
• If the scanner becomes too far out of date, it will need to download a large file to bring it
backup-to-date.

16


Using ZoneBuilder In SafeConsole
If enabled by your System Administrator, ZoneBuilder is a SafeConsole tool used to create a Trusted
Zone of computers. It can be used to restrict device access to computers within the Trusted Zone
and, if enabled, can automatically unlock your device, which eliminates the need to enter your
password.
If youradministratorchooses to enable this policy,you may be requiredto trust the account.
Trustingthe account:
1. Unlock your device and click Settings in the IronKeyControl Panel.
2. Click ZoneBuilder on the left sidebar.
3. Click Trust This Account. Youraccount will now show up in the TrustedAccounts box.
Your account is now in the Trusted Zone of computers. Depending on the policy set by your System
Administrator, you may have restricted device access outside of the Trusted Zone or when offline.
Yourdevice may also be set to automatically unlock on trusted computers.
Toremove a trusted account,simply highlight the account you wish to removeand clickRemove.
Using My Device On Linux
You can use your device on several distributions of Linux. There are two executables in the linux
folder, Unlocker_32.exe and Unlocker_64.exe. For this guide, replace Unlocker_xx.exe with the
executable that is compatible with yoursystem.
The device must be previously set up using a Windows or macOS operating system. See Setting Up
My Device for more information. Some Managed device policies, set by the System Administrator,
may restrict usage of the device to systems only running Windows or macOSoperating systems.
Using The Unlocker
Use the Unlocker_xx.exe forLinux to access your files. Depending on yourLinux distribution, youmay
need root privileges to use the program Unlocker_xx.exe found in the Linux folder of the mounted
public volume. By default,most Linux distributions will append the executebit to .exe files on a fat32
partition. Otherwise the execute bit must be manually set before running by using the following
commands.
• chmod +x Unlocker_32.exe
• chmod +x Unlocker_64.exe

17


If you have only one device attached to the system, run the program from a command shell with
no arguments (for example, Unlocker_xx.exe). This will then prompt you for your device password to
unlock the drive. If you have multiple devices, you must specify which one you want to unlock.
Note: Unlocker_xx.exe only unlocks the IRONKEY SECURE FILES USB; it must then be mounted. Many
modern Linux distributions dothis automatically. If not, runthe mount program from thecommand
line, usingthe device name printed by Unlocker_xx.exe.
Simply un-mounting the device does not automatically lock the IRONKEYSECUREFILES USB. To lock
the device, youmust either unmount and physically remove (unplug) it, or run:
• Unlocker_xx.exe-l
Please note the followingimportant details forusing your device on Linux:
1. Kernel Versionmust be 2.6 or higher
2. Mounting
• Make sure you have permissions to mount external SCSI and USB devices.
• Somedistributionsdonotmountautomaticallyandrequirethefollowingcommandtobe
run: mount /dev/[name of the device] /media/[mounted device name]
• The name of the mounted device varies depending on the distribution.
3. Permissions
• Youmust have permissions to mount external/usb/devices.
• You must have permissions to run an executable file from the public volume in order to
launch the Unlocker.
• Youmight need root user permissions.
4. The Unlocker forLinux supports x86 and x86_64 systems.
5. Policies that will block the device
• If the device is disabled within the policy settings in either SafeConsole or IronKey EMS,
you will not be able to unlock the device.
Where Can I Get Help?
The following resources provide more information about IronKey products. Please contact your
Help Desk or System Administratorif you have further questions.
• kingston.com/usb/encrypted_security: Information,marketing material,andvideotutorials
• [email protected]: Feedback andfeature requests
• kingston.com/support: Product support, FAQ’s and downloads

18


© 2018 Kingston Digital,Inc. All rights reserved.
NOTE: IronKey is not liable for technical or editorial errors and/or omissions contained herein; nor
for incidental or consequential damages resulting from the furnishing or use of this material. The
information provided herein is subject to change without notice. The information contained in this
document represents the current view of IronKey on the issue discussed as of the date of
publication. IronKey cannot guarantee the accuracy of any information presented after the
date of publication. This document is for information purposes only. IronKey makes no warranties,
expressed or implied, in this document. IronKey, and the IronKey logo are trademarks of Kingston
Digital, Inc. and its subsidiaries. All other trademarks are the property of their respective owners.
IronKeyTM is a registered trademark of Kingston Technologies, used under permission of Kingston
Technologies. All rights reserved.
FCC Information This device complies with part 15 of the FCC Rules. Operation is subject to
the following two conditions: (1) This device may not cause harmful interference, and (2) this
device must accept any interference received, including interference that may cause undesired
operation. This equipment has been tested and found to comply with the limits for a Class B digital
device, pursuant to part 15 of the FCC Rules. These limits are designed to provide reasonable
protection against harmful interference in a residential installation. This equipment generates,
uses and can radiate radio frequency energy and, if not installed and used in accordance with
the instructions, may cause harmful interference to radio communications. However, there is no
guarantee that interference will not occur in a particular installation. If this equipment does cause
harmful interference to radio or television reception, which can be determined by turning the
equipment off and on, the user is encouraged to try to correct the interference by one or more of
the followingmeasures:
• Reorient orrelocatethereceivingantenna.
• Increase the separation between the equipment and receiver.
• Connect the equipment to an outlet on a circuit different from that to which the receiver is
connected.
• Consult the dealer or an experienced radio/TVtechnician forhelp.
Note: Changes or modifications not expressly approved by the party responsible for compliance
couldvoid the user’s authority to operate the equipment.
DocumentNo.48000131-001.A05