iStorage diskAshur PRO2 - Solid state drive - encrypted - 128 GB - external (portable) - USB 3.1 - FIPS 197, 256-bit SHA, 256-bit AES-XTS - TAA Compliant

The diskAshur PRO2 is the worlds first and only NCSC CPA, FIPS 140-2 Level 2, NLNCSA BSPA & NATO Restricted Level certified hardware encrypted, PIN authenticated Solid State Drive. An easy to use, ultra-secure, PIN authenticated, portable USB 3.1 hard drive with real-time AES-XTS 256-bit hardware encryption, software free design, super-fast data transfer speeds. The diskAshur PRO2 has an easy-to-use keypad design enabling you to securely access the drive with your own unique 7-15-digit PIN and with software free setup and operation, the drive is platform/device independent and works across all operating systems including all versions of MS Windows, macOS, Linux, Android, Chrome, Thin Clients, Zero Clients and embedded systems. In fact, it will work on any device with a USB port! One of the unique and underlying security features of the GDPR compliant diskAshur PRO2 is the dedicated hardware based secure microprocessor (Common Criteria EAL5+ (Hardware Certified) ready), which employs built-in physical protection mechanisms designed to defend against external tamper, bypass attacks and more. Unlike other solutions, the diskAshur PRO2 reacts to an automated attack by entering the deadlock frozen state, which renders all such attacks as useless. In plain and simple terms, without the PIN theres no way in! Super fast USB 3.1. With super-fast USB 3.1 data transfer speeds of 148 MBps (Read) and 140 MBps (Write), you can now access your files faster than ever before. The iStorage diskAshur PRO2 is also backwards compatible with USB 2.0 and 1.1 ports. EDGETM (Enhanced Dual Generating Encryption) technology. Offering advanced portable data security via built-in FIPS PUB 197 validated AES 256-bit XTS hardware encryption engine. The data encryption key is randomly generated by a Common Criteria EAL4+ ready Random Number Generator and protected by NCSC, FIPS and Common Criteria validated wrapping algorithms. Uniquely featuring a dedicated on-board Common Criteria EAL4+ ready secure microprocessor to enhance security through true random number generation and built-in cryptography. The security component employs physical protection mechanisms to protect itself from any external tamper, bypass laser attacks and fault injections and incorporates active-shield violation technology. More specifically, the secure microprocessor reacts to all forms of automated hacking attempts by entering the deadlock frozen state where the device can only restart through a "Power On" reset procedure (i.e. power off/power on). The security lock feature protects the device against any unauthorized firmware modifications from the host side (fully protected against BadUSB). The diskAshur PRO2 uniquely incorporates a secure microprocessor providing secure algorithms to encrypt both the data and the encryption key, giving you confidence that your data is protected to the highest standards at any given time. FIPS PUB 197 validated encryption algorithm. Employing AES 256-bit XTS hardware encryption, the iStorage diskAshur PRO2 seamlessly encrypts all data on the drive in real-time, keeping your data safe even if the hard drive is removed from its enclosure. Brute force hack defense mechanism. The iStorage diskAshur PRO2 is intelligently programmed to protect against all forms of Brute Force attacks. After five consecutive incorrect PIN entries the drive will freeze, requiring the drive to be disconnected and reconnected to the USB port to get a further five PIN entry attempts. If a further five (10 in total) consecutive incorrect PIN attempts are entered again, the diskAshur PRO2 will freeze again. To get a further and final five PIN attempts (15 in total), the "shift" button must be pressed whilst inserting the USB cable to the USB port and then an iStorage preset PIN will need to be entered. On the fifteenth consecutive incorrect PIN entry, the diskAshur PRO2 assumes it is being attacked and will delete the encryption key and lock itself, rendering all data previously stored on the drive as lost forever. At this point the drive can be reset to factory default settings and redeployed.