Apricorn - Aegis Fortress USB 3.2 Gen 1 Encrypted External Hard Drive - 2TB - Black

Rugged, Portable Data Security with FIPS 140-2 level 2 Validated Encryption Module: Aegis Fortress Tough on the outside, FIPS validated HDD encryption on the inside, and pocket-sized portability to safely carry your data anywhere you go. The Aegis Fortress is Software-Free, 100% hardware-based 256-bit AES XTS encrypted, onboard keypad PIN authenticated, with ultra-fast USB 3.1 (3.0) data transfer speeds. All Data is encrypted on the fly and all PINs and Data remain encrypted while the drive is at rest. Completely cross-platform compatible and OS agnostic; the Aegis Fortress thrives with Windows, Linux, Mac, Android, and Chrome. It also thrives where software-authenticated encrypted devices can't function, such as embedded systems and equipment in possession of a powered USB port and storage file system but no keyboard. All internal componentry is protected from physical tampering with a layer of hardened epoxy, and the firmware is locked down to prevent any modifications making it impervious to malware attacks such as BadUSB. Featuring Aegis Ware The heart and soul of every Apricorn Secure Device, AegisWare is our patent-protected firmware combined with the industry's most advanced feature set. FIPS 140-2 Level 2 Inside Meets the U.S. government standards for information technology and computer security. NIST FIPS 140 is the cryptography standard program required by the US federal government for protection of sensitive data. The Aegis Fortress's FIPS 140-2 validation covers 11 areas of its cryptographic security system, including physical security, cryptographic key management and design integrity. The Aegis Fortress's FIPS 140-2 Level 2 HDD encryption validation encompasses both the Fortress's physical tamper-resistant features as well as its identity-based authentication. Tested and validated by the National Institute of Standards and Technology (NIST) for use by the Federal governments of the USA, Canada and others, the Aegis Fortress Drive is based on Apricorn's FIPS 140-2 Level 2 validated encryption module as indicated by certificate #4528 The epoxy coated boundary includes all encryption functions and all Critical Security Parameters (CSPs) such as PIN storage, encryption key generation and storage, random number and seed generators, and all firmware storage. The FIPS module is a complete encryption system, and all CSPs never leave the boundary and are never shared with a host system. By design, the HDD that stores the encrypted data is excluded from this boundary to both maximize affordability and product line flexibility in capacity and form factor offerings. Aegis Configurator Compatible Windows-Based App that Quickly Sets Up Multiple Devices Simultaneously. Create custom profiles and mass configure multiple devices in a matter of seconds using the Aegis Configurator. To configure an expanded number of devices, use the Powered Aegis Configurator Hub bundle. Separate Admin and User Mode Admin (Device Configuration) Mode and User Access Mode. The Aegis Fortress supports one independent Admin and up to three User PINs. The Admin mode controls the universal programmable settings of the device and can only be accessed with the Admin PIN. The User mode is limited to basic external drive functions like read /write, unlock / lock, etc. The data on the drive can also be accessed with the admin PIN in the User mode. Polymer-Coated Wear-Resistant Onboard membrane Type Keypad Drive is Unlocked by Entering a PIN on Keypad and not the Host Computer's Keyboard. Until the device is unlocked via its keypad, it remains invisible to the host. The embedded keypad circumvents all hardware and software key logging attempts to capture passwords by excluding the host system from the authentication process. Polymer-coated membrane-style keypad is wear-resistant to prevent revealing the drive's most commonly used buttons. Admin Forced Enrollment Unique PIN Must be Established at Time of Setup. Eliminates Factory Default PIN Vulnerability. Out of the box, there are no factory pre-set default PINs. In order to set up and use the drive, a unique PIN must first be established by the Admin, from within the Admin mode. User Forced Enrollment Admin Can Program Device at Setup Requiring User to Establish a Unique PIN. Once a device is configured by the Admin, it can then be deployed in a state of USER FORCED ENROLLMENT in which the User must first establish his or her own User PIN before the drive can be accessed or used.