Apricorn Aegis Secure Key USB Flash Drive ASK3-480GB 480GB 256-Bit Encryption

Apricorn Aegis Secure Key USB3 480GB USB 3.0 Flash Drive with 256-Bit XTS Hardware Encryption

480GB, USB 3.2 Gen 1, 195/162 Mbps, FIPS 140-2 Certified

Designed for durability, the Aegis Secure Key 3.0 is our most rugged encrypted device featuring an IP68 rating for dust and prolonged water immersion protection. It boasts the largest memory capacity in its class. With no software required, it offers 100% hardware-based 256-bit AES XTS encryption, PIN authentication via an integrated keypad, and ultra-fast USB 3.1 (3.0) data transfer speeds. All data is encrypted on-the-fly, and PINs along with secure USB flash drive data remain encrypted when the drive is at rest. Fully compatible across multiple platforms and operating system independent, it works with Windows, Linux, Mac, Android, Chrome, embedded systems, and any device with a powered USB port and file system for storage. The internal components are protected against physical tampering by a hardened epoxy layer, and the firmware is locked to resist malware attacks such as BadUSB.
At the core of every Apricorn secured device, AegisWare is our patented firmware combined with the industry's most advanced feature set.
Meets U.S. government standards for information technology and computer security. NIST FIPS 140 is a cryptographic standard program required by the U.S. federal government to protect sensitive data. The FIPS 140-2 validation of the Aegis Secure Key covers 11 areas of its cryptographic security system, including physical security, cryptographic key management, and design integrity. Available in four levels, the FIPS 140-2 Level 3 validation includes physical tamper-resistant features and identity-based authentication. Tested and validated by the National Institute of Standards and Technology (NIST) for use by U.S., Canadian, and other governments, the Aegis Secure Key 3 is based on a FIPS 140-2 Level 3 certified encryption module, certificate number 2834. The Secure Key security boundary includes all encryption functions and all Critical Security Parameters (CSPs) such as PIN storage, encryption key generation and storage, random number generators and seeds, entire firmware storage, and device storage. The FIPS module is a complete encryption system, and all CSPs never leave the boundary or are shared with the host system.
A Windows application quickly configures multiple devices simultaneously. Create custom profiles and mass configure many devices in seconds using the Aegis Configurator. For larger deployments, use the Powered Aegis Configurator Hub.
Features Administrator Mode (Device Configuration) and User Access Mode. The Aegis Secure Key supports independent Administrator and User PINs. Administrator Mode controls universal programmable device settings and is accessible only via the Administrator PIN. User Mode is limited to basic external drive functions such as read/write, unlock/lock, etc. Drive data can also be accessed with the Administrator PIN in User Mode.
The drive unlocks by entering the PIN on the keypad, not the host computer keyboard. Until unlocked via the keypad, the device remains invisible to the host. The integrated keypad bypasses all hardware and software keylogging attempts to capture passwords, excluding the host system from the authentication process. Polymer-coated buttons resist wear and are designed to avoid revealing frequently used keys.
A unique PIN must be set during configuration, eliminating vulnerability to factory default PINs. There are no factory default PINs from new. To configure and use the drive, the Administrator must first establish a unique PIN from Administrator Mode.
The Administrator can program the device during setup to require the User to establish a unique PIN. Once configured by the Administrator, the device can be deployed in a USER FORCED ENROLLMENT state, where the User must first set their own User PIN before the drive can be accessed or used.
Creates a forced user enrollment state that restores drive access. If the User PIN is forgotten, recovery PINs can be programmed into the device to allow data access, creating a new forced user enrollment state while preserving the Administrator PIN and drive data. After generating a new User PIN, drive access is restored for the User.
Global access settings are controlled by the Administrator, with User Mode controlling individual settings. Used in scenarios requiring the drive content to remain intact and unaltered for later analysis. Two read-only modes are available: Universal read-only mode set by the Administrator from Administrator Mode and cannot be modified or disabled by anyone except the Administrator; and a second read-only mode that can be enabled or disabled by the User but can also be controlled by the Administrator.
The Administrator sets minimum and maximum PIN lengths (between 7 and 16 characters). Longer PINs provide stronger data protection. For example, the probability of a successful brute-force attack increases from 1 in 10,000,000 for a 7-digit PIN to 1 in 100,000,000 for an 8-digit PIN. When the User sets their own PIN during forced user enrollment, the Administrator can enforce password length requirements as part of the overall security policy.
Choose the number of consecutive invalid PIN attempts (4-20) allowed before Crypto-Erase activates. All Aegis Secure USB Flash Drives unlock (authenticate) by entering the PIN on their built-in keypad. Since the PIN is not entered via the host computer keyboard, they are immune to software or hardware keylogging attacks. However, if the device suffers a physical brute-force attack, your data is protected by a programmable "Brute Force Defense Mechanism" which, after the programmed number (between 4 and 20) of consecutive incorrect password attempts, erases its own encryption key and destroys the ability to decrypt stored data.
Programmable inactivity timeout before the drive locks. All Aegis Secure Drives automatically lock when disconnected from the computer's USB port, when USB power is interrupted, or after a preprogrammed inactivity period.
Allows the drive to remain unlocked during USB port re-enumeration (virtual machine, remote boot). Intended for special cases where the key must remain unlocked during USB port re-enumeration, such as during reboot or virtual machine transitions.
All Apricorn devices can be reset and redeployed indefinitely. Resetting the drive removes both User and Administrator PINs, destroys data, creates a new randomly generated encryption key, and allows multiple reuse of the drive with an unlimited number of randomly generated encryption keys, enabling the Administrator and/or User to reset the drive as often as needed.
When programmed and activated, performs Crypto-Erase and becomes the new access PIN. The last line of defense for data security when the device's physical security is compromised. The self-destruct PIN protects against physically compromising situations by erasing key contents, leaving the device in normal working order but appearing in use.
Visually confirms successful button presses via device LEDs.
Dust and water-resistant aluminum enclosure provides additional data protection beyond encryption. Durable enough to withstand any environment, the Aegis Secure Key features a rugged design ideal for travel and field use. Its tough, embossed aluminum crush-resistant enclosure makes tampering obvious and offers strong protection against physical damage.

Specifications for ASK3-480GB
Design Form Factor Cap International Protection Rating (IP) IP68 Keychain Included Yes LED Indicators Yes Product Color Black
Logistics Data Harmonized System (HS) Code 84717070
Package Dimensions Gross Weight (Package, kg) 0.1 kg
Package Contents Quantity per Package 1 piece
Performance Capacity 480 GB Device Interface USB Type A Read Speed 195 MB/s USB Version 3.2 Gen 1 (3.1 Gen 1) Write Speed 162 MB/s
Product Dimensions Net Weight (Product, kg) 0.09 kg Product Depth 9.55 cm Product Height 1.26 cm Product Width 2.45 cm
Security Hardware Encryption Yes Integrated Keypad Yes Number of Keys on Keypad 12 Password Protection Yes PIN Secured Access Yes Security Algorithms FIPS 140-2
Technical Details Harmonized System (HS) Code 84717070 Brand Apricorn

Specifications for ASK3-480GB

Design

• Form Factor: Cap
• International Protection Rating (IP): IP68
• Keychain Included: Yes
• LED Indicators: Yes
• Product Color: Black

Logistics Data

• Harmonized System (HS) Code: 84717070

Package Dimensions

• Gross Weight (Package, kg): 0.1 kg

Package Contents

• Quantity per Package: 1 piece

Performance

• Capacity: 480 GB
• Device Interface: USB Type A
• Read Speed: 195 MB/s
• USB Version: 3.2 Gen 1 (3.1 Gen 1)
• Write Speed: 162 MB/s

Product Dimensions

• Net Weight (Product, kg): 0.09 kg
• Product Depth: 9.55 cm
• Product Height: 1.26 cm
• Product Width: 2.45 cm

Security

• Hardware Encryption: Yes
• Integrated Keypad: Yes
• Number of Keys on Keypad: 12
• Password Protection: Yes
• PIN Secured Access: Yes
• Security Algorithms: FIPS 140-2

Technical Details

• Harmonized System (HS) Code: 84717070

• Brand: Apricorn