Chiavetta USB Apricorn 16GB USB Type-A 3.2 Gen 1 Aegis Secure Key 3NX

The Apricorn Aegis Secure Key 3NX is a 16 GB USB Type-A flash drive with USB 3.2 Gen 1 transfer speeds, an integrated keypad for PIN entry, and hardware-based 256-bit AES XTS encryption. The device encrypts and decrypts data on the fly, keeps PINs and keys encrypted at rest, and is fully cross-platform compatible with Windows, macOS, Linux, Android, Chrome and most embedded systems. The drive uses hardened epoxy protection, locked-down firmware (AegisWare), and an extruded aluminum housing to resist tampering and physical damage. The product is FIPS 140 certified (NIST certificate #3943) and includes administration features for centralized configuration and deployment.

Advantages

The Aegis Secure Key provides software-free, 100% hardware-based encryption and an onboard keypad so authentication never relies on the host system. It supports fast USB 3.2 Gen 1 performance (read up to 77 MB/s, write up to 72 MB/s), programmable security policies (Admin and User PINs, PIN length limits, configurable brute-force defense), and options for fixed or removable media presentation. Device configuration can be mass-deployed using the Aegis Configurator and optional powered hub, and the drive includes physical protections such as epoxy potting, polymer-coated keypad buttons, LED feedback, and a crush-resistant aluminum case.

Suitable for

• Secure transport and storage of sensitive files
• Organizations requiring centralized device configuration and deployment
• Environments where host-based keylogging is a concern
• Fieldwork and travel where durable, tamper-evident storage is needed

Key specifications

• Capacity: 16 GB
• Interface: USB Type-A, USB 3.2 Gen 1 (3.1 Gen 1)
• Read speed: up to 77 MB/s
• Write speed: up to 72 MB/s
• Encryption: 256-bit AES XTS, hardware-based
• Authentication: onboard keypad PIN (Admin and User modes)
• Weight: 0.022 kg
• Color: Black
• Certifications: NIST FIPS 140 (certificate #3943)

How to use

Configure the device in Admin mode to set global policies such as minimum and maximum PIN lengths, the number of invalid PIN attempts before crypto-erase, read-only settings, and whether the device reports as fixed disk or removable media. Set an Admin PIN during initial setup; a unique User PIN must be established when user forced enrollment is enabled. Unlock the drive by entering the PIN directly on the onboard keypad — the drive remains invisible to the host until unlocked. Use the Aegis Configurator application and the Powered Aegis Configurator Hub for mass setup of multiple devices.

Recommendations

Set a longer PIN length (closer to the 16-character maximum) and enable an appropriate brute-force protection threshold to increase resistance to unauthorized access. Use Admin-controlled policies to enforce User Forced Enrollment and program recovery PINs to restore access if a User PIN is forgotten. For deployment in embedded systems, choose the media presentation (fixed or removable) that matches the host environment’s requirements.