Kingston Technology IronKey 32GB USB-C Keypad 200C, FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit hardware encryption
The Kingston® IronKey™ Keypad 200 series are OS-independent hardware-encrypted USB Type-A and USB Type-C®* drives with an alphanumeric keypad for easy-to-use PIN access. The KP200 series is FIPS 140-3 Level 3 Validated for military-grade security with enhancements that elevate the bar for data protection and incorporates XTS-AES 256-bit hardware-based encryption. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

The drive is designed to be tamper evident to alert owners. It also incorporates brute force password attack protection, and BadUSB protection with digitally signed firmware. The alphanumeric keypad is coated with a layer of polymer that protects the keys and hides key usage through analysis of fingerprints on the keys.
Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

The KP200 series utilises a built-in rechargeable battery that can be used to unlock the drive first without using any software, and then plug it into any device that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.
With the Multi-PIN option (Admin/User), the keypad can be used to set up an easy-to-remember but hard-to guess alphanumeric PIN for the Admin or User accounts. Admin can restore a User PIN and provide access to the drive should the User PIN be forgotten, or if the drive is locked after reaching the maximum of 10 User login attempts. With both Admin and User PINs enabled, KP200 will lock the User PIN after 10 failed login attempts; if the Admin PIN is entered incorrectly 10 times in a row, brute force attack protection will crypto-erase the drive, destroy the data forever, and reset it.

The drive also provides two levels of Read-Only (or Write-Protect) modes – a Global mode that can be set by Admin, and a session-only mode that can be set by User. Read-Only modes can protect the drive from malware on untrusted systems. In addition, Admin can load content and set Global Read-Only mode, so that User can access the data but not make any changes.

Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

FIPS 140-3 Level 3 Validated, Certificate #5133
KP200 meets FIPS 140-3 Level 3 military-grade security specifications published by NIST. This is an enhanced version of the FIPS 140-2 specifications that further enhances the drive’s security capabilities and tamper-resistance. It includes XTS-AES 256-bit encryption along with Brute Force and [BadUSB] attack protection with digitally signed firmware. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

OS and device independent
With KP200 utilising a rechargeable battery, the keypad can be used to unlock the drive without using any software, then plug it into any system that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.

Multi-PIN option
Users have the option to set up a User or an Admin/User mode. Admin can be used to restore a User PIN and provide access to the drive should User PIN be forgotten or if the drive is locked after reaching the maximum of 10 User login attempts.

Global and Session Read-Only (write protect) modes
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset."

How to use

Use the built-in rechargeable battery to enter your alphanumeric PIN on the keypad to unlock the drive. Once unlocked, plug the USB-C connector into any device that supports USB Type-C mass storage to access files without installing software. Configure Admin and User PINs via the keypad to set up Multi-PIN functionality. To enable Read-Only modes, set a session Read-Only as a User or a Global Read-Only as an Admin. If required, Admin can restore a forgotten User PIN or manage Global settings.

Recommendations

Set a strong alphanumeric Admin PIN and keep a secure record of it. Use the Global Read-Only mode when distributing data that must remain unchanged, and rely on the session Read-Only mode when connecting the drive to untrusted systems. Charge the drive's internal battery periodically to ensure keypad unlocking is available when needed.