datalocker dl3 & dl3 fe dl3 ove… · • equipped with a superspeed usb 3.0 interface • the...

DataLocker DL3 & DL3 FE USB 3.0 external encrypted hard drive

Table of Contents

2

•  What is the DataLocker DL3/DL3 FE? •  DL3 & DL3 FE Differences •  What is AES and Dual Crypto? •  Setup and Configuration •  Firmware Overview •  Hardware Overview •  RFID Setup and Use •  DataLocker Configurator •  Part Numbers

What is the DataLocker DL3?

DataLocker DL3/DL3 FE is: •  An encrypted external hard disk drive or solid state drive •  The 3rd generation DataLocker, following the original

DataLocker AES Pro and the DataLocker DL2 •  Equipped with a SuperSpeed USB 3.0 interface •  The most convenient and user-friendly encrypted drive on

the market

SPECIAL FEATURES: •  AES-256 bit XTS mode hardware encryption •  Read-only mode prevents write access •  Randomized keypad and strong password support •  RFID version provides 2-factor authentication •  Configurator (sold separately) enables mass deployment •  Admin password option allows easy retrieval of drive data if

user forgets password or leaves the organization

3 © 2017 DataLocker Inc. Proprietary and confidential, for approved use only.

Why Use the DL3/DL3 FE?

0

20

40

60

80

100

120

140

160

180

200

DL2 DL3 DL3 w/SSD

DataLocker Speed Comparison

MB/

•  The DL3/DL3 FE are ~3x faster than the DataLocker DL2 in read tests

•  The DL3 FE (FIPS Edition) is available for those requiring a FIPS 140-2 validated solution

•  The touch screen makes password entry and configuring the device simple

•  The DL3/DL3 FE devices have a tamper evident seal that prevents access to device internals

•  The Configurator tool makes large deployments easy

•  RFID version allows a second form of authentication which can be enabled/disabled (RFID version must be purchased – no conversion or upgrade is available)


DL3 and DL3 FE Differences

DL3 •  Next generation of DL2 •  USB 3.0 interface •  Added security features and menu

functions (compared to DL2) •  Firmware updates (no firmware updates

are available on the DL2 due to the FIPS validation on the entire device)

•  Current firmware supporting SafeConsole is v2.20

DL3 FE •  All the same features as DL3 plus:

•  FIPS 140-2 validated Enova X-Wall MX-256 ASIC

•  FIPS Certificate #1472 – FIPS inside •  Dual crypto processors, uses the FIPS

certified crypto chip and the crypto chip present in the standard DL3 model

•  Optional RFID version available for two factor authentication (separate SKUs)


What Does AES-256 Mean?

•  Advanced Encryption Standard (AES) is the method of encryption used by the US Government

•  The US Government held a contest where a group of highly intelligent mathematicians competed to build the worlds best encryption, and AES won

•  If a device has been FIPS 140-2 validated, then it is also FIPS 197 compliant

•  256-bit is the size of the key used to unlock the data – it looks something like the below:


01011001 01111010 01100101 00111000 00110001 01100001 01011010 01110111 01000011 01110010 01000001 01110011 01101010 01110010 01010110 00110010 00110000 01111001 01100001 00111001 01110101 00111000 00110010 01000101 01110010 00111000 00110001 01010101 01010101 01010111 01000101 00110101

•  Dual crypto utilizes two pass cascading 256-bit AES encryption

•  Data undergoes two passes of 256-bit encryption, using two different independently generated random keys

What is Dual Crypto?


•  The DL3/DL3 FE is designed to be user friendly

•  After initial setup, a user simply enters their password, connects and uses the drive – that’s it!

•  Encryption occurs behind the scenes with a dedicated hardware based crypto chip utilizing AES 256-bit encryption in XTS mode (Dual crypto for DL3 FE)

•  Security is not compromised by user friendliness with features such as read-only and auto-lock

•  Centrally manageable with SafeConsole in firmware v2.20+

Firmware Overview


Enter Password

The default password is 000000 (firmware

v2.10+ default password is 0000000)

Change Password

User needs to change their password from the default or the device is

not secure

Connect!

Once connected, The DL3 and DL3 FE

function as normal external drives

Enter Setup

Tap Setup within 3 seconds before it

automatically connects

Setup and Configuration


User Password

After changing the default password (this becomes the Admin password), tap “user password” from the

SETUP menu.

Restart

Disconnect and restart the DL3, then use the default user password to login. Change the

default user password from the Setup menu.

Create Password

Tap “create”, which sets a default user

password of 000000 (firmware v2.20+

default password is 0000000).

Setting Up the User Password


Randomized Key Pad with Alpha-numeric and Special Characters •  The random key pad feature

is designed to defend against surface pattern analyzing or “shoulder hacking”

•  If enabled, the key pad will

rotate randomly each time the DL3/DL3 FE is powered on

•  Create strong passwords

with letters and special characters

Firmware Overview


SETUP SCREEN - ADMIN

Allows changing password, enabling a user password,

system menu, and “SafeConsole”

SYSTEM SETUP - ADMIN

This is the system setup menu for admin, it allows language

options, auto-lock, strong password requirements, LCD

contrast, key tone, zeroize drive, RFID and read-only mode

SETUP SCREEN - USER

Users only see the system setup menu if a user password is enabled,

it only allows password changes, language options, key tone, LCD

contrast, and auto-lock

Firmware Overview


Firmware Overview

Language Options

Auto-Lock Settings

LCD Contrast Settings

Key Tone On/Off

Read-Only Settings

Zeroize Drive

Strong Password RFID Setup

If strong password is enabled, the minimum password length will be set to 8 and will not allow a password with repeating or sequential numbers

If RFID version, the SETUP RFID menu will appear. If not RFID version, a system warning will show


•  Central management with SafeConsole for DL3 is available with firmware version 2.20+

•  Instantly gain complete and granular control over all of your encrypted USB flash drives and portable hard drives with the SafeConsole central management server software:

–  Achieve compliance for USB storage usage, with full control and audit

–  Keep the productivity benefits of USB storage devices – without the risks of malware, data leaks and breaches

–  Available as an on-premise software or as a DataLocker hosted cloud service with worldwide locations

More information available at datalocker.com/safeconsole

Firmware Overview


Hardware Overview

DL3/DL3 FE •  Textured aluminum and plastic

enclosure •  Printed circuit board with LCD touch

screen •  Hard disk drive or solid state drive •  Removable silicone band

DL3 FE with RFID •  RFID tags •  RFID module (internal bottom right)


Hardware Overview

LCD screen

USB port LED light

RFID module

16

•  LCD screen: touch panel interface •  USB port: connects the unit to the host

system via a USB 3.0 cable •  LED light: indicates power status and hard

disk access •  If RFID version: RFID module to authenticate

RFID tags

© 2017 DataLocker Inc. Proprietary and confidential, for approved use only.

RFID Setup

Access Setup as Admin

Most setup options aren’t available as User by design – this includes the RFID setup

Tap RFID Option in Setup

Tap Setup, then System, and go to page 2 which contains

the RFID option

Tap “Add RFID Tag”

Once added, exit completely out of the menus, the DL3 will ask for the RFID tag on next boot


RFID Use

Swipe the Tag Once setup, the user simply swipes the tag across the

bottom of the drive as indicated by the RFID sticker

Enter Password Enter your strong password previously set (which can be both numbers, letters, and

symbols)

Use the Drive! Enjoy your extra secure

DL3/DL3 FE


Part Numbers

•  DataLocker DL3 –  DL500V3 –  DL1000V3 –  DL2000V3 –  DL512V3SSD –  DL960V3SSD

•  DataLocker DL3 FE –  FE0500 –  FE1000 –  FE2000 –  FE0512 –  FE0960

•  DataLocker DL3 FE w/RFID –  FE0500RFID –  FE1000RFID –  FE2000RFID –  FE0512RFID –  FE0960RFID


datalocker.com For additional resources and support visit

20

datalocker dl3 & dl3 fe dl3 ove… · • equipped with a superspeed usb 3.0 interface • the...

Documents