IronKey has introduced the IronKey S200, claiming it's world's most physically and cryptographically secure USB flash drive. The company says the IronKey S200 is the only USB storage device to achieve FIPS 140-2, Security Level 3 validation.
Highlights of IronKey S200:
The first and only USB flash drive to meet the rigorous government
security requirements of FIPS 140-2, Security Level 3.
Hardware-based AES 256-bit encryption in CBC mode.
Tamper-resistant and tamper-evident rugged metal case.
Secure management of encryption keys.
Anti-malware capabilities in hardware provide an unprecedented layer of
protection from malware and prevent its spread onto enterprise and
AutoRun lock-down protects against worms.
Read-only mode prevents malware on infected hosts from infecting IronKey
Trusted network restrictions prevent IronKey devices from unlocking on
Optional anti-virus/anti-malware scanning cleans the devices in the
Dual-channel architecture enables significant performance when writing
large and small files to the drive.
Includes extended-life flash memory capable of running high-bandwidth
applications such as data backups, virtual machines, or bootable mobile
Enterprise Management Cloud Service over the Internet for the
enforcement of security policies, security and anti-malware updates, and the
tracking and auditing of hundreds or thousands of devices.
Optional Enterprise Management Server that customers can host
IronKey FIPS 140-2, Level 3 Validation:
The IronKey S200 USB flash drive has been awarded FIPS certificate 1149.
IronKey S200 includes the ability to prevent intruders from gaining
access to Critical Security Parameters (CSPs ) held within the cryptographic
The physical security mechanisms required at Security Level 3 validate
that IronKey thumb drives can detect and respond to attempts of physical
access, use or modification of the cryptographic module.
IronKey includes the physical security mechanisms required for the
validation including the use of production-grade components, hard potting
material to encapsulate the chip circuitry and a hard metallic enclosure.
Enterprise Management Service Enhancements:
Mac support for Silver Bullet service provides remote wipe,
comprehensive tracking and rich reporting capabilities.
Configurable time-out policy enables the ability to automatically lock
devices after a specified period of inactivity.
Search capabilities help to locate device information by user name,
email address, serial number or other specific information.
Enhanced backup and recovery capabilities from previous Password Manager
to the Identity Manager.
Management capabilities are available as cloud-based SaaS or on-premise
server software for flexibility in meeting organizational requirements.