Kingston Technology IronKey 16GB USB-C Keypad 200C, FIPS 140-3 Lvl 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit hardware encryption
The Kingston® IronKey™ Keypad 200 series are OS-independent hardware-encrypted USB Type-A and USB Type-C®* drives with an alphanumeric keypad for easy-to-use PIN access. The KP200 series is FIPS 140-3 Level 3 Validated for military-grade security with enhancements that elevate the bar for data protection and incorporates XTS-AES 256-bit hardware-based encryption. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

The drive is designed to be tamper evident to alert owners. It also incorporates brute force password attack protection, and BadUSB protection with digitally signed firmware. The alphanumeric keypad is coated with a layer of polymer that protects the keys and hides key usage through analysis of fingerprints on the keys.
Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

The KP200 series utilises a built-in rechargeable battery that can be used to unlock the drive first without using any software, and then plug it into any device that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.
With the Multi-PIN option (Admin/User), the keypad can be used to set up an easy-to-remember but hard-to guess alphanumeric PIN for the Admin or User accounts. Admin can restore a User PIN and provide access to the drive should the User PIN be forgotten, or if the drive is locked after reaching the maximum of 10 User login attempts. With both Admin and User PINs enabled, KP200 will lock the User PIN after 10 failed login attempts; if the Admin PIN is entered incorrectly 10 times in a row, brute force attack protection will crypto-erase the drive, destroy the data forever, and reset it.

The drive also provides two levels of Read-Only (or Write-Protect) modes – a Global mode that can be set by Admin, and a session-only mode that can be set by User. Read-Only modes can protect the drive from malware on untrusted systems. In addition, Admin can load content and set Global Read-Only mode, so that User can access the data but not make any changes.

Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

FIPS 140-3 Level 3 Validated, Certificate #5133
KP200 meets FIPS 140-3 Level 3 military-grade security specifications published by NIST. This is an enhanced version of the FIPS 140-2 specifications that further enhances the drive’s security capabilities and tamper-resistance. It includes XTS-AES 256-bit encryption along with Brute Force and [BadUSB] attack protection with digitally signed firmware. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

OS and device independent
With KP200 utilising a rechargeable battery, the keypad can be used to unlock the drive without using any software, then plug it into any system that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.

Multi-PIN option
Users have the option to set up a User or an Admin/User mode. Admin can be used to restore a User PIN and provide access to the drive should User PIN be forgotten or if the drive is locked after reaching the maximum of 10 User login attempts.

Global and Session Read-Only (write protect) modes
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset."

How to use

Unlock the drive using the alphanumeric keypad and the configured PIN; the built-in rechargeable battery supplies power to authenticate without connecting to a computer. After successful PIN entry, connect the drive to any device that accepts USB mass storage (Type-A or Type-C) to access data. Administrators can set an Admin PIN and a User PIN; the Admin can restore a forgotten User PIN or set Global Read-Only mode. If ten User PIN attempts fail, the User account is locked; if the Admin PIN is entered incorrectly ten times consecutively, the drive will crypto-erase to protect data.

Recommendations

Set distinct, strong alphanumeric PINs for Admin and User accounts, keep the Admin PIN secure, and use Global or session Read-Only mode when connecting the drive to untrusted systems. Ensure the drive is charged before relying on keypad unlocking.