Kingston Technology IronKey 64GB USB-C Keypad 200C, FIPS 140-3 Level 3 AES-256

FIPS 140-3 Level 3 Validated with XTS-AES 256-bit hardware encryption
The Kingston® IronKey™ Keypad 200 series are OS-independent hardware-encrypted USB Type-A and USB Type-C®* drives with an alphanumeric keypad for easy-to-use PIN access. The KP200 series is FIPS 140-3 Level 3 Validated for military-grade security with enhancements that elevate the bar for data protection and incorporates XTS-AES 256-bit hardware-based encryption. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

The drive is designed to be tamper evident to alert owners. It also incorporates brute force password attack protection, and BadUSB protection with digitally signed firmware. The alphanumeric keypad is coated with a layer of polymer that protects the keys and hides key usage through analysis of fingerprints on the keys.
Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

The KP200 series utilises a built-in rechargeable battery that can be used to unlock the drive first without using any software, and then plug it into any device that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.
With the Multi-PIN option (Admin/User), the keypad can be used to set up an easy-to-remember but hard-to guess alphanumeric PIN for the Admin or User accounts. Admin can restore a User PIN and provide access to the drive should the User PIN be forgotten, or if the drive is locked after reaching the maximum of 10 User login attempts. With both Admin and User PINs enabled, KP200 will lock the User PIN after 10 failed login attempts; if the Admin PIN is entered incorrectly 10 times in a row, brute force attack protection will crypto-erase the drive, destroy the data forever, and reset it.

The drive also provides two levels of Read-Only (or Write-Protect) modes – a Global mode that can be set by Admin, and a session-only mode that can be set by User. Read-Only modes can protect the drive from malware on untrusted systems. In addition, Admin can load content and set Global Read-Only mode, so that User can access the data but not make any changes.

Fast dual-channel performance is offered on KP200 drives with 512GB and on KP200C drives with 64GB-512GB capacities.

FIPS 140-3 Level 3 Validated, Certificate #5133
KP200 meets FIPS 140-3 Level 3 military-grade security specifications published by NIST. This is an enhanced version of the FIPS 140-2 specifications that further enhances the drive’s security capabilities and tamper-resistance. It includes XTS-AES 256-bit encryption along with Brute Force and [BadUSB] attack protection with digitally signed firmware. Its circuitry is covered by a layer of special epoxy that makes it virtually impossible to remove components without damaging them; this tough epoxy stops attacks against the semiconductor components.

OS and device independent
With KP200 utilising a rechargeable battery, the keypad can be used to unlock the drive without using any software, then plug it into any system that supports USB Type-A or USB Type-C mass storage device. This gives users the most flexibility across different platform types and operating systems.

Multi-PIN option
Users have the option to set up a User or an Admin/User mode. Admin can be used to restore a User PIN and provide access to the drive should User PIN be forgotten or if the drive is locked after reaching the maximum of 10 User login attempts.

Global and Session Read-Only (write protect) modes
Both Admin and User can set a session-based Read-Only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in Read-Only mode until reset."

How to use

Set up an Admin and/or User PIN using the alphanumeric keypad following the included quick-start instructions. Unlock the drive by entering the PIN on the keypad; the internal battery supplies power to validate the PIN before you connect the drive to a device. Once unlocked, plug the USB-C connector into a compatible host and access files like a standard mass storage device. Use Admin functions to enable Global Read-Only mode or restore a User PIN if necessary.

Recommendations

Store the Admin PIN securely and enable Admin recovery to avoid permanent data loss. Use Global or session Read-Only modes when connecting the drive to untrusted or public systems. Keep the keypad clean and recharge the internal battery periodically to ensure the ability to unlock the drive before connecting.