Apricorn 4TB Aegis Fortress FIPS 140-2 Level 2 Secure USB 3.2 Gen 1 Portable SSD

The Aegis Fortress's FIPS 140-2 validation is the cryptography standard required by the U.S. federal government for protection of sensitive data. It covers 11 areas of its cryptographic security, including physical security, cryptographic key management and design integrity. The drive's epoxy-coated boundary includes all encryption functions and all Critical Security Parameters (CSPs) such as PIN storage, encryption key generation and storage, random number and seed generators, and all firmware storage. The FIPS module is a complete encryption system, and no CSPs ever leave the boundary, nor are they ever shared with a host system. By design, the drive that stores the encrypted data is excluded from this boundary to both maximize affordability and product line flexibility in capacity and form factor offerings.

Featuring AES-XTS 256-bit hardware encryption, the Aegis Fortress seamlessly encrypts all data on the drive in real-time, keeping your data safe even if the hard drive is removed from its enclosure.

The Aegis Fortress does not require any software, drivers, or updates for use, and it can even be utilized without a keyboard. The Fortress is designed to support Windows, Mac, and Linux PCs as well as almost any OS with a powered USB port and a storage file system.

The Aegis Fortress delivers data transfer speeds up to 5 Gb/s via its USB 3.2 Gen 1 (USB 3.1 Gen 1/3.0) interface.

The Aegis Fortress's integrated USB cable fits into a slot on the side of the drive.

Create custom profiles and mass configure multiple Aegis devices with Apricorn's Configurator/Powered Hub bundle.

Unlock the drive with your own unique 7 to 16-digit PIN. With the addition of the Shift key, the Aegis Fortress can double the number of possible PIN combinations, further preventing brute force access to the drive's data.

For added PIN length and enhanced security, minimum PIN length requirement can be increased from 7 characters up to 16 maximum.

All PIN entries and controls are performed on the keypad of the Aegis Fortress. No critical security parameters are ever shared with the host computer. Until the device is unlocked via its keypad, it remains invisible to the host. The embedded keypad circumvents all hardware and software key logging attempts to capture passwords by excluding the host system from the authentication process.

The Fortress's administrator mode allows enrollment of one administrator for setting parameters for PIN management, Read-Only, Auto-Lock, Self-Destruct, Lock-Override, and Brute Force modes. The user mode is limited to basic external drive functions such as read/write, unlock/lock, etc. The data on the drive can also be accessed with the admin PIN in the user mode.

With no default factory preset PINs, the administrator is required to create a unique PIN at setup prior to use. Forced enrollment can also be extended to the first user PIN before use.

Designated for specific cases in which the drive needs to remain unlocked, such as duringreboot, passing the drive through a virtual machine, or similar situations that would normally prompt the Fortress to automatically lock. When enabled, Lock-Override Mode allows the drive to remain unlocked through USB port re-enumeration and will not re-lock until USB power is interrupted.

Handy for accessing data on the drive in a public setting to protect against USB viruses. Particularly important in forensics, read-only mode is ideal for applications that require data to be preserved in its original, unaltered state and can't be overwritten or modified. The Fortress has two read-only modes. One is set by an administrator within Admin Mode and can't be modified or disabled by anyone else. The second read-only mode can be set and disabled by anyone with a recognized PIN.

With the Aegis Fortress, you can set the unattended drive to lock after a predetermined amount of time. Additionally, you can program your own unique Self-Destruct PIN which, once implemented, instantly destroys all PINs and data on the drive and creates a new encryption key.

After a predetermined number (programmable; up to 20) of incorrect PIN entry attempts, the Aegis Fortress will conclude that it is under brute-force attack and will respond by performing a crypto-erase, deleting the encryption key and rendering all of the drive's data useless.

Designed with protection in mind, the Aegis Fortress's polymer-coated membrane-style keypad is resistant to dust, grit, and water. The keypad's wear resistance helps to prevent tipping off a potential hacker to the most frequently used keys on the drive.

Indicates positive button entry with visual LED confirmation.

Ability to create 4 one-time use PINs to recover data in cases of forgotten user or administrator PINs.

Performs a crypto-erase with new encryption key regeneration. An infinite number of resets is allowed.