iStorage SD

Introducing the datAshur SD
The iStorage datAshur SD is a PIN authenticated, hardware encrypted, USB Type-C flash drive designed to incorporate removable iStorage microSD Cards. (including USB A adapter in package)

Rather than incorporating fixed memory, the datAshur SD is designed with
an integrated microSD Card slot making it a unique, ultra-secure and cost-effective solution that enables users to use one drive with as many iStorage microSD Cards as required, which are available in varying capacities, offering unlimited encrypted data storage.

Unlimited capacity
Enables users to use one datAshur SD drive with as many iStorage microSD Cards as required, in varying capacities, offering unlimited and economical encrypted data storage.

Available capacities: 32GB, 64GB, 128GB, 256GB, 512GB and 1TB.

Transfer your files in seconds
Superspeed USB 3.2 (Generation 1). Backwards compatible with older USB ports.

Up to: 100MB/s Read speed / 95MB/s Write speed

Secure collaboration
The patented iStorage datAshur SD KeyWriter software clones datAshur SD flash drives with the same encrypted encryption key enabling a secondary drive as a backup and also permits organisations to share encrypted iStorage microSD Cards with as many authorised users of cloned datAshur SD drives as required, without compromising on data security.

Easy to use
Insert your iStorage microSD Card into the datAshur SD microSD Card slot and simply enter your 8-64 digit PIN to authenticate and use as a normal flash drive. When the drive is locked, all data on the iStorage microSD card is encrypted (full disk encryption) using AES-XTS 256-bit hardware encryption (no software required).

FIPS 140-3 Level 3 compliant, tamper proof & evident design
All data stored on the datAshur SD is encrypted using FIPS PUB 197 validated, AES-XTS 256-bit hardware encryption. All components incorporated within the datAshur SD are completely covered by a layer of super tough epoxy resin, which is virtually impossible to remove without causing permanent damage to the components. The drive is also designed to be tamper-evident making it obvious to the User if it has been pried open and tampered with.

Wear resistant keypad
The onboard keypad is covered with a layer of polymer coating that protects the keys and hides key usage to avoid tipping off a potential hacker to commonly used keys.

Rugged, Shockproof & Crushproof
The datAshur SD is extremely rugged, surviving a drop of up to 4m onto a concrete surface.

The drive is also crushproof, withstands the weight of a 2.7 ton vehicle.

No need to worry about spills
The drive’s IP68 accreditation means it will survive being submerged under 1.5m of water for 30 minutes and deemed fit enough to withstand dust, dirt and sand.

Independent User & Admin PINs
Which makes it perfect for corporate and government deployment. If the User forgets their PIN, the drive can be unlocked using the Admin PIN. The Administrator can then allow the User to set a new User PIN.

User PIN enrolment
The Admin can set a restriction policy for the User PIN. This includes setting the minimum length of the PIN, as well as requiring the input of one or more ‘Special Characters’. The ‘Special Character’ functions as ‘SHIFT + digit’.

One-time User recovery PIN
Admin configurable, extremely useful in situations where a User has forgotten their PIN, allowing the User to unlock the device and set a new User PIN.

OS & Host independent - works across any host and embedded systems
No software required; the drive will work on any device with a USB port. USB Type C and Type A connectivity (included)

Compatible with: MS Windows, macOS, Linux, Android, Chrome, Thin Clients, Zero Clients, Embedded Systems, Citrix and VMware

Bootable feature
Ideal in certain cases where the datAshur SD needs to remain unlocked during USB port re-enumeration, such as during a reboot process or passing the device through a virtual machine. Allows users to install an OS on the datAshur SD and boot directly from it.

Read only (write protect) - Dual Mode
Both Admin and User can configure the datAshur SD as a read-only (write protect) device. If configured by the Admin, the feature cannot be modified or disabled by the User, allowing the Admin to pre-provision a device with pre-loaded content as a read-only drive for the User.

Brute force hack defence mechanism
Intelligently programmed to protect against all forms of brute force attacks.
If the User PIN is entered incorrectly 10 consecutive times, the User PIN will be deleted and the drive can only be accessed by either activating the User recovery PIN (if configured) or entering the Admin PIN.

If the Admin PIN is entered incorrectly 10 consecutive times, all data, PINs and the encrypted encryption key will be lost forever.

Common Criteria EAL5+ certified secure microprocessor
Offers ultimate security against hackers, detecting and responding to tampering with features such as:

• Dedicated hardware for protection against SPA/DPA/SEMA/DEMA attacks.

• True Random Number Generator (TRNG), with NIST SP800-90B approved analogue noise source.

• Advanced hardware protection against physical attacks, including:

– Active Shield, for detecting any physical intrusion or tampering

– Enhance Protection Object, for protecting the memory against any attempts to introduce perturbations via laser attacks.

– Glitch & Slope Detectors, for monitoring the internal power supply, and protecting the execution against glitch attacks on the power pins.

– Built-in Parity Check mechanism, for detecting any corruption of sensitive states and registers.

– Bare-metal Memory and Bus Encryption, for mitigating the risk of program, code and data integrity violation.

– Environmental Protection Systems, for preventing any execution out of the operating ranges (voltage, frequency and temperature).

• Secure Memory Management & Access Protection, for preventing against code injection attacks.

• In-house state-of-the-art secure firmware, developed with pervasive protection throughout the code, and designed to resist against advanced Side Channel Attacks.

• NIST SP800-90A approved Deterministic Random Bit Generator (DRBG), generating random numbers which are statistically equivalent to a uniformly distributed data stream.