Kingston IronKey D500S Hardware-Encrypted Up to 512GB USB 3.2 Gen 1 Flash Key

Kingston Digital, Inc., the flash memory affiliate of Kingston Technology Company, Inc., launched the IronKey D500S, hardware-encrypted USB flash drive providing military-grade security for classified data in transit.

D500S is FIPS 140-3 Level 3 (pending) certified with enhancements from NIST requiring secure microprocessor upgrades for stronger security and attack protections for government and military use. The drive self-tests upon bootup and includes thermal and voltage protection to automatically shut down when certain threshold is reached. Waterproof ⁽¹⁾, dustproof ⁽¹⁾, shock and vibration resistant to Military Standards ⁽²⁾, crush-resistant and epoxy-filled, D500S’ rugged zinc casing protects internal components from penetration attacks.

The Multi-Password option with Complex or Passphrase mode ⁽³⁾allows users to take ownership over their data, making it easier to remember the password to unlock the stringent security. Admin can reset a user password and enable a One-Time Recovery password to restore access should User password be forgotten. Both admin and user can set a session-based read-only mode to protect the drive from malware on untrusted systems, while admin can also set a Global Read-Only mode until reset. To keep data from getting into the wrong hands, admin can enter a Crypto-Erase password that will destroy the data and reset the drive to prevent unauthorized access in compromising situations.

Click to enlarge

D500S includes features found in the Kingston IronKey lineup like XTS-AES 256-bit encryption, protection from BadUSB and Brute Force attacks with digitally signed firmware, Virtual Keyboard ⁽⁴⁾for keylogger and screenlogger protection, and D500S also boasts the first dual-partition option. Admin can create 2 custom-sized secure partitions for admin and user, allowing for a Hidden File Store that can be used to provision files to the user partition as needed. When using untrusted systems or sharing the drive, the Hidden File Stores keep data secure and invisible unless properly accessed.

“The flagship D500S with FIPS 140-3 Level 3 (Pending) offers more features than any other drive in its class. D500S upgrades the IronKey D300S with state-of-the-art security making for a complete security solution for high-value data protection for larger enterprises and governments,” said Richard Kanadjian, IronKey global business manager. “IronKey has become an essential pillar to meeting Data Loss Protection (DLP) best practices with the toughest military-grade security for compliance with data encryption laws and regulations such as SOC 2, NIS2, FISMA, GDPR, PIPEDA, HIPAA, HITECH, GLBA, SOX, and CCPA.”

D500S offers many customization options and are TAA/CMMC Compliant and Assembled in USA. Available in fast dual channel performance with capacities up to 512GB, backed by a 5-year warranty with free technical support. An enterprise managed D500SM model as well as an optional-managed custom drive are also available ⁽⁵⁾.

IronKey D500S/SM features and specs:

Military-grade hardware-encrypted USB drive: FIPS 140-3 Level 3 (pending) certified XTS-AES 256-bit encryption with secure microprocessor upgrades for stronger security. Built-in protections vs. BadUSB and Brute Force attacks. New drive self-testing upon bootup and thermal and voltage protection to automatically shut down drives when they reach certain thresholds.
Multi-password option for DR: Enable admin, user, and One-Time Recovery passwords. Admin can reset a user password and enable a One-Time Recovery password to restore user’s access to data if the user password is forgotten.
Complex or passphrase mode: Select between Complex or Passphrase mode. Passphrases can be complete sentences, multiple words that only you remember – from 10 to 128 characters long. An Eye symbol for all entered passwords helps reduce typos.
First dual hidden partition option: Admin can create 2 custom-sized Dual Hidden Partitions for admin and user for a Hidden File Store to keep data secure and invisible unless properly accessed. Dual Hidden Partitions can provide additional security on untrusted systems or when drive sharing is required.
Crypto-erase password for compromising situations: The Crypto-Erase password will wipe encryption keys, delete all data forever and reset the drive.
Rugged casing built to IronKey toughest standards: Zinc casing that is waterproof, dustproof, crush-resistant and is epoxy-filled for physical tamper-resistant security.
Customizable: Enable, disable, modify drive features and profile. Co-logo.
Global and session read-only (write protect) modes: Both admin and user can set a session-based read-only mode to protect the drive from malware on untrusted systems. Admin can also set a Global Read-Only mode that sets the drive in read-only mode until reset.
Interface: USB 3.2 Gen
Capacities⁽⁶⁾: 8, 16, 32, 64, 128, 256, 512GB

Connector: Type-A
Speed⁽⁷⁾:
- - USB 3.2 Gen 1
    - 8GB –128GB: 240MB/s read, 190MB/s write
    - 256GB: 240MB/s read, 170MB/s write
    - 512GB: 310MB/s read, 250MB/s write
  - USB 2.0
    - 8GB –512GB: 30MB/s read, 20MB/s write
Dimensions: 77.9×21.9×12.0mm
Waterproof ⁽⁸⁾: Certified to IP67 rating
Operating temperature: 0°C to 50°C
Storage temperature: -20°C to 85°C
Compatibility: USB 3.0/USB 3.1/USB 3.2 Gen 1
Customization options:
- - D500S: Enable, disable, modify drive features and profile. Co-logo.
  - D500SM: Modify drive profile. Co-logo. Optional-Managed version.

Warranty/support:
- - D500S: 5-year warranty, free technical support
  - D500SM: 2-year warranty, free technical support
Compatible with: Windows 11, 10, macOS 10.15.x – 13.x, Linux ⁽⁹⁾ Kernel 4.4+

(1) Refer to datasheet’s specification. Product must be clean and dry before use.
(2) MIL-STD-810F certified for mechanical shock, vibration and drop tests.
(3) Passphrase mode is not supported in Linux.
(4) Virtual Keyboard: Only supports US English on Microsoft Windows and macOS.
(5) SafeConsole management service purchased separately.
(6) Some of the listed capacity on a flash storage device is used for formatting and other functions and thus is not available for data storage. As such, the actual available capacity for data storage is less than what is listed on the products. Kingston’s Flash Memory Guide.
(7) Speed may vary due to host hardware, software and usage.
(8) IEC 60529 certified for waterproof with the cap on. Product must be clean and dry before use.
(9) Feature support on Linux is limited. Refer to user manual for more details. Certain distributions of Linux will require super-user (root) privileges in order to execute the IronKey commands properly in the terminal application window.