Apricorn 1TB Aegis Fortress FIPS 140-2 Level 2 Secure USB 3.2 Gen 1 Portable Hard Drive

Key Features

• 1TB Capacity
• USB 3.2 Gen 1 Interface
• FIPS 140-2 Level 2 Validated
• AES-XTS 256-Bit Hardware Encryption
• Wear-Resistant 10-Digit PIN Keypad
• Brute-Force Protection
• Auto-Lock and Self-Destruct PIN
• Water and Dust-Resistant
• Integrated USB-A Cable
• Windows and Mac Support, Plug-and-Play

Show LessKeep your data safe on the go with the 1TB Aegis Fortress FIPS 140-2 Level 2 Secure USB 3.2 Gen 1 Portable Hard Drive from Apricorn. Equipped with a USB 3.2 Gen 1 (USB 3.1 Gen 1/3.0) interface, data transfer rates up to 5 Gb/s, and an integrated 10-digit keypad, this 1TB portable hard drive meets U.S. federal government FIPS 140-2 Level 2 standards for cryptographic security, and it also

External Enclosure

Electrical

General

Packaging Info

FIPS 140-2 Level 2 Validated

The Aegis Fortress's FIPS 140-2 validation is the cryptography standard required by the U.S. federal government for protection of sensitive data. It covers 11 areas of its cryptographic security, including physical security, cryptographic key management and design integrity. The drive's epoxy-coated boundary includes all encryption functions and all Critical Security Parameters (CSPs) such as PIN storage, encryption key generation and storage, random number and seed generators, and all firmware storage. The FIPS module is a complete encryption system, and no CSPs ever leave the boundary, nor are they ever shared with a host system. By design, the drive that stores the encrypted data is excluded from this boundary to both maximize affordability and product line flexibility in capacity and form factor offerings.

Military-Grade 100% Hardware Encryption

Featuring AES-XTS 256-bit hardware encryption, the Aegis Fortress seamlessly encrypts all data on the drive in real-time, keeping your data safe even if the hard drive is removed from its enclosure.

Software-Free Design

The Aegis Fortress does not require any software, drivers, or updates for use, and it can even be utilized without a keyboard. The Fortress is designed to support Windows, Mac, and Linux PCs as well as almost any OS with a powered USB port and a storage file system.

USB 3.2 Gen 1 (USB 3.1 Gen 1/3.0) Interface

The Aegis Fortress delivers data transfer speeds up to 5 Gb/s via its USB 3.2 Gen 1 (USB 3.1 Gen 1/3.0) interface.

Integrated USB Cable

The Aegis Fortress's integrated USB cable fits into a slot on the side of the drive.

Aegis Configurator Compatible

Create custom profiles and mass configure multiple Aegis devices with Apricorn's Configurator/Powered Hub bundle.

PIN Protection

Unlock the drive with your own unique 7 to 16-digit PIN. With the addition of the Shift key, the Aegis Fortress can double the number of possible PIN combinations, further preventing brute force access to the drive's data.

Programmable Minimum PIN Length

For added PIN length and enhanced security, minimum PIN length requirement can be increased from 7 characters up to 16 maximum.

Embedded Keypad

All PIN entries and controls are performed on the keypad of the Aegis Fortress. No critical security parameters are ever shared with the host computer. Until the device is unlocked via its keypad, it remains invisible to the host. The embedded keypad circumvents all hardware and software key logging attempts to capture passwords by excluding the host system from the authentication process.

Separate Administrator and User Modes

The Fortress's administrator mode allows enrollment of one administrator for setting parameters for PIN management, Read-Only, Auto-Lock, Self-Destruct, Lock-Override, and Brute Force modes. The user mode is limited to basic external drive functions such as read/write, unlock/lock, etc. The data on the drive can also be accessed with the admin PIN in the user mode.

Forced Enrollment

With no default factory preset PINs, the administrator is required to create a unique PIN at setup prior to use. Forced enrollment can also be extended to the first user PIN before use.

Lock-Override Mode

Designated for specific cases in which the drive needs to remain unlocked, such as duringreboot, passing the drive through a virtual machine, or similar situations that would normally prompt the Fortress to automatically lock. When enabled, Lock-Override Mode allows the drive to remain unlocked through USB port re-enumeration and will not re-lock until USB power is interrupted.

Two Read-Only Modes

Handy for accessing data on the drive in a public setting to protect against USB viruses. Particularly important in forensics, read-only mode is ideal for applications that require data to be preserved in its original, unaltered state and can't be overwritten or modified. The Fortress has two read-only modes. One is set by an administrator within Admin Mode and can't be modified or disabled by anyone else. The second read-only mode can be set and disabled by anyone with a recognized PIN.

Auto-Lock feature and Self-Destruct PIN

With the Aegis Fortress, you can set the unattended drive to lock after a predetermined amount of time. Additionally, you can program your own unique Self-Destruct PIN which, once implemented, instantly destroys all PINs and data on the drive and creates a new encryption key.

Brute Force Protection

After a predetermined number (programmable; up to 20) of incorrect PIN entry attempts, the Aegis Fortress will conclude that it is under brute-force attack and will respond by performing a crypto-erase, deleting the encryption key and rendering all of the drive's data useless.

Wear, Water, and Dust-Resistant Keypad

Designed with protection in mind, the Aegis Fortress's polymer-coated membrane-style keypad is resistant to dust, grit, and water. The keypad's wear resistance helps to prevent tipping off a potential hacker to the most frequently used keys on the drive.

LED Flicker Button Confirm

Indicates positive button entry with visual LED confirmation.

Recovery PINs

Ability to create 4 one-time use PINs to recover data in cases of forgotten user or administrator PINs.

Drive Reset Feature

Performs a crypto-erase with new encryption key regeneration. An infinite number of resets is allowed.