iStorage – diskAshur PRO2

EDGE (Enhanced Dual Generating Encryption) Technology
Offering advanced portable data security via built-in FIPS PUB 197 validated AES-XTS 256-bit hardware encryption engine. The data encryption key is randomly generated by a Common Criteria EAL4+ ready Random Number Generator and protected by FIPS validated wrapping algorithms. uniquely featuring a dedicated on-board Common Criteria EAL4+ ready secure microprocessor to enhance security through true random number generation and built-in cryptography. The security component employs physical protection mechanisms to protect itself from any external tamper, bypass laser attacks and fault injections and incorporates active-shield violation technology. More specifically, the secure microprocessor reacts to all forms of automated hacking attempts by entering the deadlock frozen state where the device can only restart through a ‘Power On’ reset procedure (i.e. power off/power on). The security lock feature protects the device against any unauthorised firmware modifications from the host side (fully protected against BadUSB). The diskAshur PRO2 uniquely incorporates a secure microprocessor providing secure algorithms to encrypt both the data and the encryption key, giving you confidence that your data is protected to the highest standards at any given time.

FIPS PUB 197 Validated Encryption Algorithm
Employing AES-XTS 256 bit hardware encryption, the iStorage diskAshur PRO2 seamlessly encrypts all data on the drive in real-time, keeping your data safe even if the hard drive is removed from its enclosure.

Super fast USB 3.1
With super-fast USB 3.1 data transfer speeds of 148 MBps (Read) and 140 MBps (Write), you can now access your files faster than ever before. The iStorage diskAshur PRO2 is also backwards compatible with USB 2.0 and 1.1 ports.

Brute Force Hack Defence Mechanism
The iStorage diskAshur PRO2 is intelligently programmed to protect against all forms of Brute Force attacks. After five consecutive incorrect PIN entries the drive will freeze, requiring the drive to be disconnected and reconnected to the USB port to get a further five PIN entry attempts. If a further five (10 in total) consecutive incorrect PIN attempts are entered again, the diskAshur PRO2 will freeze again. To get a further and final five PIN attempts (15 in total), the “shift” button must be pressed whilst inserting the USB cable to the USB port and then an iStorage preset PIN will need to be entered. On the fifteenth consecutive incorrect PIN entry, the diskAshur PRO2 assumes it is being attacked and will delete the encryption key and lock itself, rendering all data previously stored on the drive as lost forever. At this point, the drive can be reset to factory default settings and redeployed.

Self Destruct Feature
You can pre-program the diskAshur PRO2 with your own unique Self Destruct PIN which, once implemented, instantly deletes the encryption key, all PINs, data and then creates a new encryption key.

Unattended Auto-Lock Feature
Set the unattended diskAshur PRO2 to automatically lock after a pre-determined amount of time where the drive has not been used.

Drive Reset Feature
The iStorage diskAshur PRO2 also employs a useful drive reset feature, which can be implemented with a unique command. This clears all PINs and data, and creates a new randomly generated encryption key, enabling the drive to be reset and redeployed as many times as needed.

Tamper Proof and Tamper Evident Design
In addition to incorporating a secure microprocessor, encrypting the data and the encryption key, the diskAshur PRO2 adds another barrier between your data and a hacker. All the components of the diskAshur PRO2 are completely covered by a layer of super tough epoxy resin, which is virtually impossible to remove without causing permanent damage to the components. This barrier prevents a potential hacker from accessing the critical components and launching a variety of futile attacks. Furthermore, the tamper evident design of the diskAshur PRO2 if breached, will provide visible evidence that tampering has occurred.

Data at rest protection
The iStorage diskAshur PRO2 also employs a useful drive reset feature, which can be implemented with a unique command. This clears all PINs and data, and creates a new randomly generated encryption key, enabling the drive to be reset and redeployed as many times as needed.

Wear Resistant Epoxy Coated Keypad
Designed with protection in mind, the diskAshur PRO2 wear resistant epoxy coated keypad hides key usage to avoid tipping off a potential hacker to commonly used keys.

• Common Criteria EAL4+ ready on-board secure microprocessor
• Real-time military grade AES-XTS 256-bit Full-Disk Hardware Encryption
• FIPS PUB 197 Validated Encryption Algorithm
• Encryption keys are always encrypted while at rest
• Brute Force Hack Defence Mechanism
• Tamper Proof and Tamper Evident Design
• Immune to BadUSB
• Water & Dust Resistant - IP56 certified
• Epoxy coated wear resistant keypad
• No speed degradation - as fast as any non-encrypted USB 3.1 HDD
• Desk Lock Slot
• FIPS 140-2 Level 3 (US), NCSC CPA (UK), NLNCSA BSPA (NL) & NATO Restricted level Certified.
• No software or drivers required - 100% Hardware Encryption
• Read-Only (Write Protect) & Read/Write modes
• PIN authenticated - Supports Admin and User Independent PINs 7-15 digits in length
• Self-Destruct Feature
• Drive Reset Feature
• Super Speed USB 3.1 with integrated cable
• Unattended Auto-Lock feature
• No admin rights needed
• OS & Platform Independent - Works on any device with a USB port
• All components covered with a layer of super tough epoxy resin

• Capacity: 500GB, 1TB, 2TB, 3TB, 4TB & 5TB
• Data Transfer Speed: Up to: Read 148 MBps / Write 140 MBps
• Power Supply: Bus Powered
• Dimensions (W, D, H): 124 mm x 84 mm x 20 mm (500GB,1TB,2TB)| 124 mm x 84mm x 28mm (3TB,4TB,5TB)
• Weight: 500GB/1/2TB max. 225 grams approx. | 3/4/5TB max. 331 grams approx
• Approvals: FIPS PUB 197 Validated, FCC, CE, RoHS, WEEE, TAA Compliant
• Accreditations: FIPS 140-2 Level 3 (US), NCSC CPA (UK), NLNCSA BSPA (NL) & NATO Restricted level - certified
• Interface: Super Speed USB 3.1 - up to 5Gbps. Backward compatible with USB 3.0/2.0/1.1
• Operating System Compatibility: MS Windows, macOS, Linux, Chrome, Thin Clients, Zero Clients, Android & Embedded Systems
• Hardware Data Encryption: Real-Time Military Grade AES-XTS 256-bit Full-Disk Hardware Encryption
• Warranty: 2 Years
• iStorage Part Number: IS-DAP2-256-XXXX-C-G (XXXX = Capacity)
• Box Contents: Portable Hard Drive, Protective Carry Case, QSG (Quick Start Guide)