USBK - CryptoBridge A101, User Manual

Page 1: ...User Guide Ver 1 1 Page 1 USBK CryptoBridge USER GUIDE Version 1 2 Models A101 A103 For more product information please visit www usb k com ...

Page 2: ... USBK protects your data 11 System Requirements 11 Getting started 13 Before You Begin 13 About Drive Mapping 13 Control Panel of USBK Management Software 13 Initializing with a USBK 14 Personalizing a USBK 14 Starting with your BackDisk 17 Day to Day Using of USBK 19 Activate Deactivate your USBK 19 Activate your USBK 19 Deactivate your USBK 19 Usage of BackDisk 20 Understanding USBK status via L...

Page 3: ... 36 Personalizing a USBK 36 Starting with your BackDisk 39 Day to Day Using of USBK 40 Activate Deactivate your USBK 40 Usage of BackDisk 41 Changing your password 42 Forgetting your password 42 Auto Activation Property 42 Changing Device USBK Name 43 Changing your encryption key s 44 Viewing device information 45 Using USBK with a USB Hub 46 Troubleshooting FAQ 47 USBK exe program doesn t work Wh...

Page 4: ...User Guide Ver 1 1 Page 4 Who are we 48 Contact Information 48 Appendix USBK policy settings 49 ...

Page 5: ...011 Initial Publication Ver 1 1 24 03 2011 About USBK Models part of this guide is revised Ver 1 2 23 05 2011 Using USBK on Linux and Using USBK with Text Editor parts of this guide is revised NOTE Please visit our website www usb k com to obtain the latest version of this document ...

Page 6: ...roperty Easy to use and affordable This guide provides instructions for Windows Procedures that are OS specific Operating System specific carry the OS name Procedures that do not specifically mention the OS apply to Windows Additionally this guide is valid for all models of USBK on page 10 Procedures that are specific for model is emphasized with comments including the model name We made use of sp...

Page 7: ... but remember to keep it confidential There s no way to recover encryption key s as they are never exported or displayed during usage of USBK A lost of encryption keys results in lost of data on BackDisk Therefore it is very important that you remember the encryption key s or store it in a safe place Format at first time use of BackDisk You must format your BackDisk USB stick USB external harddisk...

Page 8: ...ion of user guide on our website www usb k com Renaming your USBK You can optionally change the name of your USBK so that you will be able to identify them easily when you plug Giving name to encryption key s You can optionally give name for your encryption key s for easy usage Encryption keys per your BackDisks Keep in mind which encryption key is used for your each BackDisk in order to prevent d...

Page 9: ...re purchasing a genuine USBK If you see that the security label is removed or damaged please contact with your supplier immediately Package Content Your USBK package includes Accessory Qty USBK CryptoBridge 1 Removable Lanyard 1 USB A male to A female Retractable Extension Cable 2 0 1 Download Instruction for User Guide 1 If any item is missing or damaged please contact with your supplier immediat...

Page 10: ...drive is also not important It can be NTFS FAT FAT32 or EXT3 EXT4 NOTE USBK is not compatible with USB storage disks with multiple LUNs The BackDisk should be single LUN On the fly Encryption It means that encryption is made always automatically and transparently without user intervention and cannot be disabled Data can be copied to from a mounted BackDisk at back of USBK just like they are copied...

Page 11: ...access your USBK and consequently your data on BackDisk For the password protection you are required to set a password on the first use Also to protect against brute force password attacks after 3 consecutive incorrect password attempts USBK securely erases all onboard data your encryption key s and password 2 Protection of private data on BackDisk provided by encrypting the data using AES algorit...

Page 12: ...ttacks which can compromise the security of data transfer between the HostSystem and USBK Operational environment should also be trusted BackDisk USB Port USB 1 1 or USB 2 0 MSD Mass Storage Device All kind of USB flash drives and USB external hard drives as registered as USB MSD having SCSI interface with a single LUN ...

Page 13: ... other The other Drive is labeled as Removable Disk Before initializing your USBK at first time usage user authentication at day to day usage the Removable Disk is inaccessible When you try to access it the following message displays insert a disk into drive E where E is for the drive letter associated with your BackDisk After successful user authentication it opens for read write as your BackDisk...

Page 14: ...nd creating your encryption key s You are automatically prompted to set new password at first usage After this password setting random encryption key s is assigned on your USBK That s why it is strongly recommended to set your encryption key s To personalize a USBK 1 Plug the USBK into the USB port of the computer When USBK is plugged in computer the operating system recognizes automatically and t...

Page 15: ...cel this Change Password window is closed without completing password setting and the Control Panel of USBK appears NOTE Password should be minimum 4 characters long and not exceed 16 characters It may contain three different types of characters letters numbers and special characters such as punctuation marks etc NOTE After new password setting random encryption key s is generated by USBK and assi...

Page 16: ...size encryption key in Text type must be 32 characters long with letters numbers and special characters such as punctuation marks etc Decimal is formed of 32 numeric digits between 0 and 255 each digit separated with a dot You can follow up shown examples below AES Key box NOTE USBK can generate the encryption key s on behalf of user If you wish that click Generate button Then USBK generates a ran...

Page 17: ...lick Select Valid for A103 model If you are using A101 model pass directly to the next step 2 3 Type your password in appeared password window and click OK If the password is correct activating your USBK is done successfully Bubble message on notification area indicates this as Activated Tip You can also activate your USBK by right clicking the USBK icon on the notification area and clicking Activ...

Page 18: ...ect Manage and Computer Management window appears 2 Click Disk Management in the left pane of Computer Management window 3 Choose your removable disk right click it and select Format 4 There is a checkbox for Perform a quick format Check it and click OK At this point you are ready to use your USBK and your BackDisk encryption key AES key activated here in this part of guide at step 2 2 ...

Page 19: ...ht clicking the USBK icon on the notification area and clicking Activate Key And then follow up the same instructions explained above starting from 2 Step You can check the status of your USBK at on the Control Panel of USBK It is represented as Activate in green Deactivate your USBK Deactivate is tantamount to removing your BackDisk It is equivalent in effect with removing your BackDisk although ...

Page 20: ...rithm FIPS PUB 197 Data is automatically decrypted when you open the file Data can be copied to from a mounted BackDisk at back of USBK just like they are copied to from any normal USB drive for example by simple drag and drop operations or right click send etc NOTE To access to your BackDisk the status of your USBK must be Activate If it is Deactivate and you try to access your BackDisk the follo...

Page 21: ... is ready deactivated ON OFF OFF ON Blink OFF USBK is activated w o BackDisk OFF Reverse Blink Blink Reverse Blink USBK is activated with BackDisk Twinkle Blink Indicates a data transfer activity writing to BackDisk with encryption Blink Twinkle Reading from BackDisk with decryption Table 1 Led Status of USBK ...

Page 22: ...tatus of device must be Deactivate You can check the status of your device on the Control Panel of USBK If the status is Activate in green click Deactivate Key button Settings menu will be enabled and get color in red To change your password 1 On the Control Panel of USBK under Settings click Password 2 Type your password on dialog boxes New Password and New Password Again and click OK 3 Type your...

Page 23: ...kDisk and prevent data lost Auto Activation Property With Auto Activation property you configure your USBK to automatically start when you plug it in a HostSystem So you can use your USBK on hostsytems which do not have any user interface for password entry When Auto Activation is enabled USBK does not ask for password confirmation to verify user Thence it can be used directly on test measurement ...

Page 24: ...ata on your BackDisk when he plug in the computer as no password is asked to verify user Just carry only your USBK when Auto Activation Enabled for the security of data on your BackDisk To disable Auto Activation 1 On the Control Panel of USBK under Settings click Auto Activation 2 Remove the sign in Auto Activation Key checkbox click OK 3 Type your password in appeared password window and click O...

Page 25: ...s since you can have multiple USBKs NOTE To change your device USBK name the status of device must be Deactivate You can check the status of your device on the Control Panel of USBK If the status is Activate in green click Deactivate Key button Settings menu will be enabled and get color in red To change device name 1 On the Control Panel of USBK under Settings click Device Label 2 Type a name in ...

Page 26: ...om Key combobox Valid for A103 model If you are using A101 model pass to the next step 3 Type a name in Key Name box sign Change Only Key Name checkbox and click OK 4 Type your password in appeared password window and click OK If the password is correct changing key name is done successfully Bubble message on notification area indicates this setting as Changed Successfully Viewing device informati...

Page 27: ... 27 Model Model of your USBK Serial Number Serial Number of your USBK This is a unique number for each USBK Tip You can also view device information by right clicking the USBK icon on the notification area and clicking About ...

Page 28: ...this web site NOTE is normal user and is user who has all super user privileges NOTE USBK has two LEDs for indicating its operational status The states of these LEDs are explained herein this guide at Table 1 Led Status of USBK on page 21 Installing Linux CLI Software Please be sure you have installed GCC compiler tool before installation You should download from our website www usb k com on pages...

Page 29: ...name model serial number and firmware version Moreover the information whether the installed software supports the USBK or not is shown in response of this command The command to list all USBKs in your host system is below usbk s The device name can be learn for specific USBK by matching device label product name model serial number and firmware version To show more detail information about specif...

Page 30: ...ed of 16 numeric digits between 0 and 255 each digit separated with a dot You can follow up shown examples below AES Key box NOTE For 256 bit AES key size encryption key in Text type must be 32 characters long with letters numbers and special characters such as punctuation marks etc Decimal is formed of 32 numeric digits between 0 and 255 each digit separated with a dot NOTE USBK can generate and ...

Page 31: ...ux and then the you use BackDisk securely Day to Day Using of USBK After you initialized your USBK you can securely use your BackDisk together with USBK at any time Activate Deactivate your USBK Activate your USBK Activate your USBK before you use your BackDisk and access the information on it For data transfer in ecryption decryption form between BackDisk and Host System the USBK should be activa...

Page 32: ...ion or software that use the open platform of computer can access the BackDisk and become a user when USBK is in Activate state CAUTION If you leave your USBK plugged on your computer in Activate state any user can access your data on your BackDisk while you are away from the computer Changing your password You can change your password in any time when the status of USBK is Deactivate To change yo...

Page 33: ...nabled for the security of data on your BackDisk To disable Auto Activation Below command is used to disable Auto Activation usbk u DEVICENAME p PASSWOD T Changing Device USBK Label You can optionally change USBK label to identify your device For example you can type your name or company name in Device Label to make it distinctive Additionally the Device Label as nickname helps you distinguish bet...

Page 34: ...d is used to change key name usbk u DEVICENAME p PASSWORD k KEYNO m KEYNAME To obtain more information about USBK Linux CLI software To get help about the parameters of USBK CLI software from command line you can use the help parameter in below form usbk h Moreover if you want to obtain more detail information about USBK CLI software the manual page of USBK CLI including more detail about paramete...

Page 35: ... Activate txt AutoActivation txt ChangePassword txt Deactivate txt KeySettings txt SetDeviceLabel txt Due to the characteristics of Text Menu it cannot enforce the user for a proper scenario That s why it is important to understand the modes states of USBK expressed on page 8 in this guide and follow it up via LEDs The following table indicates each file command and indicates the states modes of U...

Page 36: ...idered as expired Getting Started Personalizing a USBK You must personalize a new USBK the first time you use it as it is in Fabric Default Personalizing USBK involves two main steps setting your password and creating your encryption key s After this password setting random encryption key s is assigned on your USBK That s why it is strongly recommended to set your encryption key s To set your pass...

Page 37: ...curity object that resides in the cache is considered as expired NOTE Password should be minimum 4 characters long and not exceed 16 characters It may contain three different types of characters letters numbers and special characters such as punctuation marks etc NOTE After new password setting random encryption key s is generated by USBK and assigned on it That s why it is strongly recommended to...

Page 38: ...e successfully You can follow it up via LEDs The LEDs indicates as follows when setting is done successfully LED1 HostSystem Led LED2 BackDisk Led Blink OFF If any of your entry is wrong the LEDs indicate as follows LED1 HostSystem Led LED2 BackDisk Led Blink twice OFF CAUTION The operating system uses cache to serve faster for future requests Your security data such as password and encryption key...

Page 39: ... want to activate near KeyNo The KeyNo is 1 for A101 models and can be either 1 or 2 or 3 for A103 models 2 5 Save the file in order to execute these changes If all your entry is valid activating your USBK is done successfully You can follow it up via LEDs The LEDs indicates as follows when activating is done successfully and when your USBK is in Activate State LED1 HostSystem Led LED2 BackDisk Le...

Page 40: ...files in Text Menu 2 Open the Activate txt file 3 Erase all xxx letters till and type your password near Password 4 Erase letters till and type the key number that that you want to activate near KeyNo The KeyNo is 1 for A101 models and can be either 1 or 2 or 3 for A103 models 5 Save the file in order to execute these changes If all your entry is valid activating your USBK is done successfully You...

Page 41: ...ge displays insert a disk into drive H where H is sample for the drive letter associated with your BackDisk CAUTION Any person any application or software that use the open platform of computer can access the BackDisk and become a user when USBK is in Activate State CAUTION If you leave your USBK plugged on your computer in in Activate State any user can access your data on your BackDisk while you...

Page 42: ...ta entry In order to clean the cache erase your entry erase till in keeping the OldPassword and NewPassword titles and save it again So any security object that resides in the cache is considered as expired NOTE Password should be minimum 4 characters long and not exceed 16 characters It may contain three different types of characters letters numbers and special characters such as punctuation mark...

Page 43: ... cache is considered as expired CAUTION If you carry and lose your BackDisk plugged on your USBK in Auto Activation Enabled any user can access your data on your BackDisk when he plug in the computer as no password is asked to verify user Just carry only your USBK when Auto Activation Enabled for the security of data on your BackDisk NOTE Each file contains related example You can follow up shown ...

Page 44: ...word and NewPassword titles and save it again So any security object that resides in the cache is considered as expired Changing your encryption key s You can change your encryption key s in any time you want CAUTION You can not read current data on your Backdisk with your new encryption key Before changing your encryption key be sure to back up your files in your BackDisk used with your current e...

Page 45: ...TION After setting changing your encryption key s write down encryption key s in note for future reference but remember to keep it confidential There s no way to recover encryption key s as they are never exported or displayed during usage of USBK A lost of encryption keys results in lost of data on BackDisk Therefore it is very important that you remember the encryption key s or store it in a saf...

Page 46: ...User Guide Ver 1 1 Page 46 Using USBK with a USB Hub You can use your USBK over a hub plugged to your computer NOTE You can not plug any USB hub to backport of your USBK ...

Page 47: ...ou are using your BackDisk with your USBK it will be recognized as unformatted disk You should format your BackDisk when you are using it with your USBK the first time 2 If you have an A103 model be sure that you activate right key that you used before with your BackDisk The file that I saved to USBK disk is lost Why USBK is not a real disk and has no flash memory on It uses ordinary USB flash dri...

Page 48: ...ed our security expertise with product design that emphasizes usability simplicity and accessibility Our mission is to create innovative products by making them easy to use affordable and available to everyone Your feedback really matters to us and we carefully review all feature requests ideas suggestions and customer feedback for prioritization of our next features and products Contact Informati...

Page 49: ...uation marks etc Decimal is formed of 32 numeric digits between 0 and 255 each digit separated with a dot All models Type of Encryption Key Generation This is for how the user creates its encryption keys It can be in two different types User initiated or Random Key Generator For User initiated the user creates itself the encryption key s For Random Key Generator USBK generates the encryption key s...