The DataLocker Sentry EMS is a FIPS 140-2 Level 3 certified, TAA-compliant encrypted USB 3.0 flash drive that functions as a hardware-encrypted cryptographic module. The device integrates identity-based authentication, separated ports with a trusted path, and tamper-evident physical security that zeroizes all plaintext cryptographic security parameters if the enclosure is compromised. It is natively compatible with Windows, macOS, and Linux operating systems and is compatible with computing systems meeting Common Criteria EAL3 or higher. The hardware enforces a self-destruct limit of ten incorrect password attempts, executing either a factory reset or permanent self-destruct sequence on unmanaged drives, while managed configurations reserve the final attempt for password reset token-based administrative recovery. The device is offered in storage capacities from 4 GB to 64 GB, with maximum read speeds of 250 MB/s and maximum write speeds of 85 MB/s.
The Sentry EMS is centrally administered through the IronKey Enterprise Management System (EMS) Cloud or On-Premises platforms, with an Enterprise Admin Console accessible without requiring a physical IronKey device. Administrative capabilities encompass device lifecycle control including pre-registration, activation, external serial number association, and policy enforcement; password reset controls; mandatory initial password changes; customizable unlock screen messages; configurable password reset policies enabling account recovery through admin-provided recovery tokens or user-initiated email tokens; online account requirements; restricted recovery code visibility; two-factor web-based authentication; lockout protocols for invalid access attempts; and email event notifications. The management console supports creating server and issuer certificates, handling lost or corrupted System Admin device scenarios, and maintaining device firmware and security policies through the EMS interface and DataLocker's Unified Updater tool. The device can operate in managed or unmanaged modes.
