All portable computing devices (PCDs) used for University Business must be encrypted per the Portable Computing Device Security Policy. New purchases of USB/Flash/Thumb drives and external hard drives must be hardware-based FIPS 140-2 Level 2 Validated AND 256-bit Advanced Encryption Standard (AES). Military-Grade FIPS PUB 197 Validated does NOT meet the minimum requirement.
The following USB drives have been approved by IT Security to be used for University Business.
Encrypted USB/Flash/Thumb Drives
Aegis Secure Key 2.0
https://www.apricorn.com/aegis-secure-key-2
Aegis Secure Key 3.0
https://www.apricorn.com/aegis-secure-key-3
Aegis Secure Key 3z
https://www.apricorn.com/aegis-secure-key-3z
IronKey D300 (Standard Model Only)
https://www.kingston.com/us/usb/encrypted_security/IKD300
IronKey S1000 (Basic Model Only)
https://www.kingston.com/us/usb/encrypted_security/IKS1000
Encrypted External Hard Drives
Aegis offers several varieties of 256-bit AES external hard drives. (All are NOT FIPS 140-2 Level 2 Validated).
Models listed below meet both requirements.
Aegis Fortress 3.0
Part # A25-3PL256-xxxxF (xxx= drive size in GBs)
https://www.apricorn.com/fortress
Aegis Padlock DT FIPS 3.0
Part # ADT-3PL256F-xxxx (xxx= drive size in GBs)
https://www.apricorn.com/aegis-padlock-dt-fips
Previously purchased USB drives must meet the following requirements:
· Hardware-based FIPS 140-2 Level 2 Validated AND 256-bit Advanced Encryption Standard (AES)
OR
· Drives should be compatible with Dell Data Protection (DDP) or McAfee File and Folder encryption software
· Drives must be 3TB or less
· Drives must encrypt 100 percent of all stored data
· Drives must not allow removal of encryption software
· Drive password rules should comply with Password Complexity requirements per the Password Management Policy
Please contact your local computer support group or the IT Technology Sales office for information on how to purchase encrypted USB drives.