Aegis Secure Key 3.

0
User’s Manual

Remember to save your PIN in a safe place.

If PIN is lost or forgotten, there will be no
way to access data on the key.

Data Security at Your Fingertips

 Table of Contents
About the Aegis Secure Key 3.0  4
PIN Requirements  4 Copyright © Apricorn, Inc 2017. All rights reserved.
Battery Note  4
Windows is a registered trademark of Microsoft Corporation.
First-Time Use  5 All other trademarks and copyrights referred to are the property of their
LED States and Their Meaning  5 respective owners.

Waking the Key  6 Distribution of modified versions of this document is prohibited without
Locking the Key  6 the explicit permission of the copyright holder.
Distribution of the work or derivative work in any standard (paper) book
Unlocking the Key  6 form for commercial purposes is prohibited unless prior permission is
Admin Mode  6 obtained from the copyright holder.
Adding a New User PIN  7
DOCUMENTATION IS PROVIDED AS IS AND ALL EXPRESS OR
Deleting the User PIN  7 IMPLIED CONDITIONS, REPRESENTATIONS AND WARRANTIES,
Changing the User PIN  7 INCLUDING ANY IMPLIED WARRANTY OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE OR NON-INFRINGEMENT,
Changing the Admin PIN  8 ARE DISCLAIMED, EXCEPT TO THE EXTENT THAT SUCH
Setting Read-Only or Read / Write Modes from Admin Mode  8 DISCLAIMERS ARE HELD TO BE LEGALLY INVALID
Setting Read-Only or Read / Write Modes from the User Mode  9
(Rev 1.7) 05/08/2017
Setting the Unattended Auto-Lock Feature  10
Setting a Self-Destruct PIN  11
Aegis Secure Key Brute-Force Protection  12
Performing a Complete Reset  13
Hibernating or Logging Off from the Operating System  15
Aegis Secure Key Setup for Mac OS  15
Diagnostic Mode  16
Lock-Override Mode 17
Troubleshooting  18
Technical Support  20
Warranty and RMA information  20
 First-Time Use
About the Aegis Secure Key 3.0 Each Aegis Secure Key is shipped without a preset Personal Identification Number (PIN)
installed on the key. A 7 to 16-digit Admin PIN must be established before the key can be
used. This Admin PIN can be used to set any and all of the Admin Mode Features of the key,
as well as to access the key’s data.
Important: To Set Up the Admin PIN:
With its flash key size, the Aegis Secure Key also 1. Wake up the key by pressing the UNLOCK button. Both the BLUE and GREEN LEDs will
has relatively small buttons. For greater ease and glow solidly.
better control of key commands, enter all PINs and
2. Press UNLOCK + 9 at the same time. The BLUE LED will glow solidly and the GREEN
command codes onto the Secure Key’s keypad
LED will be blinking.
3 PRIOR to plugging the device into the USB port for
use. Failure to do so may damage the USB port and 3. Enter the series of numbers that you will use for the Admin PIN (See PIN requirements on p.
cause the key to not function properly. 4) and press the UNLOCK button.*
4. Re-enter that same PIN and press the UNLOCK button again. The GREEN LED will
illuminate for one second followed by the BLUE LED glowing solidly by itself.
5. The key is now in Admin mode and other Admin features can be set (e.g., adding a User.)
6. To exit the Admin mode, press the LOCK button. The key will return to the locked standby
state. If no action is taken within 30 seconds, the key will return to its locked sleep state.
* GREEN LED will blink if the PIN is accepted; If the PIN is NOT accepted, the RED LED
will blink-- return to step 4 to resume the Admin PIN setup process.

LED States and Their Meaning

2 1
Slow Fading RED Battery charging (when plugged into USB port)
No LEDs Key locked and asleep
Blinking RED Error / incorrect key entry; Mode Not Available; User
PIN Change
Solid RED Locked / Standby state; Awaiting PIN entry
Blinking GREEN Key-entry accepted
Battery Note
Note: It’s normal for this device to Solid BLUE / Waiting for New User or Admin PIN to be
be warm to the touch during use. The Aegis Secure Key has an internal
Blinking GREEN established
rechargeable battery with a smart-charging
Solid BLUE Admin Mode
circuit. For safety, each key ships with a partial
Solid GREEN Key unlocked
charge. Before initial use, we recommend
plugging the key into a powered USB port for Slow Blinking BLUE Key unlocked in Lock-Override Mode
80 minutes to fully charge the battery. The Solid GREEN / Key unlocked in Read-Only Mode
battery will automatically charge whenever it is Slow Blinking RED

plugged into a powered USB port, regardless of Alternating Indicates a mode has been entered that can result
RED / BLUE in the deletion of a User or the data on the key
its operational mode. In standby mode, the RED (depending on the mode chosen.)
PIN Requirements LED fades in and out slowly to indicate that it’s Also used when setting Auto-lock feature
PINs must be a minimum of seven
digits and a maximum of 16 digits. charging and glows solid RED to indicate that One second of RED Self-test mode to ensure all components are ready
followed by one and working properly
Cannot contain all sequential it’s fully charged. If the battery is completely
second of GREEN
numbers (e.g., 01234567, 9876543) discharged, the key will go through a self-test followed by one
and cannot contain all of the same second of BLUE
(indicated by a RED, GREEN, and BLUE LED
number (e.g., 1111111, 2222222.)
Note: Sequentially, 0 occurs before 1, not after 9. sequence) when plugged into a USB port. Three Seconds of During Reset Process, indicates successful
Solid RED / GREEN resetting of cryptographic security parameters

4 5
 Adding a User PIN
Waking the Key The Aegis Secure Key can have one Admin and one User, making a total of two working PINs.
When the key is not in use, it will enter a sleep state. While in this state, the key is locked and Adding a User is a perfect way to securely share the key or deploy it for use where the User does
cannot be accessed. not require access to the Admin features. While the User has limited functionality and no Admin
rights to the key, they can still access the key’s data, change their PIN, and set the key to Read
To wake the key so it can accept keypad inputs, press the UNLOCK button once. The RED
Only or Read / Write mode. Note: adding a User PIN can only be done within the Admin mode.
LED will glow solidly (standby state.)
If no additional User beyond the Admin will be added to access the key’s data, disregard this
Note: If the key has never been used, the BLUE and GREEN LEDs will glow solidly indicating page’s contents as it relates only to the “User” PIN.
that the Admin PIN must first be established before the key can be used.
1. Enter the Admin Mode by holding UNLOCK + 0 for five seconds; With RED LED blinking,
enter the Admin PIN and press the UNLOCK button. The BLUE LED will glow solidly.

Unlocking the Key 2. Press and hold UNLOCK + 1 until the BLUE LED glows solidly and the GREEN LED
starts blinking.
3. Enter the User PIN and press UNLOCK. The GREEN LED will blink three times, then
1. Press the UNLOCK button to wake the key from sleep (as described above.)
the BLUE LED will glow solidly and the GREEN LED will continue blinking.
The RED LED will glow solidly.
4. Re-enter the same User PIN and press UNLOCK. To verify that the User PIN was suc-
2. Enter either a User PIN or Admin PIN and press the UNLOCK button. If the PIN is
cessfully added, the GREEN LED will glow solidly for three seconds and then will be
accepted, the GREEN LED will rapidly blink three times, then will slow down to one blink
replaced by the BLUE LED glowing solidly, indicating that the key has returned to the
per second until it’s plugged into a USB port, at which time will glow solidly.
Admin mode.
(If the PIN is incorrect, the RED LED will blink.)
3. A blinking GREEN LED indicates that the key is unlocked and ready for use. The key is
now ready to plug into a USB port and will function as an external drive. If it’s not plugged
Deleting the User PIN
into a USB port within 30 seconds, the key will lock itself and return to its sleep state. You can delete the User PIN by doing the following:
1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds. With the RED LED blinking,
Locking the Key enter the Admin PIN and press the UNLOCK button.) The BLUE LED will now glow solidly.
2. Press and hold the 7 + 8 buttons for five seconds. The GREEN LED will blink three times and
Press the LOCK button. When successfully locked, The RED LED will glow solidly, indicating then will be followed by the RED and BLUE LEDs blinking alternately.
that it’s in its standby state.
The Aegis Secure Key will not be recognized by the operating system while in its standby state. 3. Press and hold the 7 + 8 buttons again for five seconds. The GREEN LED will glow
solidly for two seconds.
Note: If data is still being written to the key, the Secure Key will wait until that operation is
completed and then it will lock automatically. 4. The key will return to Admin mode indicated by the BLUE LED glowing solidly.
* NOTE: Deleting the User PIN will also delete the Self-Destruct PIN (if it has been set..)
Admin Mode
Changing the User PIN
To set up any of the key’s Admin functions, the Admin mode must first be entered. Once in the
Admin mode, each of the key’s functions can be addressed with the appropriate button com- The User PIN can be changed within the User mode (key unlocked, GREEN LED blinking)
mands. While in the Admin mode, the data on the key will not be accessible. *Note: The Admin PIN cannot be changed while in the User mode. The Admin PIN can only
Prior to your first use of the Aegis Secure Key, you must first set an Admin PIN. Immediately be changed from within the Admin mode.
after setting up your Admin PIN, you may then continue setting up other functions. If you do You can change the User PIN by doing the following:
nothing for a period of 30 seconds, the key will revert to its standby state.
To re-enter the Admin mode, perform the following steps below. 1. Unlock the Aegis Secure Key with the User PIN. (the GREEN LED will blink)
2. Press and hold UNLOCK + 1 for five seconds (the RED LED will blink)
1. Press and hold UNLOCK + 0 for five seconds until the RED LED blinks.
(This indicates that you can enter the Admin PIN.) 3. Enter the current User PIN and press the UNLOCK button. (the BLUE LED will glow
solidly and the GREEN LED will blink.)
2. Enter the Admin PIN and press the UNLOCK button.
4. Enter the new User PIN and press the UNLOCK button (the GREEN LED will blink
3. Admin Mode is indicated by a solid BLUE LED. three times, followed by the BLUE LED glowing solidly and the GREEN LED blinking.)
4. To exit the Admin Mode, either allow 30 seconds of inactivity or press the LOCK button. 5. Re-enter the new User PIN and press the UNLOCK button (the GREEN LED will glow
solidly for two seconds, then will return to the User mode, indicated by the GREEN
LED blinking.)
6 7
Changing the Admin PIN Setting Read-Only or Read / Write
Changes to the Admin PIN can only be made while the key is in the Admin mode. From the User Mode
1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds – with the RED LED blinking,
enter the Admin PIN and press the UNLOCK button.) The BLUE LED will glow solidly. NOTE: When changing Read-Only or Read / Write settings, do not make these
changes with the key attached to an operating system. This may cause confusion
2. Press UNLOCK + 9. The BLUE LED will glow solidly and the GREEN LED will blink. within the operating system about the proper status of the key and the key may not
3. Enter the new Admin PIN and press the UNLOCK button. The GREEN LED will blink function properly until the operating system has been restarted.
three times.
This mode will allow the User to set the Read / Write status of the key, without having
4. Re-enter the new Admin PIN and press the UNLOCK button. The GREEN LED will glow access to the Admin functions.
solidly for two seconds and then return to the Admin mode, indicated by the BLUE LED
glowing solidly. When the key is unlocked in Read-Only mode and inserted into a USB port, the RED
LED will blink once every three seconds while the GREEN LED will glow solidly.

Setting Read-Only or Read / Write If the key is set to be Read-Only in the Admin mode, the User cannot override that
setting. Only the Admin can return the key to Read / Write Mode.
modes from Admin Mode To Set the Key to Read-Only:
With a large number of viruses and Trojans that attach themselves to USB keys, this feature 1. Press the UNLOCK button to wake the key. The RED LED will glow solidly.
is especially useful if you need to access data on the key when used in a public setting.
Additionally, Read-Only is an important feature for forensic applications, where data must be 2. Press the r + o (7 + 6) buttons together for three seconds.
preserved in its original, unaltered state and can’t be overwritten or modified. The GREEN LED will blink three times.
The Admin can set the key to a Read-Only mode for both the Admin and the User. When set 3. Enter the User / Admin PIN and press UNLOCK. The GREEN LED will blink.
by the Admin, the Admin is the only one that can change the key back to Read / Write mode.
4. The Key will be in a Read-Only state the next time it is unlocked.
When the key is unlocked in Read-Only mode and inserted into a USB port, the GREEN
LED will glow solidly and the RED LED will blink once every three seconds. To Return the Key to Read / Write:
To set the Key to Read-Only: 1. Press the UNLOCK button to wake the key. The RED LED will glow solidly.
1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds – with RED LED blinking, 2. Press and hold r + w (7+ 9) for three seconds.
enter the Admin PIN and press the UNLOCK button.) The BLUE LED will glow solidly. The GREEN LED will blink three times.
2. Press and hold the r + o (7 + 6) buttons together for three seconds. 3. Enter the User / Admin PIN and press UNLOCK.
The GREEN LED will blink three times. The GREEN LED will glow solidly.
3. The key will return to Admin mode. The BLUE LED will glow solidly. 4. Key will return to unlocked mode and can now be written to, indicated by the blinking
4. Until changed, the key can only be read. GREEN LED.

To return the Key to Read / Write:

1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds – with the RED LED blinking,
enter the Admin PIN and press the UNLOCK button.) The BLUE LED will glow solidly. Important Note
2. Press and hold the r + w (7+ 9) buttons together; the GREEN LED will blink three times.
Setting the key to Read/ Write from the User mode will not override a
3. The key will return to Admin mode, indicated by the BLUE LED glowing solidly and the key
Read-Only setting that was placed by the Admin.
will be restored to its normal Read / Write condition.
To set the key to be in Read-Only mode for both the User and the Admin, set
the Read-Only Mode using the Admin function.
Important Note
Setting the key to Read/Write from the Admin mode will globally override a Read-
Only mode that has been set by the User.

8 9
Setting the Unattended Auto-Lock Feature Setting a Self-Destruct PIN
To protect against unauthorized access if the key is unlocked and unattended, the Aegis For certain users, it’s important to have a “last-resort” level of security where sensitive data
Secure Key can be set to automatically lock after a predetermined period of inactivity. In falling into the wrong hands would be catastrophic. The Secure Key’s Self-Destruct PIN
its default state, the Aegis Secure Key’s Unattended Auto-Lock feature is turned off. defends against physically compromising situations by erasing the key’s contents, leaving
The Unattended Auto-Lock can be set to activate after 5, 10 or 20 minutes of inactivity. it to look as if it never had any data written to it.
*USE WITH CAUTION* When this mode is activated and the key is unlocked with the Self-
To set the Unattended Auto-Lock, perform the following steps: Destruct PIN, it will effectively perform a crypto-erase on the key, deleting all of its data.
1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds – with RED LED blinking, Additionally, the encryption key will be deleted and a new encryption key will be created to
enter the Admin PIN and press the UNLOCK button.) take its place. When this Self-Destruct PIN is deployed, the key will unlock and the GREEN
The BLUE LED will glow solidly. LED will glow solidly as if the key is being normally unlocked. The key, however, will need
to be partitioned and formatted before it can be used again. The previous Admin and User
2. Once in the Admin mode, press UNLOCK + 6.
codes will be deleted in the crypto-erase and the Self-Destruct PIN will then become the
The RED and BLUE LEDs will blink alternately.
new Admin PIN to unlock the key.
3. Press one of the numbers below that corresponds to the amount of inactivity you
would like the key to lock itself: Note: The Self-Destruct PIN must be different from the Admin PIN and User PIN.
0 = OFF (The Default is OFF for this feature.)
1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds – with RED LED blinking,
1 = 5 minutes enter the Admin PIN and press the UNLOCK button.)
The BLUE LED will glow solidly.
2 = 10 minutes
2. Press UNLOCK + 3. The RED and BLUE LEDs will blink alternately.
3 = 20 minutes
3. Enter the new Self-Destruct PIN and press UNLOCK. The GREEN LED will blink
4. After you have entered the desired amount of allowable inactivity, the GREEN LED three times and then will return to RED and BLUE LEDs blinking alternately.
will blink three times indicating command acceptance, and then will return to the
Admin mode, indicated by the BLUE LED glowing solidly. 4. Re-enter the Self-Destruct PIN and press UNLOCK. GREEN LED will glow solidly
for three seconds and then will return to Admin mode, indicated by the BLUE LED
glowing solidly.

10 11
Aegis Secure Key Brute-Force Protection Performing a Complete Reset
What is Brute-Force Attack? NOTE: A complete reset will erase encryption keys and PINs and leave the Secure Key in an
unformatted condition.
A Brute-Force Attack is a means of breaching a cryptographic data defense scheme by
systematically running an astronomical number of decryption possibilities. With AES 256 There may be circumstances (forgotten PIN, redeployment, return to factory default settings)
having never been cracked, the data stored on a Secure Key is going to be more than when you need to completely reset the key. The complete reset feature will perform a
well-protected against brute-force. But brute-force attacks aren’t necessarily aimed at the crypto-erase on the key, generate a new encryption key, delete all users, and return all of the
bulk of the data itself, but rather, at the drive’s access PINs. After all, PINs are usually settings to factory default.
the weakest links of any data protection plan, and as such, PINs are essentially all that a
brute-force attack needs to decrypt. To perform a complete reset of the key, perform the following:

1. Press and hold UNLOCK + LOCK + 2 together for ten seconds.

The RED and BLUE LEDs will blink alternately.
Brute-Force Feature 2. The GREEN LED will glow solidly for three seconds, followed by the GREEN and BLUE
LEDs glowing solidly when complete.
1. After three unsuccessful attempts, the Aegis Secure Key will add additional time
3. A new Admin PIN will need to be entered and the key will need to be reformatted.
delays to each subsequent try thereafter. The RED LED will blink the number of failed
attempts after three, all the way up to the tenth (and final) try.
2. After up to ten unsuccessful attempts, the keypad will lock up, no functions will work,
and the RED LED will blink at a rate of three flashes per second.
3. From this point, the key will only allow up to ten additional attempts before the key
assumes that it is under brute-force attack and automatically deletes all of its data.
4. To gain these ten extra attempts, press and hold the 5 button and then press the
UNLOCK button until the RED and GREEN LEDs blink alternately.
5. Enter the code “LastTry” (5278879) and press the UNLOCK button.
--You will now have ten additional attempts.
6. When the key is successfully unlocked, the Brute-Force counter will return to zero.
The number of attempts possible, both before and after the LastTry (5278879) code is
entered, can be set (in Admin Mode) between two and ten attempts.
Setting the before/after attempts to the minimum of two would allow for a total of four
attempts (two before entering the last try code and two after.)
To reduce the number of Brute-Force attempts:
1. Enter the Admin mode. (Hold UNLOCK + 0 for five seconds – with the RED LED
blinking, enter the Admin PIN and press the UNLOCK button.) The BLUE LED will
glow solidly.
3. Press and hold the UNLOCK + 5 button for three seconds.
The RED LED will double-blink.
4. Press the number of before/after attempts desired on the numeric keypad ( 2 - 9 .)
The GREEN LED will blink the same number of times to correspond to the number
you have entered (for example: the 8 button will result in eight blinks, and yield eight
attempts before the LastTry code and another eight attempts after, yielding a total
of 16.) To return the key to its default setting, press the 1 then 0 keys to change the
number back to ten attempts.

Note: The number of before and after attempts are the same, i.e., 4 before / 4 after,
8 before / 8 after, etc.

12 13
Initializing and Formatting the Hibernating, Suspending, or
Aegis Secure Key After a Complete Reset Logging Off from the Operating System
A complete reset of the Aegis Secure Key will erase all information and partition Be sure to save and close all the files on your Aegis Secure Key before hibernating,
settings. You will need to initialize and format the Aegis Secure Key again after reset. suspending, or logging off from the Windows operating system.
To initialize your Aegis Secure Key, perform the following steps:
1. After a complete reset, press UNLOCK + 9. It is recommended that you lock the Aegis Secure Key manually before hibernating,
The BLUE LED will glow solidly and the GREEN LED will be blinking. suspending, or logging off from your system.
2. Enter the new Admin PIN and press the UNLOCK button. If accepted, the
GREEN LED will quickly blink three times, then return to the BLUE LED glowing
To log off the Aegis Secure Key, double-click Safely Remove Hardware on the
solidly and the GREEN LED blinking.
Windows desktop and remove the Aegis Secure Key from your computer.
3. Re-enter the Admin PIN and press the UNLOCK button. If accepted, the
GREEN LED will be solid for two seconds.
Attention: To ensure the data integrity of your Aegis Secure Key, be sure to lock or
4. The BLUE LED will glow solidly for 30 seconds (or until the LOCK button is
log off your Aegis Secure Key if you are:
pressed, which will return the key to its standby state.)
• Away from your computer
5. The Admin PIN is now set and will allow access to the key or the Admin features.
• Using the switching user function by sharing a computer with others
6. To UNLOCK the key, enter the new Admin PIN and press UNLOCK.
7. Windows 7 and earlier: Right-click My Computer, and then click Manage from
the Windows desktop.
Windows 8: Right-click left corner of desktop and select Disk Management.
8. In the Computer Manage window, click Disk Management. In the Disk Aegis Secure Key Setup for Mac OS ®

Management window, the Aegis Secure Key is recognized as an unknown

device that is uninitialized and unallocated.
9. Perform the following to make the key recognizeable as a basic key. Your Aegis Secure Key is pre formatted in NTFS for Windows. To reformat the key to
• If the Initialize and Convert Disk Wizard window opens, click Cancel and a Mac compatible format please perform the following:
initialize the disk manually using the following steps:
a. Right-click Unknown Disk and then select Initialize Disk. Once the key is unlocked, open Disk Utility from Applications/Utilities/Disk Utilities.

b. In the Initialize Disk window, click OK. To format the Aegis Secure Key:
10. Right-click in the blank area under the Unallocated section, and then select New
Partition. The Welcome to the New Partition Wizard window opens. 1. Select the Aegis Secure Key from the list of keys and volumes. Each key in
the list will display its capacity, manufacturer, and product name, such as 232.9
11. Click Next. Apricorn Secure Key.

12. Select Primary Partition and then click Next. 2. Click the Erase tab.
13. If you need only one partition, accept the default partition size by clicking Next.
3. Enter a name for the key. The default name is Untitled. The key’s name will
14. Click Next. eventually appear on the desktop.

15. Create a volume label, select Perform a quick format, and then click Next. 4. Select a volume format to use. The Volume Format dropdown menu lists the
available key formats that the Mac supports. The recommended format type is
16. Click Finish. Mac OS Extended (Journaled.)
17. Wait until the format process is complete. The Aegis Secure Key will be
5. Click the Erase button. Disk Utility will unmount the volume from the desktop,
recognized and available for use.
erase it, and then remount it on the desktop.

14 15
Diagnostic Mode Lock-Override Mode

The keypad has a manual diagnostic mode built-in to verify proper keypad Certain users may encounter a case where they need the key to remain
function and troubleshooting key issues. This mode will not allow access to unlocked during a reboot, passing the key through a virtual machine or other
any data or admin function. It can only be used to identify the firmware level similar situation which, under normal circumstances, would cause the key to
and to test button recognition. lock. To help facilitate this use case, “Lock-Override Mode” will allow the key
To enter the diagnostic function: to remain unlocked through USB port re-enumeration and will not lock again
until USB power is interrupted.
1. Press UNLOCK, then press UNLOCK + 1, then press and hold 0 for five
seconds. The RED and BLUE LEDs will blink alternately. NOTE: When in this mode, the key is vulnerable to being moved from one
2. The BLUE LED will blink a number of times to represent the number of computer and connected to another computer provided USB power is
both the major and minor revisions. The decimal point will be represented uninterrupted. Due to this vulnerability, we strongly recommend this mode be
by a single RED LED blink. Upon completion, the BLUE LED will glow used ONLY in circumstances where the key can be physically secured (as in
solidly. (Example: VERSION 4.1 would be indicated by four BLUE LED a locked Server Room) or in a place where it can be visually monitored while
blinks, one RED LED blink, one BLUE LED blink, and one RED LED blink, in this mode. Use of a powered hub or a Y-cable increases this security risk.
then revert to the BLUE LED glowing solidly.) Always return the key to the default Lock-Override Mode OFF when
returning to normal service.
3. To check the keypad’s button functionality, press each button and
the number of the button pressed will be expressed by the RED LED To set the “Lock-Override” to On:
blinking. (Example: 1 Button= 1 blink, 2 Button = 2 blinks, 3 Button = 3
1. Enter the Admin Mode (Press and hold UNLOCK + 0 for five seconds
blinks...0 Button = 10 blinks, Unlock Button = 11 blinks, Lock Button
until the RED LED blinks, then enter the Admin code and press the
= 12 blinks.)
UNLOCK button. The BLUE LED will glow solidly.)
4. To exit the Diagnostic Mode, wait for the 20 second timeout to return
the key to its normal operation. 2. Press and hold 7 + 1 for three seconds. the GREEN LED will blink three
times, then the BLUE LED will glow solidly.
Self-Diagnostics:
During the initial power up, after the key has been plugged into a USB 3. When the key is unlocked and attached to a USB port in “Lock-Override
port, the key will perform self-diagnostics on the encryption algorithm and Mode”, the BLUE LED will blink once every three seconds to alert you
critical hardware components. If the RED LED blinks at a rate of one blink that “Lock-Override” mode is active.
per second for 15 seconds, returns to standby and will not unlock, unplug
the key from USB port and try again. If the RED LED continues to blink in Note: If “Unattended Auto-Lock” mode has been turned on, “Lock-Override”
the manner mentioned above and won’t unlock upon USB re-insertion, a will not override it; the key will lock itself upon reaching the selected amount
critical component has failed and the key can no longer function. of inactivity. If you need the key to stay unlocked, Enter the Unattended
Auto-Lock Feature and set the lock timer to “0” (0 = OFF) See Page 10.
If the key blinks a triple-RED LED pattern that is repeated every two
seconds when unlocked, a failure has occurred that will not immediately To turn Lock-Override Mode off and return to normal operation:
stop the device from working nor affect the security of the device, but
should be considered as a warning that the device needs to be replaced in 4. Enter the Admin Mode (Press and hold UNLOCK + 0 for five seconds
the near future. Additionally, Admin features may be limited in this mode. until the RED LED blinks. Then enter the Admin code and press the
UNLOCK button. The BLUE LED will glow solidly.)
If either condition should appear, remove the key from the USB port and
allow the key to go to sleep, and try to unlock the key again. The event of 5. Press and hold 7 + 0 for three seconds. The GREEN LED will blink three
either diagnostic failure will be very rare, but if the key cannot recover, it times then the BLUE LED will glow solidly.
must be replaced.
6. To verify, unlock the key in User mode and check that the BLUE LED is
no longer blinking.
16 17
Troubleshooting
A: If an Admin PIN has been previously set, the Admin PIN can be used to unlock
the key and recover the data. If you forget the PIN and do not have an Admin PIN,
This section contains troubleshooting information for the Aegis Secure Key. If you the key can be reset so it can be used again, but the data cannot be recovered.
encounter any of the following problems when using the Aegis Secure Key, refer to
the corresponding answers. Q: Why does the LED indicate an error when I try to change the PIN?

Q: What can I do if I forget the User PIN? A: PIN requirements for this key must meet a minimum security level. There
are several combinations that are not allowed, such as repeating numbers or
A: Use your Admin PIN to enter the Admin Mode and create another User PIN. sequential numbers. The PIN must be a minimum of seven digits, and not longer
than 16 digits.
Q: What can I do if I forget the Admin PIN?
Q: What are the ECCN and HST codes used for shipping this device outside
A: There is no other way to retrieve the Admin PIN except a complete reset of the of the United States?
Aegis Secure Key. After a complete reset, all data will be lost and you will need to
initialize, allocate and format the Aegis Secure Key manually. A: ECCN: 5A992A and HTS code 8473.50.3000

Q: Why did the operating system not recognize the Aegis Secure Key, after I did
a complete re-set of the drive?

A: You need to initialize, allocate and format the Aegis Secure Key manually. For
more information, refer to Initializing and Formatting the Aegis Secure Key After a
Complete Reset in this manual.

Q: How do I use the Aegis Secure Key without a PIN?

A: As a full disk encryption product, the Aegis Secure Key can never be used without
a PIN.

Q: What encryption algorithm is used in this product?

A: The Aegis Secure Key uses AES 256-bit algorithm.

Q: Why could I not initialize, partition, or format the Aegis Secure Key?

A: Ensure that you have administrator privileges. You will need Admin privileges to
use the Disk Management Utility.

Q: The LED is blinking RED and I can’t enter a code. Why?

A: Somebody has tried to access the key and the code has been entered 10 times
incorrectly (see Brute Force section of this manual.)

Q: The key seems warm to the touch, is this normal?

A: Yes. The SSD in the case runs hotter than a standard flash key. The cooling
features use the case to dissipate the heat.

Q: Is there any way to recover my data if I forget the PIN?

18 19
Technical Support
Apricorn provides the following helpful resources for you:
1. Apricorn’s Website (http://www.apricorn.com)
This gives you the ability to check for up-to-date information
2. E-mail us at [email protected]
3. Or call the Technical Support Department at 1-800-458-5448
Apricorn’s Technical Support Specialists are available from
8:00 a.m. to 5:00 p.m., Pacific Time, Monday through Friday

Warranty and RMA information

Three Year Limited Warranty:
Apricorn offers a 3-year limited warranty on the Aegis Secure Key against defects in
materials and workmanship under normal use. The warranty period is effective from the
date of purchase either directly from Apricorn or an authorized reseller.

Disclaimer and terms of the warranties:

THE WARRANTY BECOMES EFFECTIVE ON THE DATE OF PURCHASE AND MUST BE VERIFIED
WITH YOUR SALES RECEIPT OR INVOICE DISPLAYING THE DATE OF PRODUCT PURCHASE.

APRICORN WILL, AT NO ADDITIONAL CHARGE, REPAIR OR REPLACE DEFECTIVE PARTS

WITH NEW PARTS OR SERVICEABLE USED PARTS THAT ARE EQUIVALENT TO NEW IN
PERFORMANCE. ALL EXCHANGED PARTS AND PRODUCTS REPLACED UNDER THIS
WARRANTY WILL BECOME THE PROPERTY OF APRICORN.

THIS WARRANTY DOES NOT EXTEND TO ANY PRODUCT NOT PURCHASED DIRECTLY
FROM APRICORN OR AN AUTHORIZED RESELLER OR TO ANY PRODUCT THAT HAS BEEN
DAMAGED OR RENDERED DEFECTIVE: 1. AS A RESULT OF ACCIDENT, MISUSE, NEGLECT,
ABUSE OR FAILURE AND/OR INABILITY TO FOLLOW THE WRITTEN INSTRUCTIONS PROVIDED
IN THIS INSTRUCTION GUIDE: 2. BY THE USE OF PARTS NOT MANUFACTURED OR SOLD
BY APRICORN; 3. BY MODIFICATION OF THE PRODUCT; OR 4. AS A RESULT OF SERVICE,
ALTERNATION OR REPAIR BY ANYONE OTHER THAN APRICORN AND SHALL BE VOID. THIS
WARRANTY DOES NOT COVER NORMAL WEAR AND TEAR.

NO OTHER WARRANTY, EITHER EXPRESS OR IMPLIED, INCLUDING ANY WARRANTY OR

MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE, HAS BEEN OR WILL BE
MADE BY OR ON BEHALF OF APRICORN OR BY OPERATION OF LAW WITH RESPECT TO THE
PRODUCT OR ITS INSTALLATION, USE, OPERATION, REPLACEMENT OR REPAIR.

APRICORN SHALL NOT BE LIABLE BY VIRTUE OF THIS WARRANTY, OR OTHERWISE, FOR

ANY INCIDENTAL, SPECIAL OR CONSEQUENTIAL DAMAGE INCLUDING ANY LOSS OF
DATA RESULTING FROM THE USE OR OPERATION OF THE PRODUCT, WHETHER OR NOT
APRICORN WAS APPRISED OF THE POSSIBILITY OF SUCH DAMAGES.

© Apricorn, Inc. 2017. All rights reserved.

12191 Kirkham Road
Poway, CA, U.S.A. 92064
20 1-858-513-2000 www.apricorn.com