diskAshur M2 Our smallest, lightest, fastest and most rugged FIPS compliant encrypted portable SSD

Introducing the diskAshur M2

The diskAshur M2 PIN authenticated, hardware encrypted SSD has a new, ultra-portable, rugged and sleek design, incorporating the most advanced security attributes. 

The diskAshur M2 encrypts data using FIPS PUB 197 validated, AES-XTS 256-bit hardware encryption and uniquely incorporates a Common Criteria EAL4+ ready secure microprocessor,which employs built-in physical protection mechanisms designed to defend against external tamper, bypass physical attacks and more. 

The drive features ultra-fast backwards compatible USB 3.2 data transfer speeds and is available in capacities ranging from 120GB to 2TB. The diskAshur M2 is lightweight, dust and waterproof (IP68 certified), shock proof (survives a drop of 4m on to a concrete surface) and crush-proof (withstands the weight of a 2.7 ton vehicle), making it extremely rugged and ultra-portable. 

diskAshur M2 features are listed below: 

Easy to use

Simply enter a 7-15 digit PIN to authenticate and use as a normal portable SSD. When the drive is disconnected, all data is encrypted using AES-XTS 256-bit hardware encryption (no software required). 

FIPS 140-3 Level 3 compliant, tamper proof & evident design

All data stored on the diskAshur M2 is encrypted using FIPS PUB 197 validated, AES-XTS 256-bit hardware encryption. All components incorporated within the diskAshur M2 are completely covered by a layer ofsuper tough epoxy resin, which is virtuallyimpossible to remove without causingpermanent damage to thecomponents. The drive is also designed to be tamper evident making it obvious to the User if it has been pried open and tampered with. 

Wear resistant keypad

The onboard keypad is covered with a layer of polymer coating that protects the keys and hides key usage to avoid tipping off a potential hacker to commonly used keys. 

Rugged, Shockproof& Crushproof

The diskAshur M2 is extremely rugged, surviving a drop of up to 4m onto a concrete surface. The drive is also crushproof, withstands the weight of a 2.7 ton vehicle. 

No need to worry about spills

The drive’s IP68 accreditation means it will survive being submerged under 1.5m of water for 30 minutes and deemed fit enough to withstand dust, dirt and sand.  

Slim & sleek design

Lightweight and smaller than the size of a phone, making it ultra-portable.

Weighs: 86 grams (measurements with sleeve fitted), Weighs 65 grams. (measurements without sleeve). 

Independent User and Admin PINs

Which makes it perfect for corporate and government deployment. If the User forgets their PIN, the drive can be unlocked using the Admin PIN.The Administrator can then allow the User to set a new UserPIN. 

User PIN enrolment

The Admin can set a restriction policy for the User PIN. This includes setting the minimum length of the PIN, as well as requiring the input of one or more ‘Special Characters’. The ‘Special Character’ functions as ‘SHIFT + digit’. 

Transfer your files in seconds 

Lightning fast backwards compatible USB 3.2 data transfer speeds. 

Up to 370MB/s Read speeds

Up to 370MB/s Write speeds 

One-time User recovery PIN

Admin configurable, extremely useful in situations where a User has forgotten their PIN, allowing the User to unlock the device and set a new User PIN. 

Uniquely incorporates a Common Criteria EAL4+ ready secure microprocessor

Which enhances security through true randomnumber generation and built-in cryptography.The data encryption key is protected by FIPSand Common Criteria validated wrappingalgorithms. 

Offers ultimate security against hackers, detecting and responding to tampering with features such as: 

• Dedicated hardware for protection against SPA/DPA/SEMA, DEMA attacks
• Advanced protection against physical attacks, including Active Shield, Enhance Protection Object, CStack checker, Slope Detector and Parity Errors
• Environmental Protection Systems protecting against voltage monitor, frequency monitor, temperature monitor and light protection
• Secure Memory Management/Access Protection 

Read only (write protect)- Dual Mode

Both the Admin and User can configure the diskAshur M2 as a read only (write protect) drive. If configured by the Admin, the drive cannot be modified or disabled by the User, allowing the Admin to pre-provision a drive with pre-loaded content as read-only for the User. 

OS & Host independent - works across any host and embedded systems

No software required; the drive will work on any device with a USBport.

USB Type C and Type A connectivity (included) 

Compatible with: MS Windows, macOS, Linux, Android, Chrome, Thin Clients, Zero Clients, Embedded Systems, Citrix and VMware 

Bootable feature

Install an OS on the diskAshur M2 and boot directly from it. 

Brute force hack defence mechanism 

Intelligently programmed to protect against all forms of brute force attacks. 

If the User PIN is entered incorrectly 10 consecutive times, the User PIN will be deleted and the drive can only be accessed by entering the Admin PIN or One-time User recovery PIN. (Admin can change this from the default 10 incorrect PIN entries, to 1-9, for the User only)

If the Admin PIN is entered incorrectly 10 consecutive times, all data, PINs and the encrypted encryption key will be lost forever. 

What’s included:

-          Portable SSD with Protective Sleeve

-          Protective carry case

-          Type A + C cables

-          Quick Start Guide 

Auto-lock

Automatically locks when unplugged from the host computer or when power to the USB port is turned off. It can also be set to automatically lock after a predetermined amount of time. 

Self-destruct

Pre-program the diskAshur M2 with a self-destruct PIN, once entered, the data, encrypted encryption key and all PINs are deleted and rendered as lost forever. 

Drive reset

Deletes the encrypted encryption key, all PINs and renders all data as lost forever. The drive can then be redeployed which randomly generates a new encrypted encryption key, a process that can be repeated as many times as required. 

Whitelisting on networks

Configured with a unique VID/PID and internal/external serial number with barcode, allowing easy integration into standard end-point management software (white-listing), to meet internal corporate requirements.

• iStorage_diskAshur_M2_datasheet_2020
• diskAshur_M2_manual_v1.4
• diskAshur_M2_QSG_v1.1