Kanguru Defender Secure USB Flash Drive User Manual For Defender Models: • Defender 2000 • Defender 3000 • Defender Elite30 • Defender Elite200 • Defender Elite300 Copyright 2015, All Rights Reserved
Notices and Information Notices and Information Please be aware of the following points before using your Kanguru Defender flash drive Copyright © 2015 Kanguru Solutions. All rights reserved. Windows XP®, Windows Vista®, Windows 7® and Windows 8® are registered trademarks of Microsoft Inc. All other brands or product names are trademarks of their respective companies or organizations.
Table of Contents Table of Contents 1. Introduction................................................................................................................. 5 1.1 Package Contents.................................................................................................... 5 1.2 System Requirements............................................................................................. 5 1.3 Features........................................................................................
Table of Contents 2.5 Online Documentation............................................................................................ 36 2.6 About KDM............................................................................................................ 36 2.7 Unmounting Your Defender................................................................................... 37 3. Updating Your Defender Flash Drive........................................................................ 38 3.
Introduction 1. Introduction The Kanguru Defender flash drive is a hardware encrypted, tamper proof USB flash drive. The Defender flash drive contains two partitions: a CD-ROM partition and a secure, encrypted partition. The CD-ROM partition contains the login application that will allow you to access the secured partition. The secure partition is where your actual data will be stored.
Introduction 1.4 Remote Management Capability The Kanguru Defender flash drive can be remotely managed using the Kanguru Remote Management Console (KRMC). KRMC is a web-based application that gives administrators a complete USB management system.
Introduction 1.7 The Write Protect Switch Kanguru Defender Elite30, Elite200 and Elite300 flash drives have a physical write protect switch located on the edge of the drive, near the USB connector: • Unlocked - Push the write protect switch towards the USB connector side of the device to set it in the unlocked position. When the write protect switch is set in the unlock position, the device will function normally.
Running Kanguru Defender Manager 2. Kanguru Defender Manager Kanguru Defender Manager (KDM) is the client program preloaded on the Defender’s CD-ROM partition. The user needs to login to KDM in order to access the secure, encrypted partition. KDM comes pre-installed on your Defender flash drive. No installation to your PC is necessary.
Running Kanguru Defender Manager Attention Windows Users Windows 7 users may not see the removable disk partition until you have logged into KDM. This is normal. If you are running Windows 7 or 8 and for any reason need to see the removable disk before you log into KDM, you will need to configure Windows in the following manner: Note: This is user preference only. There is no need to configure Windows in order to use your Defender flash drive. 1. Open the Folder and search options.
Running Kanguru Defender Manager 2.1.2 Running KDM on Mac OS X To run KDM from Mac OS X, connect your Defender flash drive to your computer through a USB port. A CD icon named ‘KDM’ will appear on the desktop. Double click on the KDM icon to open it. In the window that opens, double-click on the KDM.app file to launch the KDM application. • If it is your first time running KDM you will need to complete the setup wizard in order to set your security password (see section 2.2 The Setup Wizard on page 13).
Running Kanguru Defender Manager 2.1.3 Running KDM on Ubuntu Linux The following Defender flash drive models are supported on Linux Ubuntu: • Defender 2000 • Defender 3000 • Defender Elite200 • Defender Elite300 To run KDM from an Ubuntu Linux operating system, connect your Defender to your computer through a USB port. A ‘KDM’ icon will appear on the desktop. Double click on the KDM icon to open it. In the window that opens, double-click on the KDM file to launch the KDM application.
Running Kanguru Defender Manager 2.1.4 Running KDM on Red Hat Enterprise Linux 5 Only the following Defender flash drive models are supported on Red Hat Enterprise Linux 5: • Defender 2000 • Defender Elite200 Note: You must have Super User or Root privileges in order to run KDM on Red Hat Enterprise Linux 5. To run KDM from the Red Hat Enterprise Linux 5 operating system, connect your Defender flash drive to your computer through a USB port. A CD icon named ‘KDM’ will appear on the desktop.
The Setup Wizard 2.2 The Setup Wizard When you start KDM for the first time you will be greeted by the Setup Wizard. Follow the Setup Wizard instructions to create a security password for your Defender’s secure, encrypted partition. Caution! Once the Setup Wizard has started, you should not disconnect your Defender flash drive without either first completing the Setup Wizard or closing the Setup Wizard by clicking on the X button. 2.2.
The Setup Wizard 2.2.2 Resetting the Device through the Setup Wizard If you experience any problems during the Setup Wizard, you may have to perform a device reset before you can complete the setup process. To perform a device reset while in the Setup Wizard: 1. From anywhere in the Setup Wizard, click on the Prev button until you return to the Welcome Screen. 2. On the Welcome Screen you will see a ‘Reset’ button in the lower-left side of the application window. Click on the Reset button. 3.
The Setup Wizard 2.2.3 Activating On-board Antivirus Protection (Windows only) This section does not apply if you are running the Setup Wizard in Linux or Mac OS X. This section does not apply to Enterprise Edition users. Antivirus for Enterprise Edition is activated through Kanguru Remote Management Console (KRMC). Enterprise Edition users, please contact your administrator.
The Setup Wizard 2.2.4 KRMC Cloud Note: This section does not apply to KRMC Enterprise Edition users. Kanguru Defender flash drives can be remotely managed using the Kanguru Remote Management Console (KRMC). KRMC Cloud is hosted on Kanguru’s server and can be enabled on any non-Enterprise Defender flash drive. To Enable KRMC Cloud functionality: 1. Select the Enable KRMC Cloud option and then click on the Apply button. 2. A dialog box will appear instructing you to enter your KRMC Cloud Account ID.
The Setup Wizard 2.2.5 Contact Info If you chose to manage your drive using KRMC Cloud, then the information entered in the Contact Info window will automatically be imported to the KRMC Cloud server when you register your drive. If you did not enable KRMC Cloud then you can skip this step. Note: This section does not apply to KRMC Enterprise Edition users. Fill in your information in the appropriate fields and then click on the Apply button.
The Setup Wizard 2.2.6 Setting a Password From the Set Password screen: 1. Enter your password in the ‘Password’ field. You can enter your password using KDM’s Virtual Keyboard by clicking the VK button. For more information on using the Virtual Keyboard see section 2.3.4 Using the Virtual Keyboard to Enter Your Password on page 23. Note: For security reasons, it is recommended that you incorporate letters, numbers and symbols to achieve maximum security. 2.
The Setup Wizard 2.2.7 Enabling Self Service Password Reset Enabling Self Service Password Reset (SSPR) functionality will allow you to reset your Defender’s password without first needing to wipe the data stored in the secure partition. The SSPR feature is a subscription service and requires a license key. If you do not have a license key, either contact Kanguru to purchase one, or select the Disable Service option and then click on the Apply button. If you decide to enable the SSPR service: 1.
The Setup Wizard 2.3 The Login Screen Anytime you run KDM, you will be asked to login using your security password. You need to provide the correct security password in order to access the Defender’s secure partition. When the login screen appears: 1. Enter your password in the ‘Password’ field. 2. Click on the Login button. Caution! By default, if you enter your password incorrectly six times in a row any data stored on the secure partition will automatically be erased for security purposes.
The Setup Wizard 2.3.1 Enabling and Disabling Autorun Functionality If your Defender flash drive is being managed by KRMC, you may see an ‘Autorun’ checkbox. This means that your administrator has configured your drive to auto-execute a file saved on your drive’s secure partition every time you successfully login. You can disable the Autorun functionality by unchecking this box. 2.3.
The Setup Wizard 2.3.3 Resetting You Device from the Login Screen In the event you have forgotten your password and do not have the Self Service Password Reset functionality enabled, you can use the Reset to Factory Default function to reset your password. This function will restore the device to the factory settings, erasing all saved passwords and data residing on the device’s secure partition. Note: The Reset function may be disabled if your device is managed by KRMC or KLA.
The Setup Wizard 2.3.4 Using the Virtual Keyboard to Enter Your Password The virtual keyboard feature can be accessed anytime you are required to enter your password in order to prevent key logging applications from recording your key strokes and potentially stealing your password. To use the virtual keyboard to enter your password: 1. Click on the VK button which is located near the password entry field. 2. The virtual keyboard will appear below the Setup Wizard window.
The KDM Taskbar Menu 2.4 The KDM Taskbar Menu The KDM Taskbar menu provides a simple user interface that allows you to use and configure your Defender device. When you login to KDM, the KDM icon menu, simply click on the KDM icon. appears in the taskbar area. To access the KDM Taskbar Note: Linux users must right-click on the KDM icon in the task bar.
The KDM Taskbar Menu 2.4.1 Encrypting Files and Folders A key feature of the Defender flash drive is drag & drop encryption; allowing you to simply drag files that you want encrypt directly onto the drive. The Defender flash drive automatically encrypts these files as they are transferred to the secure partition, ensuring that your data stays safe and private. To open the secure partition: 1. Start KDM. 2. Login to KDM to gain access to the secure partition. 3. Click on the KDM icon the popup menu.
The KDM Taskbar Menu 2.4.2 Enabling On-board Antivirus (Windows only) Defender flash drives support on-board, antivirus functionality. The onboard anti-virus feature is a subscription based service and requires a license key. If you do not have a license key you can either contact Kanguru to purchase an antivirus license, or you can fill out the antivirus activation form during the Setup Wizard to obtain a 30-day free trial license (see section 2.2.
The Antivirus Console 2.4.3.1 Device Scan The antivirus menu allows you to scan your Defender for known viruses and malware. To scan your Defender: 1. Click on the Scan Device tab at the top of the antivirus menu. 2. Click on the Start Scan button to begin scanning your Defender device. 3. Once the scan has started: ○○ Click on the Pause Scan button to pause the scan process. Click on the Resume Scan button to resume the scan. ○○ Click on the Stop Scan button to cancel the scan process. 4.
The Antivirus Console 2.4.3.2 Path Scan The antivirus menu allows you to scan any path on your computer for known viruses and malware. Note: The Scan Path feature can be disabled on Enterprise Edition drives. Please contact your administrator for more information. To scan a path on your computer: 1. Click on the Scan Path tab at the top of the antivirus menu. 2. Click on the Start Scan button and then select a path on your computer to begin scanning. 3.
The Antivirus Console 2.4.3.3 File Scan The antivirus menu allows you to scan any file on your computer for known viruses and malware. Note: The Scan File feature can be disabled on Enterprise Edition drives. Please contact your administrator for more information. To scan a file: 1. Click on the Scan File tab at the top of the antivirus menu. 2. Click on the Start Scan button and then select a file to begin scanning. 3.
The Antivirus Console 2.4.3.4 Antivirus License The antivirus menu allows you to view your antivirus license information and also renew your subscription. You can view the number of days remaining on your current antivirus license • Click on the Licenses button to see your current antivirus license number. • Click on the Renew License Online button to purchase a one-year antivirus license subscription from Kanguru’s online store.
The KDM Taskbar Menu 2.4.4 Changing Your Password You can change your security password through the Security Settings. To change your password: 1. Click on the KDM icon the popup menu. located in the task bar and then click on ‘Security Settings…’ from Note: Linux users must right-click on the KDM icon in the task bar. 2. The ‘Password Settings’ window opens. Enter your current password in the ‘Old Password’ field.
The KDM Taskbar Menu 2.4.4.1 Self Service Password Reset Self Service Password Reset (SSPR) functionality will allow you to reset your Defender’s password without needing to wipe the data stored in the secure partition. The SSPR feature is a subscription based service and requires a license key. If you do not have a license key, please contact Kanguru to purchase one. If you decide to enable the SSPR service: 1. Select the Enable Service option and then click on the Apply button.
The KDM Taskbar Menu 2.4.5 KRMC Cloud Settings You can enable or disable KRMC Cloud functionality through the Security Settings. Note: This section does not apply to Enterprise Edition users or if you have already enabled KRMC Cloud. To change your device’s KRMC functionality: 1. Click on the KDM icon from the popup menu. located in the task bar and then select the Security Settings… option Note: Linux users must right-click on the KDM icon in the task bar. 2. The ‘Password Settings’ window opens.
The KDM Taskbar Menu 2.4.6 Changing Languages KDM supports several languages. The KDM language is set to English by default. To change the language: 1. Click on the KDM icon located in the task bar and then hover your cursor over the ‘Language’ option in the popup menu. A list of available languages appears. Note: Linux users must right-click on the KDM icon in the task bar. 2. Click on the desired language that you want KDM to be displayed in.
The KDM Taskbar Menu 2.4.7 Connection Settings and Configuring a Proxy Server If your computer uses a proxy server to access the internet and KDM is unable to determine your proxy server’s address then you will need to enter the proxy server address, proxy type and credentials. To configure your proxy serer settings: 1. Click on the KDM icon located in the task bar and then select the Connection Settings option from the popup menu. Note: Linux users must right-click on the KDM icon in the task bar. 2.
The KDM Taskbar Menu 2.5 Online Documentation You can download digital copies of the Kanguru Defender flash drive’s documentation from the internet. To download your Defender flash drive’s documentation, click on the KDM icon task bar: located in the Note: Linux users must right-click on the KDM icon in the task bar. • Click on ‘Quick Start Guide’ to download a digital copy of the Defender flash drive’s Quick Start Guide.
The KDM Taskbar Menu 2.7 Unmounting Your Defender When you unmount your Defender flash drive, the KDM application will close and the secure partition containing your encrypted data will be inaccessible until you log into KDM again. To unmount your Defender flash drive, right-click on the KDM icon then select ‘Unmount Kanguru Defender’. located in the task bar and Note: Linux users must right-click on the KDM icon in the task bar.
Updating Your Defender Flash Drive 3. Updating Your Defender Flash Drive Updates for your Defender flash drive’s client application may be released from time to time. To view the version of the KDM client application currently running on your drive, see section 2.6 About KDM on page 36. Please check whether your Defender flash drive is being managed by Kanguru Remote Management Console (KRMC), as the update process is different for enterprise edition and standard edition drives. 3.
Updating Your Defender Flash Drive 3.2 Updating KRMC enterprise edition drives Enterprise edition Defender flash drives are managed by the Kanguru Remote Management Console (KRMC). Updaters for enterprise edition Defender flash drives are available for download from the Kanguru Support site. The KRMC system administrator is granted access to the enterprise edition downloads when their KRMC order is processed.
Safely Removing Defender Flash Drive 4. Safely Removing Your Defender Flash Drive Before unplugging the Defender flash drive from the USB port, you should always make sure that you have unmounted the secured partition (see section 2.7 Unmounting Your Defender on page 37). After the Defender has been unmounted, you should use you operating system’s method for safely removing a USB device. 4.
Safely Removing Defender Flash Drive 4.2 Safely Removing from Mac OS X Caution! Be sure that the secure partition has been unmounted before attempting to remove the Defender drive. See section 2.7 Unmounting Your Defender on page 37. To remove the Defender drive, click and drag the KDM icon from the desktop into the trash can icon. When you start dragging the KDM icon, the trash can icon will turn into an eject icon.
Technical Specifications 5. Technical Specifications 5.1 Defender 2000 General Specifications Model Interface Encryption Features Security Certifications OS Compatibility Memory Type Write Cycles Data Retention Operating Temp Humidity Range Shock Resistance Vibration TAA Compliant KDM2000 USB 2.0 (USB 1.1 compatible) Hardware based 256-bit AES encryption FIPS 140-2 Certified Level 3 Common Criteria EAL 2+ Certified Windows Server 2003, Server 2008, Vista, 7, 8, 8.1 Max OS X 10.
Technical Specifications 5.2 Defender 3000 General Specifications Model Interface Encryption Features Security Certifications OS Compatibility Data Transfer Rate Memory Type Write Cycles Data Retention Operating Temp Humidity Range Shock Resistance Vibration Weight Dimensions TAA Compliant KDM3000 USB 3.0 (USB 2.0 compatible) Hardware based 256-bit AES encryption FIPS 140-2 Certified, Level 3 Common Criteria Evaluated Windows Server 2003, Server 2008, Vista, 7, 8, 8.1 Max OS X 10.
Technical Specifications 5.3 Defender Elite30 General Specifications Model KDFE30 series Interface USB 3.0 (USB 2.0 compatible) Encryption Features Hardware based 256-bit AES encryption (XTS mode) Security Certifications Memory Type N/A Windows Server 2003, Server 2008, Vista, 7, 8, 8.1 Max OS X 10.
Technical Specifications 5.4 Defender Elite200 General Specifications Model Interface Encryption Features Security Certification OS Compatibility Memory Type Write Cycles Data Retention Operating Temp Humidity Range Shock Resistance Vibration TAA Compliant KDFE30 USB 2.0 (USB 1.1 compatible) Hardware based 256-bit AES encryption FIPS 140-2 Certified, Level 2 Common Criteria EAL 2+ Certified Windows XP SP3*, Server 2003, Vista, 7, 8 Max OS X 10.
Technical Specifications 5.5 Defender Elite300 General Specifications Model KDFE300 series Interface USB 3.0 (USB 2.0 compatible) Encryption Features Hardware based 256-bit AES encryption (XTS mode) FIPS 140-2 Certified Level 2 Common Criteria Evaluated Windows Server 2003, Server 2008, Vista, 7, 8, 8.1 Max OS X 10.5 and above (Intel based only) Linux Kernel 2.6.
Warranty Information / Technical Support 6. Warranty Information All Defender flash drive products carry a 3-year warranty from the date of purchase. Kanguru Solutions is not responsible for any damages incurred in the shipping process. Any claims for loss or damage must be made to the carrier directly. Claims for shipping errors should be reported to Kanguru Solutions within three (3) working days or receipt of merchandise. 7.
Common Criteria Certified Versions Appendix A - Common Criteria Certified Versions The Common Criteria for Information Technology Security Evaluation, referred to more commonly as Common Criteria, is an international standard for computer security. Common Criteria provides an international set of guidelines for evaluating data security products, ensuring that they meet strict, security standards for government deployments.
Proxy Support Appendix B - Proxy Support If your computer uses a proxy server to access the internet, the correct proxy information will need to be configured in KDM. If the KDM client application cannot connect to the internet you will see the following error message: If the computer that the Defender flash drive is connected to uses a proxy server to access the internet, click on the Yes button. KDM will try to read the proxy server information from the computer’s configuration.
Kanguru Solutions 1360 Main Street Millis, MA 02054 www.kanguru.com 07.20.15 v1.0 © 2015 Kanguru Solutions Legal terms and conditions available at www.kanguru.com. Please review and agree before use. Thank you.
