Pen USB Apricorn 64GB USB Type-A 3.2 Gen 1 Aegis Secure Key 3NXC

The Apricorn Aegis Secure Key 3NXC 64GB is a hardware-encrypted USB flash drive with a USB Type-A connector and USB 3.2 Gen 1 transfer speeds. The drive integrates an onboard numeric keypad for PIN-based authentication and performs 100% hardware-based 256-bit AES XTS encryption on the fly. The device is software-free and OS agnostic, functioning on Windows, macOS, Linux, Android, Chrome and embedded systems that provide a powered USB port and standard storage file system. The AegisWare firmware provides locked-down, tamper-resistant operation and the internal components are epoxy-protected to resist physical tampering. The drive’s compact, cap-style aluminium housing and polymer-coated keypad are designed for portable, secure data transport while meeting NIST FIPS 140 cryptography standards (NIST cert #3943).

Advantages

The Aegis Secure Key 3NXC secures data using dedicated hardware encryption with no reliance on host software, which prevents software-based attacks and keylogging. PIN entry on the device keypad keeps authentication off the host keyboard and reduces exposure to credential capture. Admin and User modes allow independent configuration of global and individual access settings, including programmable PIN length, read-only states and forced user enrollment. Additional protection features include programmable brute-force defense with crypto-erase, optional self-destruct PIN, LED feedback for button presses, and a rugged dust- and water-resistant aluminium casing.

Suitable for

• Transporting sensitive documents and backups requiring hardware encryption
• Use in multi-user environments with separate Admin and User access controls
• Field work and travel where physical durability and tamper resistance are needed
• Environments that require cross-platform compatibility (Windows, Mac, Linux, Android, Chrome)

Key specifications

• Capacity: 64 GB
• Interface: USB Type-A
• USB speed: USB 3.2 Gen 1 (USB 3.0) transfer rates
• Encryption: Hardware-based 256-bit AES XTS
• Authentication: Onboard numeric keypad for PIN entry; Admin and User PIN modes
• Firmware: Patent-protected AegisWare with locked-down firmware
• Physical protection: Epoxy-encapsulated internal components; extruded aluminium housing; cap form factor
• Weight: 0.022 kg
• Colour: Black
• Standards: NIST FIPS 140 certified

How to use

Set up the device by entering Admin mode on the onboard keypad to create an Admin PIN and configure global settings such as minimum/maximum PIN length, brute-force attempt limits, read-only modes and device reporting (fixed disk or removable media). After Admin configuration, the device can be left in normal mode or deployed with User Forced Enrollment so each user establishes their own PIN. To access stored data, connect the drive to a powered USB Type-A port and enter the User or Admin PIN on the device keypad; until unlocked it remains invisible to the host. Follow LED indications for successful button presses and lock/unlock status. To reset and redeploy the drive, perform a device reset which destroys stored data, creates a new encryption key and clears existing PINs.

Recommendations

Choose a PIN length and complexity consistent with your risk profile and administrative policy; longer PINs significantly reduce brute-force success probabilities. Configure the permitted number of incorrect PIN attempts and consider programming recovery PINs or using Admin-controlled User Forced Enrollment to maintain access continuity. Use the Aegis Configurator to mass-configure multiple devices where available, and store the drive in its cap-protected state when not in use to protect the connector. For devices used in secure or regulated environments, enable FIPS-compliant settings and verify Admin policies before deployment.