RESTORING ONBOARD APPLICATIONS
You can restore your onboard applications if they are ever erased or corrupted (Windows
only).
1. Unlock your device, and click the ―Settings‖ button on the menu bar of the IronKey Control
Panel.
2. Click the ―Tools‖ button in the left sidebar and then, under Device Health, click the ―Restore
Onboard Apps‖ button.
Importing digital certificates
The Cryptochip includes a limited amount of extremely secure hardware storage space, which
you can use to store the private key associated with a digital certificate. This provides you
with additional strong authentication capabilities. For example, you could store a self-signed
certificate used for internal systems that will allow you to automatically log in when using the
onboard Firefox web browser.
The import process uses IronKey's PKCS#11 interface and requires Mozilla Firefox. Note that
there is space for five additional private keys in the Cryptochip; these keys will receive the
security benefits of the Cryptochip's tamperproof hardware and self-destruct mechanisms.
1. Start onboard Firefox.
2. Click the ―Firefox‖ menu, and then click ―Options‖.
3. In the ―Options‖ window, click the ―Advanced‖ icon, and then click the ―Encryption‖ tab.
4. Click the ―View Certificates‖ button to open the Firefox Certificate Manager.
5. IronKey's certificate is available here. To add your own, click the ―Import‖ button.
6. Browse to the PKCS#12-format certificate file and open it.
You will be prompted for the location of the PKCS#12-format certificate file (the file
extension is .p12 in UNIX/Linux, .pfx in Windows).
7. A window appears asking you to confirm where to store the certificate. Choose ―IronKey
PKCS#11‖.
8. Enter the password that was used to protect the certificate. If no password was used, simply
leave the text field blank.
9. Your certificate is now stored securely in the IronKey Cryptochip and is available for use in
the onboard Mozilla Firefox.
NOTE:
When deleting certificates, you must restart Firefox for the action to take effect.You
cannot delete the IronKey certificate that was pre-packaged with your device.
IRONKEY ENTERPRISE S250/D250 USER GUIDE
GE 23