The world's first and only FIPS 140-2 Level 2/3, NCSC CPA, NLNCSA BSPA and NATO Restricted certified hardware encrypted desktop drive

Learn how to encrypt your files using the diskAshur DT²

Introducing the diskAshur DT2

The diskAshur DT² USB 3.2 HDD is a PIN-authenticated, FIPS certified, AES-XTS 256-bit hardware encrypted desktop drive that securely encrypts, stores and protects data to military standards.

The diskAshur DT² has been certified to the highest government accreditations (FIPS 140-2 Level 3, NCSC CPA, NLNCSA BSPA & NATO Restricted), helping you safeguard valuable and sensitive data to ensure compliance with stringent data protection and confidentiality regulations and directives, such as GDPR, HIPAA, SOX, CCPA and more.

Available capacities (HDD)


diskAshur DT2 features include:

CC5_icon v4@4x

Easy to use

Simply enter a 7-15 digit PIN to authenticate and use as a normal external drive.

When the drive is disconnected, all data is encrypted using AES-XTS 256-bit hardware encryption (no software required).

FIPS 140-2 Level 2/3 certified, tamper proof & evident design

All data stored on the diskAshur DT² is encrypted using FIPS PUB 197 validated, AES-XTS 256-bit hardware encryption. All components incorporated within the diskAshur DT² are completely covered by a layer of super tough epoxy resin, which is virtually impossible to remove without causing permanent damage to the components. The drive is also designed to be tamper evident making it obvious to the User if it has been pried open and tampered with.

Wear resistant keypad

The onboard keypad is covered with a layer of polymer coating that protects the keys and hides key usage to avoid tipping off a potential hacker to commonly used keys.

Government certified to the highest standards

iStorage is the world’s first and only vendor to attain the following government certifications on the diskAshur PRO2 and diskAshur DT2 range of PIN authenticated, hardware encrypted, HDDs and SSDs: FIPS 140-2 Level 2/3, NCSC CPA, NLNCSA BSPA and NATO Restricted level.

Please click here to see the full list of iStorage government certified products.

Incorporates a Common Criteria EAL5+ (Hardware Certified) secure microprocessor

Which enhances security through true random number generation and built-in cryptography. The data encryption key is protected by FIPS and Common Criteria validated wrapping algorithms.

Offers ultimate security against hackers, detecting and responding to tampering with features such as:

⋅ Dedicated hardware for protection against SPA/DPA/SEMA, DEMA attacks

· Advanced protection against physical attacks, including Active Shield, Enhance Protection Object, CStack checker, Slope Detector and Parity Errors

· Environmental Protection Systems protecting against voltage monitor, frequency monitor, temperature monitor and light protection

· Secure Memory Management/Access Protection

Independent User & Admin PINs

Which makes it perfect for corporate and government deployment. If the User forgets their PIN, the drive can be unlocked using the Admin PIN. The Administrator can then allow the User to set a new User PIN.

Read only (write protect) - Dual Mode

Both the Admin and User can configure the diskAshur DT² as a read only (write protect) drive. If configured by the Admin, the drive cannot be modified or disabled by the User, allowing the Admin to pre-provision a drive with pre-loaded content as read-only for the User.

Transfer your files in seconds

Lightning fast backwards compatible USB 3.2 data transfer speeds.

OS & Host independent - works across any host and embedded systems

No software required; the drive will work on any device with a USB port.

Compatible with: MS Windows, macOS, Linux, Android, Chrome, Thin Clients, Zero Clients, Embedded Systems, Citrix and VMware

Brute force hack defence mechanism

Intelligently programmed to protect against all forms of brute force attacks.

First 5 incorrect PIN entries

The drive will freeze, requiring the drive to be disconnected and reconnected to the USB port to get a further five PIN entry attempts.

Next 5 incorrect PIN entries

If the following five (10 in total) consecutive PIN attempts are entered incorrectly again, the diskAshur DT2 will freeze again. To get a further and final five PIN attempts (15 in total), the “shift” button must be pressed whilst inserting the USB cable to the USB port and then an iStorage preset PIN will need to be entered.

Last 5 incorrect PIN entries

On the fifteenth consecutive incorrect PIN entry, the diskAshur DT2 assumes it is being attacked and will delete the encryption key and lock itself, rendering all data previously stored on the drive as lost forever. At this point the drive can be reset to factory default settings and redeployed.

What's included:

→ Desktop Drive

→ Universal mains adapter

→ USB 3.0 cable

→ Quick Start Guide

Additional features:


Automatically locks when unplugged from the host computer or when power to the USB port is turned off. It can also be set to automatically lock after a predetermined amount of time.


Pre-program the diskAshur DT² with a self-destruct PIN, once entered, the data, encrypted encryption key and all PINs are deleted and rendered as lost forever.

Drive Reset

Deletes the encrypted encryption key, all PINs and renders all data as lost forever. The drive can then be redeployed which randomly generates a new encrypted encryption key, a process that can be repeated as many times as required.

Whitelisting on networks

Configured with a unique VID/PID and internal/external serial number with barcode, allowing easy integration into standard end-point management software (white-listing), to meet internal corporate requirements.

diskAshur DT2 provides an array of benefits, helping you to:

Protect data against cyber-attacks, data leakage and human error
Comply with data security and confidentiality laws, such as GDPR, CCPA, HIPAA and others
Avoid hefty fines as a result of non-compliance, as well as additional expenses involved in a breach
Keep a secure offline back-up of your data that you can access and quickly restore in the event of a ransomware attack
Gain customer trust
Promote a positive brand reputation
Encourage data protection best practices across the organisation
Maintain business continuity


Choose the right capacity for your needs.

Get help

Any questions? Call a specialist or chat online.

+44 (0) 20 8991 6260

Chat now >

Technical specifications


Super-Speed USB 3.1 - compatible with USB 1 / 2 / 3

Capacities HDD

1 TB 2 TB 3 TB 4 TB 6 TB 8 TB 10 TB 12 TB 14 TB 16 TB 18 TB 20 TB 22 TB

Speed HDD:


The world's first and only NCSC CPA, FIPS 140-2 Level 2/3, NLNCSA BSPA and NATO restricted level certified encrypted Desktop Hard Drive.





Operating system compatibility

MS Windows, macOS, Linux, Chrome, Android, Thin Clients, Zero Clients, Embedded Systems, Citrix and VMware

Hardware data encryption

AES-XTS 256-bit full disk hardware encryption


FCC, CE, WEEE, C-tick, RoHS, REACH, TAA Compliant

Power Supply

12V AC adapter

Box Content

Drive, universal mains adapter, USB cable and quick start guide

Ordering information

iStorage Part Number: IS-DT2-256-XXXX*-X-X**. XXXX* – Capacity X-X** – Certification Level. C-G – FIPS 140-2 Level 2, NCSC CPA, NLNCSA BSPA & NATO Restricted certified. C-X – FIPS 140-2 Level 3 certified.

XXXX = capacity

*Some of the listed capacity on the diskAshur range is used for formatting and other functions and thus is not available for data storage. As such, the actual available capacity for data storage is less than what is listed on the products.


  • Incorporates a Common Criteria EAL5+ certified (Hardware) secure microprocessor
  • The world’s first and only NCSC CPA, FIPS 140-2 Level 2/3, NLNCSA BSPA and NATO restricted level certified encrypted portable Desktop Hard Drive.
  • FIPS PUB 197 validated encryption algorithm
  • Encryption keys are always encrypted whilst at rest
  • Brute force hack defence mechanism
  • Tamper proof
  • Immune to BadUSB – diskAshur DT2 hard drives are not vulnerable to malicious attacks on USB technology
  • PIN authenticated (7-15 digits – alphanumeric keypad)
  • Wear resistant epoxy coated keypad
  • No speed degradation – as fast as any non-encrypted HDD
  • Desk lock slot
  • Read only (write protect) & read/write modes
  • All components are covered with a layer of super tough epoxy resin
  • Unattended auto lock feature – programmable lock after a predetermined amount of time (5-99 minutes)
  • Supports independent user and admin PINs
  • Drive reset – deletes all data/PINs/encryption key and resets the drive to factory default
  • Auto lock on removal
  • 3 year manufacturer’s warranty


Fill out the form and request a free evaluation.


Choose the right capacity for your needs.

Get help

Any questions? Call a specialist or chat online.

+44 (0) 20 8991 6260

Chat now >


Please choose one of the following options