1. Unlock your device, and click the "Settings" button on the menu bar of the IronKey Control
Panel.
2. Click the "Tools" button in the left sidebar and then, under Device Health, click the "Restore
Onboard Apps" button.
Importing digital certificates
The Cryptochip includes a limited amount of extremely secure hardware storage space, which
you can use to store the private key associated with a digital certificate. This provides you
with additional strong authentication capabilities. For example, you could store a self-signed
certificate used for internal systems that will allow you to automatically log in when using the
onboard Firefox web browser.
The import process uses IronKey's PKCS#11 interface and requires Mozilla Firefox. Note that
there is space for five additional private keys in the Cryptochip; these keys will receive the
security benefits of the Cryptochip's tamperproof hardware and self-destruct mechanisms.
1. Start onboard Firefox.
2. Click the "Firefox" menu, and then click "Options".
3. In the "Options" window, click the "Advanced" icon, and then click the "Encryption" tab.
4. Click the "View Certificates" button to open the Firefox Certificate Manager.
5. IronKey's certificate is available here. To add your own, click the "Import" button.
6. Browse to the PKCS#12-format certificate file and open it.
You will be prompted for the location of the PKCS#12-format certificate file (the file
extension is .p12 in UNIX/Linux, .pfx in Windows).
7. A window appears asking you to confirm where to store the certificate. Choose "IronKey
PKCS#11".
8. Enter the password that was used to protect the certificate. If no password was used, simply
leave the text field blank.
9. Your certificate is now stored securely in the IronKey Cryptochip and is available for use in
the onboard Mozilla Firefox.
NOTE:
When deleting certificates, you must restart Firefox for the action to take effect. You
cannot delete the IronKey certificate that was pre-packaged with your device.
Using Identity Manager
If IronKey Identity Manager is enabled on your device, you can use it to securely store and use
important identity credentials, such as login information and one-time passwords to applications
and online accounts. With the click of a button, it automatically launches a specified application,
fills in your username and password, and then logs you in. It can even generate strong passwords
for you, so that you can lock down your important accounts.
IRONKEY ENTERPRISE S250/D250 USER GUIDE
PAGE 25