Upload
others
View
2
Download
0
Embed Size (px)
Citation preview
ThinC-VAULT (Secure USB with Biometric authentication)
ThinC Manager User Manual
A product by
Ensurity Technologies
https://thinc.ensurity.com
Ensurity Technologies Pvt Ltd., | All Rights Reserved 2 / 75
ThinC–VAULT
Table of Contents ThinC-VAULT: Introduction ............................................................................................................................. 3
Hardware Specifications .............................................................................................................................. 4
LED Indications ............................................................................................................................................ 5
ThinC Management Tool ................................................................................................................................. 6
Installation Microsoft® Windows® .............................................................................................................. 6
Uninstallation Microsoft® Windows® ......................................................................................................... 9
ThinC Manager Functionality for Admin User ............................................................................................... 12
Basic Functionalities .................................................................................................................................. 16
Create / Delete Users ............................................................................................................................ 16
Register / De-Register Users fingerprints .............................................................................................. 19
Create / Delete Groups ......................................................................................................................... 24
Add / Remove Group Members ............................................................................................................ 26
Set / Edit / Manage Partitions without Password ................................................................................. 28
Manage Device Settings ........................................................................................................................ 32
Others .................................................................................................................................................... 35
Advanced Functionalities .......................................................................................................................... 38
Set / Edit / Manage Partitions with Password ...................................................................................... 39
Set / Edit / Manage Access Rights ......................................................................................................... 44
Set / Edit / Manage Passwords.............................................................................................................. 47
Reassign Partition .................................................................................................................................. 50
Binding ................................................................................................................................................... 52
Operating ThinC Device in Microsoft® Windows® ........................................................................................ 71
Ensurity Technologies Pvt Ltd., | All Rights Reserved 3 / 75
ThinC–VAULT
ThinC-VAULT: Introduction
ThinC-VAULT is a USB (Universal Serial Bus) based external data storage device (Pen Drive / Flash Drive) with built-in fingerprint biometric security and military grade encryption. ThinC-VAULT protects the data with the hardware-based 256-bit AES encryption, the keys for encryption gets generated and stored in devices Secure Element. By using a secure element in ThinC-VAULT provides an additional layer of security and increases the level of protection for encrypted data stored on the device. ThinC enhances and establishes an authentic access control to the device using fingerprint-based biometric security. This touch-based sensor is exceptionally responsive; ThinC-VAULT uses hardware to match enrolled fingerprint and unlocking device. The ordered ThinC-VAULT is with 128GB storage capacity. Ensurity provides two complementary tools for ThinC range of devices viz ThinC Manager and ThinC Agent. ThinC Manager is a standalone management tool to administer ThinC devices and used for managing the device/s, partitions, fingerprint enrolment, binding etc. ThinC Agent is a standalone user tool to interact / operate device's advanced security functions like unlock password protected partitions & unlock binding for using device. The device has a robust metallic casing and designed for long-term persistent performance even after multiple time USB use cycles (Plug-in-Plug out).
Ensurity Technologies Pvt Ltd., | All Rights Reserved 4 / 75
ThinC–VAULT
Hardware Specifications
The following table provides brief specification of ThinC-Vault device.
Sn Feature Specification / Description
1 Connectivity • High-speed USB 2.0
2 Capacity • 128 GB
3 Fingerprint Biometrics
• Capacitive touch-based fingerprint sensor
• Upto 15 Fingerprint registrations
• Upto 5 Users and each user can enroll 3
fingerprints
4 Security & Cryptology
• AES256 for Fingerprint store and data
encryption
• Dynamic on-chip Key generation
• Design in compliance with FIPS 140-2 Level
2 standards
• Individual partitions are encrypted with
different key
5 Certifications • FCC
• CE
6 Partitions • Upto 8 partitions are supported
7 Access Control • Read / Write
• Read Only
• Password for partition
8 Performance • Durability: ~20,000 insertion cycles
• Typical Average Read speed: ~38 Mbps
• Typical Average Write speed: ~35 Mbps
9 Environment
• Storage Temperature: -40°C to 85°C
• Operating Temperature: -5°C to 55°C
• Operating Voltage: 4.9V ~ 5.1V
10 Fingerprint Registration
Software Compatibility
• Microsoft Windows 8.1 and above for
Desktop versions (64Bit)
Memory calculation for ThinC-Vault considers the following: 1GB= 1,000,000,000 bytes or 1GB=1000MB
Ensurity Technologies Pvt Ltd., | All Rights Reserved 5 / 75
ThinC–VAULT
LED Indications
The following table indicates the state of LED after the device is connected and powered on.
Function State LED State Remarks
Power On -
Typically, 1-2 seconds
BITE (Built in Test)
-
BITE Successful
-
BITE Failure after 7 sec
Fingerprint
Wait
Wait for fingerprint - 30 sec
time out.
Process
Success
Typically, 1-2 seconds
Fail
Delete Fingerprint
Success
Fail
Factory Reset
Success
After Reset
Disconnect and reconnect
the device
Fail
Typically, 1-2 seconds
SD Card Operations Read/Write
Data read / write from the
device
Blinking Slow Blinking Glow
Ensurity Technologies Pvt Ltd., | All Rights Reserved 6 / 75
ThinC–VAULT
ThinC Management Tool
ThinC Manager tool can be downloaded from the following links. To receive installer on mail, send
email to [email protected] with subject "Send ThinC Manager Tool - Windows" for
Microsoft Windows based tool latest download links respectively.
• https://x.co/tctools
or
• https://thinc.ensurity.com/#download
ThinC Manager tool is a software utility meant for managing ThinC range of USB devices viz ThinC-
FIDO2 / U2F, ThinC-VAULT and ThinC-COMPUTE. Management tool for ThinC-VAULT has four sub
tabs i.e 1) User 2) Partitions 3) Settings 4) FAQ and disconnect button.
Installation Microsoft® Windows®
This section of the manual describes installation process of ThinC Manager tool for Microsoft®
Windows®. ThinC Manager tool is a software utility required for registering the fingerprints,
partitions and managing permissions to the partitions. To utilize the device the following steps has
to be followed, 1) Register / Enroll fingerprint biometrics using ThinC Manager Tool 2) Create
partition and assign permissions. The ThinC Manager tool installer can be downloaded from the
URLs / web links provided below or kindly contact [email protected] with subject "ThinC
tool - Windows" to get your copy delivered to your electronic mail box.
• https://x.co/tctools
• https://thinc.ensurity.com/#download
Please download ThinC Manager tool installer for Microsoft Windows operating system.
Step 1:
• Open the downloaded file to begin the installation wizard.
During the installation process in Microsoft Windows 8.1 / Windows 10 or above, it is
possible that Microsoft Smart Screen protector may pop up window for permission. Kindly choose
to provide necessary permissions by selecting 'Run Anyway' (or equivalent).
It is possible that the User Access control / Antivirus / End Point Protector software could
request you to approve the installation of the software. Kindly choose to permit any such request
that may be popped up during installation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 7 / 75
ThinC–VAULT
Typical window showing the downloaded installer tool in Microsoft Windows 10 operating system.
Step 2:
• After opening ThinC Manager tool installer, license agreement window will be shown. Please
read the Ensurity Software Applications - End Users License Agreement completely and choose
to accept by selecting on "I accept the agreement" and click on Next to proceed further with
the wizard. Choosing cancel any time during the installation process will abort the installation.
Step 3:
• By default the tool installs in "C:\Program Files\ThinC Manager". To choose a different folder,
click on Browse and select another folder. Click on Install to begin the installation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 8 / 75
ThinC–VAULT
Step 4:
• The Installation window will show progress of installation. Once the installation process is
initialized this process can't be stopped / aborted.
If installation is stopped or aborted tool will not be installed.
Step 5: • After the installation is successfully completed
Ensurity Technologies Pvt Ltd., | All Rights Reserved 9 / 75
ThinC–VAULT
Click on Finish to complete the installation and launch the tool immediately. Deselect "Launch
ThinC Manager tool" and click Finish to close the installer and use the tool later. Use desktop
shortcut or start menu shortcut or navigate to install path to run ThinC Management tool.
In case of any issue or error during the installation, please contact support at
[email protected] or visit us on ensurity.com for technical support.
Uninstallation Microsoft® Windows®
Follow the below steps to uninstall ThinC Manager tool from Windows®
Step 1:
• Goto Windows Control Panel > Programs and features. Or Control Panel > Uninstall a program.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 10 / 75
ThinC–VAULT
Step 2:
• Select "ThinC Manager x.y.z" and click Uninstall or Uninstall/Change.
During uninstallation process Microsoft Windows can request permission to uninstall
ThinC Manager tool, choose to accept or click Yes to continue uninstall. Choose No to abort the
operation.
Step 3:
• ThinC Manager tool uninstall window will ask to reconfirm Uninstallation process. To proceed
further choose Uninstall and to abort choose Cancel.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 11 / 75
ThinC–VAULT
Step 4:
• Uninstaller will remove / delete ThinC Agent files from installation directory. After uninstalling
the tool, Microsoft Windows will show "ThinC Manager has been uninstalled from your
computer" click Finish to complete the uninstallation process. In case of any issue during
uninstallation kindly contact [email protected] with subject "Uninstall-Windows".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 12 / 75
ThinC–VAULT
ThinC Manager Functionality for Admin User
Manage ThinC-VAULT USB
ThinC Manager is a standalone management tool to administer ThinC devices and used for
managing the device/s, partitions, fingerprint enrolment, binding etc.Ensure that tool is installed
in required computer before proceeding further [refer to installation section in the manual for
installing]. This tool is used for managing ThinC-VAULT. Connect the ThinC-VAULT to computer USB
port, the device would power on, initialize and install necessary drivers automatically and await to
read fingerprint or enroll fingerprints.
The ThinC-VAULT device has two types of users.
A) Admin User (AU)
The following are the functionalities that the Admin User can perform
• Basic Functionalities
1. Create / Delete Users 2. Create / Delete Groups 3. Add / Delete Members to the Group 4. Register / De-Register Users fingerprints. 5. Set / Edit / Manage Partitions 6. Manage Device Settings
• Advanced Functionalities
1. Set / Edit / Manage Access Rights 2. Set / Edit / Manage Passwords 3. PC Binding
B) End User (EU).
The following are the functionalities that the End User can perform
• Lock / Unlock Partitions
Refer to LED Indication table to understand different device states
While the device is initializing, do not place your finger on the fingerprint sensor.
• Open ThinC Manager tool application and click on the device that needs to be managed.
The application will automatically search, recognize and list connected ThinC devices.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 13 / 75
ThinC–VAULT
• If the device is not connected properly or not available in computer, the below screen would
be displayed prompting the user to reconnect the device. If it continues to be unrecognized
device, please contact [email protected].
ThinC-VAULT device supports up to 15 fingerprint registrations.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 14 / 75
ThinC–VAULT
• The below screen provides an overview of the tabs available in ThinC Manager tool.
User Tab
Partitions Tab:
Note: Capacity showcased by the doughnut chart varies based on ThinC-VAULT variant
Ensurity Technologies Pvt Ltd., | All Rights Reserved 15 / 75
ThinC–VAULT
Binding Tab
Settings Tab
Ensurity Technologies Pvt Ltd., | All Rights Reserved 16 / 75
ThinC–VAULT
FAQs Tab
Basic Functionalities
This section of the document describes the basic functionalities available in ThinC-VAULT. The basic functionalities are listed below, and the description of each section is described as follows.
• Creation / Deletion of Users: Describes the process of creating and deleting user using ThinC Manager.
• Register / DeRegister Users Fingerprints: Describes the process of enrolling fingerprints, verifying enrolled fingerprints and deleting exiting fingerprints.
• Creation / Deletion of Groups: ThinC allows grouping fingerprints into a group and can assign access rights to a group.
• Adding / Removing Members from the Group: Adding new members or removing existing members from group.
• Setting / Editing / Managing Partitions: Creating the partitions and assigning the user to the partitions or deleting the partition.
• Others: Describes the options such as disconnecting the device from ThinC Manager and lists the FAQ's
Create / Delete Users
User Creation:
ThinC Manager tool has capability to automatically distinguish between fresh / reset / unregistered
device and fingerprint enrolled / registered device. In case of fingerprint enrolled / registered
device it is mandatory for the registered user to authenticate before accessing Management
functions. The step 1 below provide process to access management function for device with
enrolled fingerprint, see to step 2 for unregistered device or first-time fingerprint enrolment.
The tool will automatically skip to step 2 to initiate the initial authentication process for new
fresh / reset / unregistered device.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 17 / 75
ThinC–VAULT
Step 1:
• Click on Authenticate and place enrolled finger on the Touch sensor. The tool will request
ThinC-VAULT to verify the finger and provide access after successful verification. This step is
skipped by tool automatically for fresh / reset / unregistered device.
The device has mechanism to prevent unauthorized access. More than 10 continuous
unsuccessful authentications would initiate factory reset.
Step 2:
• Click on Add User /Group button to register a new user to the device.
• The tool displays a dialog box "Create New User". In the dialog box, select User option and
enter the Display Name, User Name. Click on Create to create the user. By default the first user
of the device is the Admin. Click Ok in the pop up.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 18 / 75
ThinC–VAULT
It is mandatory to enroll atleast one fingerprint associated with the created user for device to
register and store the user. Clicking on cancels the user creating process.
Only the device administrator can add / remove users or fingerprints.
User Deletion:
• In the user management window click on in the user tile to delete the user. After successful
deletion of the user "Delete User Successful" notification will be displayed by the tool.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 19 / 75
ThinC–VAULT
The Admin user can only be deleted by performing a factory reset
If the user is deleted, the corresponding access rights to the partition will be removed.
Register / De-Register Users fingerprints
Register Users fingerprints
• The tool will automatically showcase fingerprint management window for the user created.
Fingerprint management window provides 10 slots to choose for enrolment of finger. Choose
the finger slot of your choice by clicking on icon to enroll the fingerprint. Click on "Yes
enroll!" to initiate enrollment process, click No to abort enrollment process.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 20 / 75
ThinC–VAULT
Avoid using different finger for indicated fingerprint slots to minimize confusions later. All the
enrolled fingerprints are securely stored on the ThinC-VAULT device.
No fingerprints or device access information is stored in the management tool. All fingerprint
information is stored on ThinC-VAULT in an encrypted format.
• Place the finger repeatedly on fingerprint sensor to continue and complete the enrollment
process, finger has to be repeatedly placed on fingerprint sensor till enrollment process
reaches 100%. As a best practice placing finger repeatedly in slightly different angles each time
to enroll finger quickly.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 21 / 75
ThinC–VAULT
• After the fingerprint enrollment process is successfully completed, tool displays a notification
stating "Adding Finger successfully" message and the screen would get updated.
The tool would display the fingerprint slots that are available in USB device for enrollment
with symbol
The Tool would display the fingerprint slots that are already used with fingerprint symbol
and icon is displayed on the Management tool finger image.
ThinC Device supports upto 5 users and each user can enroll upto 3 fingerprints. If these slots are
exceeded and after enrollment process instead of "Fingerprint enrolled Successfully" tool would
notify "Maximum finger limit reached".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 22 / 75
ThinC–VAULT
Step 3:
• Verification of finger is not a mandatory process for using services, as a best practice please
choose to verify the enrolled fingerprints by using "Verify Finger" option. In Fingerprint
management window click on Yes, verify, place the finger on sensor.
• Tool will automatically initiate the verification and shall provide results by notifying "Your
fingerprint verified Successful" if fingerprint matches enrolled finger or "Authentication Failed"
if fingerprint does not match
Ensurity Technologies Pvt Ltd., | All Rights Reserved 23 / 75
ThinC–VAULT
De-Register Users fingerprints
The Fingerprint management allows deletion / de-registration of individual fingerprints.
• In the fingerprint management window click on 'delete / trash icon' on the given slot to delete
/ de-register fingerprint. After successful deletion of the fingerprint " Your fingerprint data is
successfully deleted from the device" notification will be displayed by the tool.
It is mandatory for the Admin to have at least one fingerprint enrolled.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 24 / 75
ThinC–VAULT
Create / Delete Groups
This section of the document describes the process of creating a group and adding or removing members to the group.
Group Creation
• Click on Add User /Group button to register a new group to the device.
• The tool displays a dialog box "Create New User". In the dialog box, select Group option and
enter the Group Name. A group can only be created if there are any users in the device. The
list of all the users in the device is displayed under "Selected Users". Check the necessary
members from the list to add them to the group and click the Create Group button.
At least one user must be registered in the device to create a group.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 25 / 75
ThinC–VAULT
Maximum of 3 groups can be created with maximum of 5 users per group.
Group Deletion:
• In the user management window click on in the Group tile to delete the Group. After
successful deletion of the user "Delete Group Successful" notification will be displayed by the
tool.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 26 / 75
ThinC–VAULT
Add / Remove Group Members
Add Members to the Group
• Admin can add multiple members to the group. To add a member to the group, click on "Add
Member" and select one or more users in the list of users and click on Add Members.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 27 / 75
ThinC–VAULT
Delete Members from the Group
• To remove the user from a group, click on and the tool displays a pop-up message "Are you
sure? You want to remove user from group!", click on "Yes, Remove" to remove the user from
the group else click on "No Keep".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 28 / 75
ThinC–VAULT
Set / Edit / Manage Partitions without Password
This section of the document describes the process of creating, deleting partitions with and
without password in ThinC-Manager application.
Create Partition
• To manage the partitions on ThinC-VAULT device, goto ThinC Manager tool partition tab (by clicking on partitions). This tab shows the partition information (Name & Size) and unallocated space in the form of doughnut chart.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 29 / 75
ThinC–VAULT
• To create a new partition, click on the doughnut chart. Enter the partition name and required partition size. Select one or more users in the list of "Assign Access to user / group". Assign
access rights to the partition by clicking on under Manage column. Now drop down menu under Under Permissions Tab choose the required access control - "Read Only" or "Read /
Write". After modifying the access rights, click on to save the changes. Clicking on will discard the modified changes. Click on "Create" to create the partition.
The maximum of 15 characters are allowed for partition name.
If User is not assigned to the partition, tool displays a prompt "Please select at least one user for creating partition" requesting the user to select a user to continue the partition creation process.
Partition can either be assigned to a user or a group.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 30 / 75
ThinC–VAULT
• The tool displays a pop up "Partition Added successfully. The new partition will be accessible from next device connection". Remove the ThinC-VAULT device from computer, reconnect and authenticate to enumerate the newly created partitions.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 31 / 75
ThinC–VAULT
Deletion of Partitions ThinC-VAULT supports deletion of selected partitions. Please use the following procedure to delete partition(s).
• In the partition management tab click on 'Delete Partition' to delete the selected partition. Click on "Yes, delete" to proceed with the deletion or click on "No" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 32 / 75
ThinC–VAULT
• After successful deletion of the partition "Deleting partition successful" notification will be displayed by the tool. Kindly remove the ThinC-VAULT device and reconnect. Authenticate the device using enrolled fingerprint to re-login.
Please remove and reconnect ThinC-VAULT device after delete operations
Deleting a given partition will delete the contents stored in the partition. Deleting all partitions will delete contents stored in all partitions.
Manage Device Settings
The settings tab in ThinC Manager provides access to device information and factory reset. It
displays the complete details of device i.e Firmware version and serial number and factory reset is
used for resetting device to factory default setting.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 33 / 75
ThinC–VAULT
It is recommended to note down the device information as it would be useful during
communication with support.
Device Info:
• Click on the "Settings" to display the device info. The info displayed consist of firmware version
and serial number. This information is required during support.
The value of content displayed in device info could be different for each device connected.
Device Name Admin has the ability to set a unique name for each device.
• To set a device name, enter the name and click on Update in the Device Settings section.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 34 / 75
ThinC–VAULT
Factory Reset
Factory reset is a process to erase all the partitions, storage drives, keys, and fingerprints.
• To set the device to factory default settings, click on Factory Reset. A pop-up warning window
will be displayed requesting the permission to proceed further, choose "Yes, reset!" and "No,
don't reset" to abort. Once "Yes, reset!" is chosen tool will request user to authenticate the
device, click on authenticate and place already enrolled finger on fingerprint sensor to
initiate factory reset process.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 35 / 75
ThinC–VAULT
• After successful reset the tool will navigate to the dashboard.
Before proceeding with factory reset it is recommended to back up the data stored in the
partitions.
After clicking on Reset, the blue LED's blink once and red LED blinks continuously indicating
the device is being reset to factory settings. Disconnecting the device immediately during this
process will terminate the reset process.
Factory reset will erase all stored data including fingerprints and reset the device to factory
default.
Others
Disconnect:
Disconnect is used for disconnecting the device and log off from the tool. To disconnect click on
Ensurity Technologies Pvt Ltd., | All Rights Reserved 36 / 75
ThinC–VAULT
Logout, a "Do you want to logout from the device?" pop up window is displayed choose "Yes,
Logout!" to disconnect device from the tool or "No, don't logout!" for returning to device
management. Once disconnected, re-authentication is required to access the management
function.
Support:
For any support and queries, please do contact us at [email protected]
Please note that the support will is available only on weekdays (Monday to Friday) between 10:00 AM
and 7:00 PM IST.
FAQ
Without the User biometric authentication, can ThinC-VAULT be used to access the Encrypted
Storage partition?
• NO. The device will be accessible only after the user's successful biometric authentication to the
device.
How many fingerprints can be registered onto the device?
• ThinC-Vault supports up to 15 fingerprints.
What is the encryption used for the storage partitions?
• Storage Partitions are encrypted with hardware based AES256 algorithm. The encryption key is
stored securely.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 37 / 75
ThinC–VAULT
How many Storage Partitions can be created?
• ThinC-VAULT devices support upto 8 storage partitions. The ownership/accessibility of storage
partitions can be assigned to either a single fingerprint or a group of fingerprints with read-only or
read-write permissions.
How many users are supported for ThinC-VAULT?
• ThinC-VAULT support upto 5 users and 3 groups. Each group can contain upto 5 members.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 38 / 75
ThinC–VAULT
Advanced Functionalities
This section of the document describes the Advanced Functionalities available in ThinC-VAULT device. The advanced functionalities are listed below and the description of each section is described as follows.
• Access Rights: ThinC-VAULT supports " Read Only" and "Read/Write" access rights per partition per user on the device. Access rights are managed by the device admin.
• Passwords: Password authentication can also be used as a authentication method for ThinC-VAULT devices. Setting a password for a partition prevents the partition from opening after the device is connected to a PC/Laptop. The password for the partition is set after the partition is created.
• PC Binding: It’s a security function that binds ThinC-VAULT device to given computer (Laptop/Desktop), IP address, MAC address, Network Binding. If any ThinC-VAULT is binded to computer then it can only be used in that computer and it does not work / function with any other computer machines. Adding Computer will trigger and enable the binding security function in the device.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 39 / 75
ThinC–VAULT
Set / Edit / Manage Partitions with Password
Create Partition
• To manage the partitions on ThinC-VAULT device, goto ThinC Manager tool partition tab (by clicking on partitions). This tab shows the partition information (Name, Size, User access rights) and storage capacities in the form of doughnut chart.
• To create a new partition, click on the doughnut chart. Enter the partition name and required partition size. Select one or more users in the list of "Assign Access to user / group". The default
access rights will be Read/Write. Assign access rights to the partition by clicking on under Manage column . Now drop-down menu under Under Permissions tab, choose the required
access control - "Read Only" or "Read / Write". After modifying the access rights, click on
to save the changes. Clicking on will discard the modified changes. Click on "Create" to create the partition.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 40 / 75
ThinC–VAULT
If User / Group is not assigned to the partition, tool displays a prompt "Please select at least one User / Group for creating partition" requesting the admin to select a user / group to continue the partition creation process.
• Tool supports assigning of Password based access control to the partition during the creation of partition. Click on "Enable Password" check box. Please enter Password and confirm Password, click on Create button to create the partition.
Partition Password supports only 16 characters.
• The tool displays a pop up "Partition Added successfully. The new partition will be accessible from next device connection". Remove the ThinC-VAULT device from computer, reconnect and authenticate to enumerate the newly created partitions.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 41 / 75
ThinC–VAULT
Deletion of Partitions ThinC-VAULT supports deletion of selected partitions. Please use the following procedure to delete partition.
• In the partition management tab click on 'Delete Partition' to delete the selected partition.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 42 / 75
ThinC–VAULT
• Click on "Yes, delete" to proceed with the deletion or click on "No" to abort the operation
• Unlock the partition by entering the Password to proceed with the deletion.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 43 / 75
ThinC–VAULT
• After successful deletion of the partition "Deleting partition successful" notification will be displayed by the tool. Kindly disconnect and reconnect the ThinC-VAULT device. Authenticate the device using enrolled fingerprint to re-login.
Please remove and reconnect ThinC-VAULT device after delete operations
Deleting a given partition will delete the contents stored in the partition. Deleting all partitions will delete contents stored in all partitions.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 44 / 75
ThinC–VAULT
Set / Edit / Manage Access Rights
Partition Access Rights Management ThinC-VAULT supports " Read Only" and "Read/Write" access rights per partition per user on the device. Access rights are managed by the device admin.
• To assign access rights to the partition in tools go to partition tab, click on the required partition
to manage access rights. Under the Manage column clicking on . Now drop down menu under Permissions tab choose the required access control - "Read Only" or "Read / Write".
Refer to Best practices section below while assigning read only permissions.
• After modifying the access rights, click on to save the changes. Clicking on will discard the modified changes.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 45 / 75
ThinC–VAULT
Best practice for Read only Partition Read Only access control is a very versatile functionality of ThinC-VAULT. Admin can modify Read/Write access control to Read Only access rights by configuring the partition using the tool. Once any partition is changed from Read/Write to Read only no changes can be made to the content of the partition. It is a best practice to first perform all operations (e.g: copy documents to the drive) in Read/Write mode then change the mode to Read only. Step 1 [Only for new / reset devices without any partitions, skip to step 2 for others]
• Using ThinC Manager tool, create the partition.
• The drive gets automatically initialized. Now choose to format the drive follow the steps provided in Formatting Partitions.
Step 2: The following is the process for changing the partition access.
• Upload / copy the content to the required partition/ drive.
• After successfully copying / uploading content. Open ThinC Manager Tool and goto Partition tab
Ensurity Technologies Pvt Ltd., | All Rights Reserved 46 / 75
ThinC–VAULT
• In the tool go to Partition tab, click on the desired Partition to change the Access Rights. Click
on permissions for a given user, click on to change the partition Access rights to "Read only"
Ensurity Technologies Pvt Ltd., | All Rights Reserved 47 / 75
ThinC–VAULT
A user's access rights cannot be removed unless the user is removed from the device.
If the user is deleted, the associated partition will not be deleted.
Set / Edit / Manage Passwords
Setting Password
• Admin can also set the password for the partition after the partition is created. In the partition management tab, select the partition and click on 'Set Password' to set the password to the selected partition.
• Please enter "Enter Password" and "Re-enter Password", click on Enable button to enable password to the partition. The password will be effective only when the device is disconnected and reconnected to the computer.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 48 / 75
ThinC–VAULT
Change Password
• Admin has the privileges to modify the existing password for the partition. Launch ThinC-Manager, click on Partitions tab. Select the partition to modify the password and click on Change Password. Enter the Old password, new password and click on Change to modify the password and the tool displays a prompt "Password has been changed successful" else click on "Cancel" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 49 / 75
ThinC–VAULT
Clearing Password
• Admin has the privileges to remove existing password for the partition. Launch ThinC-Manager, click on Partitions tab. Select the partition to clear the password and click on Clear Password. When prompted click on "Clear" to remove the password else click on "No, keep it!" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 50 / 75
ThinC–VAULT
Reassign Partition
Once the partition is assigned to the user, the admin can reassign the partition to another user without deleting the user’s fingerprints.
• To reassign the partition, select the partition and click on Reassign. The tool prompts the user to confirm the reassigning the partition, click on "Yes, reassign” and select the user/group from the drop-down and click on Add Access else click on No, keep it to discard the changes.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 51 / 75
ThinC–VAULT
• After successfully modifying the partition access rights, the tool displays a prompt "Assign Partition User successful".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 52 / 75
ThinC–VAULT
Binding
Binding a security function that couples ThinC-VAULT device to given computer (Laptop/Desktop), IP address, MAC address, Network Binding. Adding Computer will trigger and enable the binding security function in the device. Admin has the flexibility of activating multiple binding rules however when a Network Binding rule is enabled, rest of the rules can't be activated for the connected ThinC-VAULT device. ThinC-VAULT device has the capability of combination of IP, MAC and PC Binding can be combined as a single rule or can work independently. Admin can add upto 10 Binding rule to any given ThinC-VAULT device.
PC Binding
It’s a security function that binds ThinC-VAULT device to given computer (Laptop/Desktop). If any
ThinC-VAULT is binded to computer then it can only be used in that computer and it does not work
/ function with any other computer machines. Adding Computer will trigger and enable the binding
security function in the device.
Adding PC/Laptop to ThinC-VAULT Binding list
To enable bindings, navigate to Binding tab. The bindings tab lists all the available Binding features.
Check the checkbox PC Binding and the tool will automatically read the computers name and
populate the name under PC Name. Click on Add and a pop up warning window will be displayed
requesting the permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 53 / 75
ThinC–VAULT
After successfully adding the computer to Device Binding Rule list the, tool displays a notification
stating "Binding rule has been added successfully" message and the screen would get updated.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 54 / 75
ThinC–VAULT
To add a different system to the binding list, click on the toggle the slider "Other PC" and enter the
PC/Laptop name and PC Fingerprint Value obtained from the ThinC SystemID Generator ID tool
and click on Add.
Removing PC/Laptop from ThinC-VAULT Binding list
In the Device Binding section click on to delete the selected PC from the Binding Rules. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.
After successful deletion of the device from the binding list "Delete computer from device successful" notification will be displayed by the tool.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 55 / 75
ThinC–VAULT
Deleting the computer will unbound all the bound partitions and also removes the computer
binding.
Binding ThinC-VAULT to PC/Laptop
After adding the PC/Laptop to the Binding list, check the check-box under Device Binding section
to bind the computer to ThinC-VAULT device. Click on "Bind" to proceed with the Binding or click
on "Cancel" to abort the operation.
After successfully adding the computer to the binding list the, tool displays a notification stating
"Computer has been bound to the device successfully."
Ensurity Technologies Pvt Ltd., | All Rights Reserved 56 / 75
ThinC–VAULT
Unbinding ThinC-VAULT from PC/Laptop
In the Device Binding section click on to delete the selected PC from the binding list. Click on "Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.
• After successful unbinding the tool will display a notification stating "Binding rule has been
deactivated successfully".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 57 / 75
ThinC–VAULT
IP Binding
It’s an security function that binds ThinC-VAULT device to given IP address. If any ThinC-VAULT is
binded to the IP address, then it can only be used in a computer with that IP address and it does
not work / function with any other IP based PC/Laptops. Adding IP will trigger and enable the
binding security function in the device.
Adding IP Address to ThinC-VAULT Binding list
To enable Add IP Address to the binding list, navigate to Binding tab. The bindings tab lists all the
available Binding features. Check the checkbox IP Binding and the tool will provide a text area to
enter the IP Address of the system that needs to be binded. Click on Add and a pop-up warning
window will be displayed requesting the permission to add the binding rule, choose "Yes, Add" and
"Cancel" to abort.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 58 / 75
ThinC–VAULT
After successfully adding the rule to Device Binding Rule list the, tool displays a notification stating
"Binding rule has been added successfully" message and the screen would get updated.
Removing PC/Laptop from ThinC-VAULT Binding list
In the Device Binding Rule section click on to delete the selected IP Address from the Binding rules. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 59 / 75
ThinC–VAULT
After successful deletion of the device from the binding list "Binding rule has been deleted successfully" notification will be displayed by the tool.
Deleting the computer will unbound all the bound partitions and also removes the computer
binding.
Binding ThinC-VAULT to IP Address
After adding the IP Address to the Binding list, check the check-box under Device Binding Rules
section to bind the IP address to ThinC-VAULT device. Click on "Yes, Bind" to proceed with the
Binding or click on "Cancel" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 60 / 75
ThinC–VAULT
After successfully adding the IP Address to the binding list the, tool displays a notification stating
"Binding rule has been activated successfully."
Unbinding ThinC-VAULT from IP Address
In the Device Binding section click on to delete the selected PC from the binding list. Click on "Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 61 / 75
ThinC–VAULT
• After successful unbinding the tool will display a notification stating, "Binding rule has been
deactivated successfully".
MAC Binding
It’s a security function that binds ThinC-VAULT device to a computer using the MAC. If any ThinC-
VAULT is binded to a computers MAC address, then it can only be used in a computer with that
MAC address and it does not work / function with any other computer machines. Adding MAC
address will trigger and enable the binding security function in the device.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 62 / 75
ThinC–VAULT
Adding MAC Address to ThinC-VAULT Binding list
To add the MAC Address to the binding list, navigate to Binding tab. The bindings tab lists all the
available Binding features. Check the checkbox MAC Binding and enter the MAC address of the
computer that needs to be added. Click on Add and a pop-up warning window will be displayed
requesting the permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.
After successfully adding the MAC address to Device Binding Rule list the, tool displays a
notification stating "Binding rule has been added successfully" message and the screen would get
updated.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 63 / 75
ThinC–VAULT
Removing MAC Address from ThinC-VAULT Binding list
In the Device Binding section click on to delete the selected MAC Address from the Binding list. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.
After successful deletion of the device from the binding list "Binding rule has been deleted successfully" notification will be displayed by the tool.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 64 / 75
ThinC–VAULT
Deleting the computer will unbound all the bound partitions and also removes the computer
binding.
Binding MAC address to ThinC-VAULT
After adding the MAC Address to the computer list, check the check-box under Device Binding
section to bind the computer to ThinC-VAULT device. Click on "Bind" to proceed with the Binding
or click on "Cancel" to abort the operation.
After successfully adding the MAC Address to the binding list, the tool displays a notification stating
"Binding rule has been activated successfully."
Ensurity Technologies Pvt Ltd., | All Rights Reserved 65 / 75
ThinC–VAULT
Unbinding MAC Address from ThinC-VAULT
In the Device Binding section click on to delete the selected PC from the binding list. Click on "Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.
• After successful unbinding the tool will display a notification stating "Binding rule has been
deactivated successfully".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 66 / 75
ThinC–VAULT
Network Binding
It’s a security function that binds ThinC-VAULT device to a computer using the Network address
range and Subnet Mask. If any ThinC-VAULT is binded to the Network range then it can only be
used in a computer with in the network range and it does not work / function with any other
computer machines. Adding MAC address will trigger and enable the binding security function in
the device.
Adding Network information to ThinC-VAULT Binding list
To add a network range to the binding list, navigate to Binding tab. The bindings tab lists all the
available Binding features. Check the checkbox PC Binding and enter the Network Address and
Subnet Mask. Click on Add and a pop-up warning window will be displayed requesting the
permission to add the binding rule, choose "Yes, Add" and "Cancel" to abort.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 67 / 75
ThinC–VAULT
After successfully adding the Network Address to Device Binding Rule list the, tool displays a
notification stating "Binding rule has been added successfully" message and the screen would get
updated.
Removing Network information from ThinC-VAULT Binding list
In the Device Binding section click on to delete the selected Network Address from the Binding list. Click on "Delete" to proceed with the deletion or click on "Cancel" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 68 / 75
ThinC–VAULT
After successful deletion of the Network Address from the binding list "Delete computer from device successful" notification will be displayed by the tool.
Deleting the computer will unbound all the bound partitions and also removes the computer
binding.
Binding ThinC-VAULT to Network
After adding the Network Address to the binding list, check the check-box under Device Binding
section to bind the Network Address to ThinC-VAULT device. Click on "Bind" to proceed with the
Binding or click on "Cancel" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 69 / 75
ThinC–VAULT
After successfully adding the Network Address to the binding list the, tool displays a notification
stating "Binding rule has been activated successfully."
Unbinding ThinC-VAULT from Network
In the Device Binding section click on to delete the selected Network Address from the binding list. Click on "Yes, Unbind" to proceed with the unbinding or click on "No, keep" to abort the operation.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 70 / 75
ThinC–VAULT
• After successful unbinding the tool will display a notification stating "Binding rule has been
deactivated successfully".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 71 / 75
ThinC–VAULT
Operating ThinC Device in Microsoft® Windows®
ThinC-VAULT by default creates partitions and allocates storage space with in the device. After creating the partition using the tool, the partitions must be formatted as per choice using respective OS formatting tools. This section of the document explains typical procedure to format (initialize and erase) partitions in Microsoft Windows and Apple macOS.
Only Read-Write access rights assigned partition can be formatted. The partitions with Read / Write access rights can be formatted. In case there is an error in formatting partitions kindly recheck assigned access rights.
• Connect ThinC-VAULT device and authenticate to automatically initialize the drive. After initialization the partitions associated with authenticated user will be enumerated to OS.
• Goto File Explorer / Windows Explorer and select the drive to be formatted.
Alternatively drive can be managed by opening Disk Management application.
• Right click on the unformatted partition and choose "Format.." from the list of options.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 72 / 75
ThinC–VAULT
Typically Microsoft Windows pops up the below screen requesting the user to format the drive before using the partition.
The drive name will be different according to the device you are using. For instance, if your device is displayed as E: in your computer, the error message will be “You need to format the disk in drive E: before you can use it”.
• Enter required name for the partition and then select disk file format and choose the allocation unit size.
To avoid confusion, it is suggested to enter the same name that is mentioned in ThinC Manager tool while creating the partition.
Choose the file system NTFS - FAT32 - exFAT or default option
Ensurity Technologies Pvt Ltd., | All Rights Reserved 73 / 75
ThinC–VAULT
Bad sectors will be scanned when “Quick Format” check-box is checked.
Select the “Quick Format” check-box will not scan for bad sectors.
• Once necessary options are selected, click the "Start" to begin formatting the drive. Once the formatting is completed, a message will be displayed on the screen. Click OK when prompted.
All pictures shown in this document are for illustration purpose only. Actual pictures may vary with different operating systems.
Alternate procedure to format the drive using Disk Management
• Disk Management can be opened by typing diskmgmt.msc in the Run dialog box or the Start menu.
• Right-click on the disk and choose Format...
An unformatted drive will show RAW disk format.
Ensurity Technologies Pvt Ltd., | All Rights Reserved 74 / 75
ThinC–VAULT
• Enter required name for the partition and then select disk file format and choose the allocation unit size
• Select the check box Perform a quick format and click "OK" to apply the format operation.
Choose the file system as default or NTFS - FAT32 - exFAT
• Click on "Ok" to continue formatting and "Cancel" the formatting.
Formatting the drive can take few seconds to few minutes, depending on the size of the volume.
For Partitions with PIN based access control, it is mandatory to unlock the partition and then perform formatting process. Refer to the following brief steps to quickly unlock, for detailed procedure kindly follow steps provided in Partition Creation with PIN section of this document.
• Launch ThinC Agent tool. Click on the partition tab, select the required partition and click on "Unlock Partition PIN".
Ensurity Technologies Pvt Ltd., | All Rights Reserved 75 / 75
ThinC–VAULT
• Enter the partition PIN and click on Unlock to enable the partition in explorer