Rocsecure EX31 is the most advanced AES 256-bit real-time hardware encryption portable drive with FIPS 140 Level-2 and NIST certified cryptographic processor. The new Rocsecure EX31 has the latest innovative encryption technology with more power and speed. Our cryptographic processor performs full disk encryption protecting entire Data-at-Rest. The Full Disk Encryption (FDE) solution is OS independent with no extra software, or driver component needed. The EX31 is available in single secure token key and two-factor secure token key & keyboard password entry authentication methods.


Unparalleled encryption Technology.

Real-time hardware security at its core.


The Rocstor EX31 encryption technology is engineered to encrypt/decrypt the entire SATA hard disk or SSD drive including the boot sector, temporary files, and operating system with SATA Gen 3 speed at 6Gbps. Rocstor’s latest technology is not comparable to any other device available in the market. Our technology has the most enhanced security, performance, and speed with FIPS 140-2 level 2 cryptographic processor certification. The EX31 encryption engine is NIST certified and it is equipped with Hash Message Authentication Code (HMAC) secure token key authentication technology method option.  


EX31 Authentication Method

Single or Two Factor Authentication method.

Rocsecure EX31 elevates the encryption security to a whole new level by offering four different secure authentication methods. Each EX31 model reaches new heights in encryption, authentication, validation, and performance.


  Rocsecure EX31 Rocsecure EX31d Rocsecure EX31h Rocsecure EX31dh
Authentication Method Single Factor Dual Factor Single Factor Dual Factor
Validation Type Secure Token Key Secure Token Key & Host Computer Keyboard Password Entry HMAC Secure Token Key (FIPS 1402-2 Validated) HMAC Secure Token Key (FIPS 1402-2 Validated) & Host Computer Keyboard Password Entry


*  HMAC: Hash-based Message Authentication Code

*  Host Computer Keyboad Password Entry models require a secure utility software




With latest encryption technology comes faster transfer speeds.

Rocsecure EX31 is built on the latest FIPS Encryption engine and USB 3.1 Gen1 technology.  When using Solid State Drives models connected to your host computer’s USB-C port, you will experience faster transfer speeds and performance which is unmatched to any other real-time encrypted drives in the market. EX31 include solid-state drives that are blazing fast, with up to a 4TB SSD.



Advanced security. 

One of the most secure and cutting-edge hardware-based encryption chipsets is integrated into the internal circuitry of Rocsecure EX31 models. The chipset contains features such as Advanced Encryption Standard Algorithm AES-256 bit key strength, and real-time encryption so that there is virtually zero time in encrypting and decrypting the data. The encryption engine bears certifications from the National Institute of Standards and Technology (NIST), and FIPS Level 2 for a Cryptographic Module.

Authentication Methods


Rocsecure Model: CryptoKey™Standard
Token Key
Token Key
Two Factor Authentication (Token Key & Host Computer Keyboard Password Entry)



Rocstor CryptoKey™ HMAC Token Key

The most powerful and secure validation Token Key

Rocstor CryptoKey™ token key securely and easily exchanges stream encryption keys for use with the Rocsecure EX31 encryption/decryption engine and manages a confidential communications channel. The CryptoKey Token Key features a wide array of defense mechanisms specifically designed to prevent physical attacks on the device itself or logical attacks on the data transmitted between the token key and Rocsecure EX31 storage device.

The Rocstor Rocsecure EX31 CryptoKey™ tokens are the safest and most secure way of authentication method.  A Rocstor Standard or an HMAC Secure CryptoKey™ Token Key is required for authentication before the host computer can mount the drive.  The physical Rocstor secure token key must be attached to the EX31 before connecting the drive to the host computer, otherwise the EX31 HDD/SSD volume will not be mounted or displayed. 



  Authentication Methods

Rocsecure Model: CryptoKey™Standard
Token Key
Token Key
Two Factor Authentication (Token Key & Host Computer Keyboard Password Entry)



CryptoKey™ HMAC FIPS 140-2 Certified Authentication method

Rocsecure EX31 uses the most advanced FIPS 140-2 certified HMAC key authentication method. HMAC (Hash-based Message Authentication Code) is a specific type of Message Authentication Code (MAC) involving Cryptographic Hash Function and secret Crytographic Key. The Rocesuce EX31h or EX31dh CryptoKey HMAC authentication key options use superior SHA-256 Hash Algorithm with Message Authentication Code (MAC) and Hash-Based Message Authentication Code (HMAC). This is a Rocsecure’s FIPS 140-2 certified authentication method. Simply, the communication between Rocstor’sCryptoKey token key and the encryption engine is encrypted and it cannot be compromised. Rest assured that your key authentication and your data are protected with FIPS 140-2 level certified encryption methods.


• Crypto Element with Protected Hardware-based Key Storage

• Superior SHA-256 Hash Algorithm with Message Authentication Code (MAC) and Hash-Based Message Authentication Code (HMAC)

• Best-in-class, 256-bit Key Length

• Guaranteed Unique 72-bit Serial Number

• Internal, High-quality Random Number Generator (RNG)



Aluminum ruggedized frame, shock absorbent

The Ruggedized Portable Enclosure aluminum design helps to protect your hard drive and data. The safety-centric mechanical design of Rocsecure EX31 series 2.5″ enclosures provides critical hardware protection features, including:

  • Secure Shock-Absorbent Mechanism
    The full-length bridgeboard provides additional protection by supporting the entire length of the hard drive. A strong aluminum rim holds the hard drive chassis firmly in place, eliminating stress on the bridgeboard and preventing damage due to impact or violent movement.                                                                                                                                                                                                                                                                                                                                                                        
  • Shock-Absorbent Protection
    The shock-absorbent dampers strip between the bridgeboard and chassis offers additional resistance against accidental drops and bumps. The disposition of the hard drive and housing profile form an anti-shock chamber to cushion the blow of potential impacts.


  • Thermal Protection and Load-Bearing Case
    The precision density of the rugged aluminum aircraft-grade border provides excellent heat dissipation and is strong enough to bear external weight.
    Patent in progress

Rocstor Rocsecure EX31

Regulatory compliance


Rocsecure EX31 employs data encryption and pre-boot authentication allowing organizations to better protect and control access to their corporate and customer records, thus complying with regulations such as Sarbanes-Oxley (SOX), Health Insurance Portability and Accountability Act (HIPAA), and Gramm-Leach-Bliley (GLB); it is also FCC, CE compliant.A unique feature of the EX31 is that it requires a secure token key allowing you to insert the key directly onto the drive. This ensures protection from key-loggers who may be recording your keystrokes on other competitor drives with an integrated keypad on the drive. Together with full-disk encryption and token key based authentication, these features give you the ultimate level of protection with an unrivaled ease of use.


Mil-Standard waterproofcase

Rocstor HXA Injection Molded Mil-Standard Waterproof Cases are molded of ultra high-strength polypropylene copolymer resin, featuring a gasketed, water and dust tight, submersible design (MIL-C-4150J) that is resistant to corrosion and impact damage. Features a molded-in hinge, patented trigger release latch system, comfortable, snap-down rubber over-molded cushion grip handle, automatic ambient pressure equalization valve (MIL-STD-648C), resistance to UV, solvents, corrosion, fungus and impact damage (MIL-STD-810F).



Spindle Speed (rpm) 2.5" - 5400 HDD, 2.5" - 7200 HDD, SSD

Network & Communication

Wireless LAN No


Limited Warranty 2 Year


Host Interface USB 3.1
Drive Interface SATA

Technical Information

Storage Capacity No Drives  500GB | 1TB | 2TB | 500GB-SSD  | 1TB-SSD | 2TB-SSD | 4TB-SSD
Encryption Standard 256-bit

General Information

Product Type Hard Drive
Manufacturer Part Number E634P5-0, E634K5-01, E634K5-01, E634S5-01, E634S5-01, E634KK-01, E634KK-01, E634MM-01
Manufacturer Website Address
Manufacturer Rocstor
Product Model EX31
Product Name Rocsecure EX31 Real-time Hardware Encrypted Portable External Hard Drive
Product Line Rocsecure


Brand Name Rocstor
Package Contents Rocsecure EX31 Real-time Hardware Encrypted Portable External Hard Drive
Carrying Case
Quick Installation Manual
USB 3.0 Cable (USB 3.1 Type C-C Option)

Physical Characteristics

Weight (Approximate) 8 oz
Color Silver
Drive Type External
Form Factor 2.5"
Height 0.7"
Width 2.9"
Depth 5"
External Drive Type Portable



PN Model Size RPM Cache UPC
E634K5-01 Rocsecure EX31 500 GB 5400 8 MB 81060603000
E634P5-01 Rocsecure EX31 1 TB 5400 32 MB 81060603001
E634P7-01 Rocsecure EX31 1 TB 7200 32 MB 81060603002
E634S5-01 Rocsecure EX31 2 TB 5400 32 MB 81060603003
E634GG-01 Rocsecure EX31 500 GB SSD 81060603004
E634KK-01 Rocsecure EX31 1 TB SSD 81060603005
E634LL-01 Rocsecure EX31 2 TB SSD 81060603006
E634MM-01 Rocsecure EX31 4 TB SSD 81060603007

                      Rocsecure EX31d & EX31hd Two Factor Authentication Utility Download: 

                      Mac OS (click here)

                      Windows (click here)

                      Rocsecure EX31d & EX31hd Two Factor Authentication Quick Installation Manual Download:

                      Manual (click here)

                      Rocsecure EX31, EX31d, EX31h, and EX31hd datasheet:

                      Datasheet (click here)