New: NitroPad T430 With Large Screen and Fast Quad-Core CPU

To build on the success of the small NitroPad X230, we are now selling the NitroPad T430 with a large 14" HD+ screen (1600x900 pixels) and a fast Intel quad-core processor. The i7-3632QM with 4x 2.20 GHz (Turbo: 3.20 GHz) and the i7-3840QM with 4x 2.80 GHz (Turbo: 3.80 GHz) are alternatively used as the processor. Thus, the NitroPad T430 offers about twice the speed compared to the NitroPad X230 and can also keep up with current laptops. As usual, the NitroPad T430 is based on professional ThinkPad hardware.

Furthermore, the NitroPad T430 offers the same high security features as the X230:

  • Tamper detection through Measured Boot
  • Disabled Intel Management Engine
  • Pre-installed Ubuntu Linux or Qubes OS with hard disk encryption
  • Seals and security-conscious shipping

The NitroPad T430 is available in our online store.

Features

Tamper Detection Through Measured Boot
Thanks to the combination of the open source solutions Coreboot, Heads and Nitrokey USB hardware, you can verify that your laptop hardware has not been tampered with in transit or in your absence (so-called evil maid attack). The integrity of the TPM, the firmware and the operating system is effectively checked by a separate Nitrokey USB key. Simply connect your Nitrokey to the NitroPad while booting and a green LED on the Nitrokey will show that your NitroPad has not been tampered with. If the LED should turn red one day, it indicates a manipulation.
 

Deactivated Intel Management Engine
Vulnerable and proprietary low-level hardware parts are disabled to make the hardware more robust against advanced attacks.
The Intel Management Engine (ME) is some kind of separate computer within all modern Intel processors (CPU). The ME acts as a master controller for your CPU and has broad access to your computer (system memory, screen, keyboard, network). Intel controls the code of the ME and severe vulnerabilities have been found in the ME enabling local and remote attacks. Therefore ME can be considered as a backdoor and has been deactivated in NitroPad.
 

Preinstalled Ubuntu Linux With Full-Disk Encryption
NitroPad ships with a preinstalled Ubuntu Linux 20.04 LTS with full-disk encryption. Ubuntu is one of the most popular, stable and easiest to use Linux distributions. Switching from Windows to Linux has never been easier.
 

Optional: Preinstalled Qubes OS For Highest Security Requirements
Instead of Ubuntu Linux, on request you can get your NitroPad with preinstalled Qubes OS 4.0 and full-disk encryption.
Qubes OS enables highly isolated working by means of virtual machines (VM). A separate VM is started for each application or workspace. This approach isolates applications and processes much more than conventional operating systems. Qubes OS keeps your system secure, even if a vulnerability has been exploited in one of the software applications used. Example: If your PDF viewer or web browser has been successfully attacked, the attacker cannot compromise the rest of the system and will be locked out once the VM is closed.
In addition, separate virtual workspaces can be used, such as an offline workspace for secret data and an online workspace for communication. NitroPad with Qubes OS is technically similar to SINA clients (for governments), but remains transparent thanks to open source. Qubes OS is for users who want maximum security.
 

Keys Under Your Control
All individual cryptographic keys are generated directly on the NitroPad exclusively during installation and are not stored by us. However, all individual keys can be replaced by you. Unlike "Secure Boot", the keys for securing the operating system remain under your control and do not depend on the consent of the vendor.
 

Nitrokey USB Key Included
NitroPad comes with a Nitrokey Pro 2 or a Nitrokey Storage 2. Their security features include for example email encryption (PGP, S/MIME), secure server administration (SSH) and two-factor authentication through one-time passwords (OTP). The Nitrokey Storage 2 additionally contains an encrypted mass storage with hidden volumes.
 

Professional ThinkPad Hardware
Based on Lenovo ThinkPad T430, the hardware finish and robustness meet professional quality standards. The famous ThinkPad keyboard with background lighting and TrackPoint allows comfortable working. The used laptops have been refurbished.
 

Out-of-the-Box User Experience
With NitroPad, you don't need to take care of opening the hardware casing to flash the BIOS chip, installing and configuring Linux, or pairing the Nitrokey Pro/Storage. We do this work for you. The Nitrokey is already configured with your NitroPad so that it can be used for tamper detection without any further configuration effort.
 

Security Conscious Shipping
To make it more difficult to intercept and manipulate your NitroPad, the NitroPad and the Nitrokey USB key can be shipped in two separate shipments if desired.

 

    Use Cases

    For Everyone
    NitroPad enables you to detect hardware tampering. For example, if your laptop is being inspected while crossing the border or if you leave your device unattended in a hotel or during travelling, you can check the integrity of your NitroPad with the help of the Nitrokey.
     

    For Enterprises
    NitroPad can serve as a hardened workstation for certificate authorities and other use cases requiring high-security computers. On business trips, the NitroPad protects against evil maid attacks while the computer is unattended in a hotel or baggage.
     

    For Governments
    Governments can use NitroPad to protect themselves against advanced persistent threats (APT) without relying on foreign proprietary technology.
     

    For Journalists
    If you as an investigative journalist are serious about protecting your confidential sources, NitroPad helps you getting there.

    More Information

    9.2.2021

    Comments

    Can you add an option to the sale of this device of ath9k wifi and other special setups? And also, a custom option type thing. As it turns out, I may order one of these in April now, btw... that aside, (will have the funds) I think I have emailed you a few times trying to get info and you very kindly replied to me. Can you make like a specific guide though for like programming the usb drive in other operating systems, from source if needed or command line? Also, this is what I would need: two 256gb Solid State Drives within, one sata and one regular, the slower quad core processor, 3632QM and obviously remove the webcam just like the microphone. and a us keyboard which is already in the options. And last but not least 16GB of ram, just wondering how much you would charge for all that. I just need to know how much I need to save up for this. Oh and like I said above, the fastest ath9k half height wifi card that can fit and work with wpa2. Give me a quote whenever, I will wait for your reply. I very much appreciate your open source products. Or rather, your free software products, whichever you prefer. In reality, its both.
    Yes, on request we can equip the NitroPad with ath9k wifi card as well as removing webcam and microphone. Regarding programming the Nitrokeys, you find resources on our website and Github. It depends on what exactly you want to do.
    and the two ssds, one in the wwan spot meaning you remove wwan... plus adding one in the usual spot? Both with 250 gigabytes. As for the rest, I would have one laptop, have Devuan, one have Hyperbola. Although, I am wondering if its possible to have each have FDE + /boot or if the bios chip would get in the way. If that is so, I would just use FDE - /boot How much would doing all that cost you think though? That's what I am curious about. Someone from your staff did say that two ssds was possible in an email. If you get rid of the useless wwan thingy.
    We offer Ubuntu, Qubes, LinuxMint and Debian. We can prepare other distributions for additional costs. Only one SATA SSD and only one distribution can be chosen. For individual requests, send us an email.
    So, what your saying is, I cannot have two different solid state drives in the hardware correct me if I am wrong: one sata, one regular after ripping out the T430's wwan. It's not a problem if you install debian on both, I am fairly adept at reinstallation of operating systems. But that was kind of something I really needed/wanted.
    Just to be clear, can you tell me why that wouldn't work? Or why you won't be able to do it.
    Technically it's possible. But the performance benefit of a M.2 SSD compared to a SATA SSD is not significant considering the overall performance of the T430. Let me know a specific benchmark to correct me if I'm wrong. Therefore we don't offer a M.2 SSD for the T430. Furthermore the way we install Heads supports a single Linux only and no dual boot.
    Oh, it only supports a single linux boot, okay. Thanks for letting me know. Alright, then, I will forget about having two SSDS then. Thank you for clarifying this. I appreciate it.
    Actually, I thought of a few other questions, Would it be more secure to use nitrokey storage or nitrokey pro for the manipulation detection for nitropad, and would it make a difference or be possible to use ecc keys for this.
    Nitrokey Pro and Nitrokey Storage are equally secure in this regards. We configure it with RSA-3072 only. ECC should be possible when configuring it manually.

    Add new comment

    Fill in the blank.