Play the Video & Setup your [ORWL]

You can also download our very complete User Guide or read our Questions & Responses

For any questions about ORWL setup, contact support@orwl.org
Please include the your order number + ORWL serial number + Your address + Your email address.

Questions & Responses

General Questions

Where can I purchase ORWL?

ORWL can be purchased online and is available with various options

Who can I contact for technical support?

For any question about ORWL setup, contact support@orwl.org. Please include the your mail your order number + ORWL serial number + Your address + Your email address.

How can you make ORWL so cheap? I’ve heard that secure machines used by governments, for example, cost tens of thousands of dollars!?

Well, at Design SHIFT we were working on consumer products for many years. We learned of ways and methods to make things for the Mass Market, not for the elite few at an elite price. We have connections to world Class manufacturing sites.

PIN Code / Setup

I haven’t received my PIN code by e-mail

To receive your ORWL Data Integrity Shipping PIN, please click here. Please note that this is NOT the permanent system PIN, it is only used at first boot to validate the integrity of the shipped unit. The user will be prompted to create their own custom PIN as one of the first steps after they power up the first time.

How do I enter BIOS Setup?

During part of the time the large “[ORWL]” message is displayed, right at the start of booting, you can press <F2> or <DELETE> to enter BIOS Setup.  The window of opportunity is brief, though, and some keyboards do not enumerate in time.  Ensuring you are using a USB keyboard, connected with a wire, will help.  If you still can’t get in, you can accomplish from within your operating system as detailed in the following entries.

How do I get into BIOS Setup from within Linux

In a terminal window type
>> efibootmgr
to see the EFI boot list. I think the one you will want to select is 0003 Setup, but the list can vary from machine to machine.

Then type>> sudo efibootmgr -n 0003 (or the entry number of the boot choice you want)

Then fully shut down ORWL.

Power on again, and when you restart it you will be prompted for keyFOB authentication as usual.
Then you will be asked to authenticate a second time (to access BIOS Setup), and then prompted to enter your PIN

How do I get into BIOS Setup from within Windows
For getting into BIOS from Windows:
1.  Click on the Windows menu, then the Settings icon on the far left
2.  Click “Update & Security”
3.  Click on the “Recovery” option
4.  In the “Advanced startup” section click on “Restart now”
5.  On the list presented there should be a “Use a Device” icon.  When clicked, this should display the EFI boot options.  One of them should be “Setup”  Clicking on that should reboot the system into BIOS Setup.

Once rebooted you will be prompted for keyFOB authentication as usual.
Then you will be asked to authenticate a second time (to access BIOS Setup), and then prompted to enter your PIN.

I'm having a hard time with my first ORWL setup. Do you have an assistance service?

We have a tutorial video explaining all the needed steps in a good amount of details. Please be sure to watch it and follow the steps carefully. We also have a detailed document, guiding you through the steps. If none of these work, please feel free to contact us through email and we will assist getting you setup.

After I plug in ORWL the [ORWL] image does not display, and it looks like ORWL thinks the unit has been tampered with.

Please contact us by email with your details. Order number, ORWL serial number, your address, and your email address. We will do our best to assist you.

KeyFOB

How do I re-add a deleted keyfob?

There is a BIOS option which will allow you to delete a paired keyfob.  The purpose of this item is to enable users to remove the permission of a keyfob which has been lost or stolen.

HOWEVER, the keyfob pairing process is a one-time-only event for each keyfob.  The applet which runs on the keyfob for pairing is intentionally deleted at the end of the process, so any particular keyfob can only be used for a single ORWL.  If you delete a keyfob from your ORWL via BIOS Setup, you can not re-pair it!

KeyFOB battery life

The current implementation of our KeyFOB doesn’t have any special battery management tuning in place, and the result is that a full charge lasts about four days. We will be tuning and improving this going forward.

I lost my KeyFOB, may I have another one?

You can order another KeyFOB on our webstore.
You always want at least ONE KeyFOB paired to your device to maintain access to your data on ORWL. In the event no KeyFOB in your possession is paired with your ORWL, no one can get your data off the device. Always have two paired. In case you lose one you can still access your data and computer.

Can you send me a third KeyFOB?

Of course. You can pair up to 10 KeyFOBs to any ORWL. Purchase some new KeyFOBs on our webstore.

Pairing a 2nd keyFOB to the ORWL unit - Ubuntu and Qubes

In a terminal window type
>> efibootmgr
to see the EFI boot list. I think the one you will want to select is 0003 Setup, but the list can vary from machine to machine.

Then type>> sudo efibootmgr -n 0003 (or the entry number of the boot choice you want)

Then fully shut down ORWL.

Power on again, and when you restart it you will be prompted for keyFOB authentication as usual.
Then you will be asked to authenticate a second time (to access BIOS Setup), and then prompted to enter your PIN

You then should see the UEFI BIOS menu. Make the following selections:
Device Manager
ORWL Configuration
SuC Authentication
Add a Key========================

OS

Can I change the OS for Ubuntu?

You can install any modern OS, this is one of the key features of ORWL.

What is the version of Linux, Qubes installed?

We installed Ubuntu 16.04.2 LTS (Long-Term Stable).

Stolen / Lost ORWL

My ORWL has been stolen - can you send me a backup of my data?

We are sorry for this trouble. Owning ORWL enables your data stored on the device to not get into anyone else’s hands. Only the combination of your ORWL your FOB and your password will grant access to your data.

ORWL Unit

The power cable you sent does not work in my region.

We sent you a cord that corresponds with your shipping address. If you have the need to change it, please be advised the ORWL power supply has a “3-Slot Mickey Mouse type plug”. There are many for sale on numerous retail outlets.

My power cord, power supply… Has been damaged. Where can I purchase a new one?

You can visit our webstore and purchase your missing cable. If you don’t see your missing item there, please send us an email. We will try and find a way to get you up and running again. Cost will be at your charge.
Other missing accessories:
USB adaptor
Ethernet adaptor
Power battery pack
Foldable keypad
HDMI monitor

My ORWL arrived in shambles, box destroyed, glass broken, cables missing…

We apologize for this inconvenience. We will look into this issue. Kindly please send us an email with your details. Order number, ORWL serial number, your address, email address.

Don't abandon your ORWL!
We gave ORWL a small rechargeable battery to allow it to monitor the physical integrity of itself 24/7, whether it is plugged into a power supply or not. This will go on for 4 to 6 months without plugging it in. If it stays without power for longer, the secure microcontroller will trigger a tamper event and will render the ORWL useless. You will have to send it in for a reset.
To avoid that, we recommend plugging it in regularly.

Other Questions

Where does the name ORWL come from?

It is from George Orwell’s book 1984. We just abbreviated it a little to keep it interesting. It’s a dystopian novel about life under totalitarian rule.

Open source? What do you mean by open source?

We decided to make ORWL open source as we believe the only way our customers will have confidence in the product and its security. We had companies review ORWL for physical security as well as possible software vulnerabilities. Making all sources that we are legally allowed open to the public, code as well as hardware design files, gives people confidence we don’t implant some secret leak to the NSA or other interested parties in our ORWL design.

What if I want to use one specific OS and not the others, how does that happen?

Simply install the operating system you prefer as you would on any computer. The one caveat is that ORWL is a UEFI-only BIOS (it does not support legacy BIOS features). As a result, most old operating systems will not work.

Contact

How to contact us?

By email – Please include the following in your mail:
– Order number
– ORWL serial number
– Your address
– Your email address

Legals

Federal Communication Commission Interference Statement

This device complies with Part 15 of the FCC Rules. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

This equipment has been tested and found to comply with the limits for a Class B digital device, pursuant to Part 15 of the FCC Rules.  These limits are designed to provide reasonable protection against harmful interference in a residential installation. This equipment generates, uses and can radiate radio frequency energy and, if not installed and used in accordance with the instructions, may cause harmful interference to radio communications.  However, there is no guarantee that interference will not occur in a particular installation.  If this equipment does cause harmful interference to radio or television reception, which can be determined by turning the equipment off and on, the user is encouraged to try to correct the interference by one of the following measures:

– Reorient or relocate the receiving antenna.
– Increase the separation between the equipment and receiver.
– Connect the equipment into an outlet on a circuit different from that to which the receiver is connected.
– Consult the dealer or an experienced radio/TV technician for help.

FCC Caution: Any changes or modifications not expressly approved by the party responsible for compliance could void the user’s authority to operate this equipment.

This transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.

Radiation Exposure Statement:
1. This Transmitter must not be co-located or operating in conjunction with any other antenna or transmitter.
2. This equipment complies with FCC RF radiation exposure limits set forth for an uncontrolled environment. This equipment should be installed and operated with a minimum distance of 20 centimeters between the radiator and your body.

Industry Canada statement: CAN ICES-3 (B)/NMB-3(B)

This device complies with ISED’s licence-exempt RSSs. Operation is subject to the following two conditions: (1) This device may not cause harmful interference, and (2) this device must accept any interference received, including interference that may cause undesired operation.

Le présent appareil est conforme aux CNR d’ISED applicables aux appareils radio exempts de licence. L’exploitation est autorisée aux deux conditions suivantes : (1) le dispositif ne doit pas produire de brouillage préjudiciable, et (2) ce dispositif doit accepter tout brouillage reçu, y compris un brouillage susceptible de provoquer un fonctionnement indésirable.

Caution:
(i) the device for operation in the band 5150-5250 MHz is only for indoor use to reduce the potential for harmful interference to co-channel mobile satellite systems;
(ii) the maximum antenna gain permitted for devices in the bands 5250-5350 MHz and 5470-5725 MHz shall be such that the equipment still complies with the e.i.r.p. limit;
(iii) the maximum antenna gain permitted for devices in the band 5725-5850 MHz shall be such that the equipment still complies with the e.i.r.p. limits specified for point-to-point and non-point-to-point operation as appropriate; and
(iv) the worst-case tilt angle(s) necessary to remain compliant with the e.i.r.p. elevation mask requirement set forth in Section 6.2.2(3) shall be clearly indicated.
(v) Users should also be advised that high-power radars are allocated as primary users (i.e. priority users) of the bands 5250-5350 MHz and 5650-5850 MHz and that these radars could cause interference and/or damage to LE-LAN devices.

Avertissement :
Le guide d’utilisation des dispositifs pour réseaux locaux doit inclure des instructions précises sur les restrictions susmentionnées, notamment : (i) les dispositifs fonctionnant dans la bande 5150-5250 MHz sont réservés uniquement pour une utilisation à l’intérieur afin de réduire les risques de brouillage préjudiciable aux systèmes de satellites mobiles utilisant les mêmes canaux;
(ii) le gain maximal d’antenne permis pour les dispositifs utilisant les bandes de 5250 à 5 350 MHz et de 5470 à 5725 MHz doit être conforme à la limite de la p.i.r.e;
(iii) le gain maximal d’antenne permis (pour les dispositifs utilisant la bande de 5 725 à 5 850 MHz) doit être conforme à la limite de la p.i.r.e. spécifiée pour l’exploitation point à point et l’exploitation non point à point, selon le cas;
(iv) les pires angles d’inclinaison nécessaires pour rester conforme à l’exigence de la p.i.r.e. applicable au masque d’élévation, et énoncée à la section 6.2.2 3), doivent être clairement indiqués.
(v) De plus, les utilisateurs devraient aussi être avisés que les utilisateurs de radars de haute puissance sont désignés utilisateurs principaux (c.-à-d., qu’ils ont la priorité) pour les bandes 5250-5350 MHz et 5650-5850 MHz et que ces radars pourraient causer du brouillage et/ou des dommages aux dispositifs LAN-EL.

Caution: Exposure to Radio Frequency Radiation.
To comply with RSS 102 RF exposure compliance requirements, a separation distance of at least 20 cm must be maintained between the antenna of this device and all persons.


Avertissement : Exposition aux radiofréquences
Pour se conformer aux exigences de conformité CNR 102 RF exposition, une distance de séparation d’au moins 20 cm doit être maintenue entre l’antenne de cet appareil et toutes les personnes.