Full disk encryption coming to campus laptops

Description

Objective 5.1 of the IT 2016-2019 Strategic Plan is to "Encrypt all faculty/staff laptops and mobile devices with access to personally-identifiable information." As part of the initial phase to complete this goal, Information Technology will begin enabling full disk encryption on newly deployed faculty/staff Apple and Dell laptops. Loaner laptops will not be encrypted as personally-identifiable information is not stored on these devices.

Reason

The purpose of Objective 5.1 is to protect sensitive information that is stored on campus laptops. Encrypting the computer's hard drive will prevent a thief from accessing your private data in the event the laptop is stolen. 

User Impact

If you receive a new campus laptop, the hard drive on the laptop will be encrypted using one of the full disk encryption programs below:

  • BitLocker (PC): Dell laptops will be encrypted by our technicians using BitLocker. Users will need to enter a PIN number (provided by Information Technology) each time the computer is powered on.  
  • FileVault (Mac): Apple laptops will be encrypted using FileVault. Users will need to need to install/enable FileVault when the computer is received. 

Instructions on how to install/enable FileVault (Mac) and entering the PIN (PC) will be provided when the computer is received. 

Schedule

Information Technology will begin enabling full disk encryption on newly deployed faculty/staff Apple and Dell laptops this spring (TBD). Phase two will be to enable full disk encryption on older/existing laptops. 

Questions or Concerns

If you have any questions or concerns regarding encryption, please contact the IT Help Desk (716) 878-4357 or ithelpdesk@buffalostate.edu.

Details

Article ID: 41215
Created
Tue 10/24/17 9:49 AM
Modified
Tue 1/8/19 10:24 AM