Enable Full Disk Encryption on Microsoft Windows BitLocker Discuss your options with your ITCS representative prior to enabling full disk encryption remotely. NOTE: There is potential for data loss while having full disk encryption enabled remotely. You do not need to follow the instructions below. ITCS will set up full disk encryption on your device. If you have a campus-managed computer, contact IT Client Services or your departmental IT support for assistance. See instructions for enabling full disk encryption on Windows and Macpersonally-managed computers below. However, if both the password and the recovery key are unknown or lost, the device cannot be decrypted and the data will be unrecoverable. When correctly deployed, full disk encryption requires unauthorized users to have both physical access to your device as well as the password in order to decrypt the data on your device. Without full disk encryption, if the data drive in the computer is removed, the data can be easily read and accessed. Storing or processing Institutional Information classified at P3 or higherĮxternal requirements mandate the use of full disk encryption (such as research Data Use Agreements with third-party data providers)įull disk encryption protects the data on your device in the event it is lost or stolen.
Full disk encryption should be implemented for all portable devices when:
