Laptop Encryption Guidelines
These tables will help you choose the right encryption solution for your laptop or desktop.
See if your device already has encryption installed and running
Windows Operating Systems
| Windows Operating Systems | Approved Encryption Solution |
|---|---|
| Windows 10 Enterprise |
Bitlocker For systems that cannot run Bitlocker, use Dell Data Protection for encryption software. |
| Windows 10 Pro |
If the laptop is university-owned, upgrade to Windows 10 Enterprise *; When upgraded, use Bitlocker. For systems that cannot run Bitlocker, use Dell Data Protection for encryption software. |
| Windows 10 Home |
If the laptop is university-owned, upgrade to Windows 10 Enterprise *; If the laptop is personally-owned, upgrade to Windows 10 Pro; When upgraded, use Bitlocker. For systems that cannot run Bitlocker, use Dell Data Protection for encryption software. |
| Windows Vista |
If the laptop is University-owned, upgrade to Windows 10 Enterprise*; If the laptop is personally-owned, upgrade to Windows 10 Pro; When upgraded, use Bitlocker. For systems that cannot run Bitlocker, use Dell Data Protection for encryption software. |
| Windows XP |
When upgraded, use Bitlocker. For systems that cannot run Bitlocker, use Dell Data Protection for encryption software. |
| Operating systems prior to Windows XP | Remove from Inventory |
*Upgrading to Windows 10 Enterprise: Please note that going to Windows 10 Enterprise requires a full re-installation, not an upgrade. Get more information on version upgrades directly from Microsoft or call the Service Desk at 567-7777 option 1.
It is strongly recommended to upgrade systems to Windows 10 since Microsoft's mainstream support for Windows 7 ended in January 2015 and is scheduled to end for Windows 8 in January 2018. End of support refers to the date when Microsoft no longer provides automatic fixes or updates that can help protect your PC from harmful viruses, spyware, and other malicious software. For more information go to Microsoft Lifecycle.
For Legacy Systems: Laptops currently encrypted with SafeBoot are in compliance with current encryption guidelines. If the laptop is functioning properly and encrypted with SafeBoot, call the IMS Service Desk (210-567-7777 option 1) to dicuss other encryption options that is University-preferred.
If the laptop is not working properly and is encrypted with SafeBoot - submit a Service Request to End User Support to attempt recovery of the device and decryption of the hard drive; the rate of decryption is approximately 40 GB per hour. You must have administrative privileges in SafeBoot in order to decrypt the laptop, or you must submit a Service Request to End User Support.
Apple Mac Operating Systems
| Apple Mac Operating Systems | Approved Encryption Solution |
|---|---|
| Mac OS X 10.7 "Lion" (or newer) |
FileVault 2 or Dell Data Protection |
| Mac OS X 10.6 "Snow Leopard" and OS X 10.5 "Leopard" | FileVault 2 or Dell Data Protection |
| Mac operating systems prior to OS X 10.5 |
Upgrade to newer operating system (10.5+) or remove from inventory |
Note: Whole-disk encryption on Mac laptops is only available to those laptops with Intel processors.
Mac laptops using the PowerPC architecture must be turned into the warehouse and removed from the inventory.
Linux Operating Systems
| Linux Operating Systems | Approved Encryption Solution |
|---|---|
| Kernel >= 2.6.10 | LUKS or a self-encrypting hard drive |
| Kernel < 2.6.10 | Self-encrypting hard drive |