Mobile Logo in White


Laptop Encryption Guidelines

These tables will help you choose the right encryption solution for your laptop or desktop.

See if your device already has encryption installed and running

  • Windows

    Windows Operating SystemsApproved Encryption Solution
    Windows 10 EnterpriseBitlocker
    For systems that cannot run Bitlocker, use Dell Data Protection for encryption software.
    Windows 10 ProIf the laptop is university-owned, upgrade to Windows 10 Enterprise *;

    When upgraded, use Bitlocker.

    For systems that cannot run Bitlocker, use Dell Data Protection for encryption software.
    Windows 10 HomeIf the laptop is university-owned, upgrade to Windows 10 Enterprise *;

    If the laptop is personally-owned, upgrade to Windows 10 Pro;

    When upgraded, use Bitlocker.

    For systems that cannot run Bitlocker, use Dell Data Protection for encryption software.
    Windows VistaIf the laptop is University-owned, upgrade to Windows 10 Enterprise*;

    If the laptop is personally-owned, upgrade to Windows 10 Pro;

    When upgraded, use Bitlocker.

    For systems that cannot run Bitlocker, use Dell Data Protection for encryption software.
    Windows XPWhen upgraded, use Bitlocker.

    For systems that cannot run Bitlocker, use Dell Data Protection for encryption software.
    Operating systems prior to Windows XPRemove from Inventory

    *Upgrading to Windows 10 Enterprise: Please note that going to Windows 10 Enterprise requires a full re-installation, not an upgrade. Get more information on version upgrades directly from Microsoft or call the Service Desk at 567-7777 option 1.

    It is strongly recommended to upgrade systems to Windows 10 since Microsoft’s mainstream support for Windows 7 ended in January 2015 and is scheduled to end for Windows 8 in January 2018. End of support refers to the date when Microsoft no longer provides automatic fixes or updates that can help protect your PC from harmful viruses, spyware, and other malicious software. For more information go to Microsoft Lifecycle.

    For Legacy Systems: Laptops currently encrypted with SafeBoot are in compliance with current encryption guidelines. If the laptop is functioning properly and encrypted with SafeBoot, call the IMS Service Desk (210-567-7777 option 1) to dicuss other encryption options that is University-preferred.

    If the laptop is not working properly and is encrypted with SafeBoot – submit a Service Request to End User Support to attempt recovery of the device and decryption of the hard drive; the rate of decryption is approximately 40 GB per hour. You must have administrative privileges in SafeBoot in order to decrypt the laptop, or you must submit a Service Request to End User Support.

  • Apple Mac

    Apple Mac Operating SystemsApproved Encryption Solution
    Mac OS X 10.7 "Lion" (or newer)FileVault 2 or Dell Data Protection
    Mac OS X 10.6 "Snow Leopard" and OS X 10.5 "Leopard"FileVault 2 or Dell Data Protection
    Mac operating systems prior to OS X 10.5Upgrade to newer operating system (10.5+) or remove from inventory

    Note: Whole-disk encryption on Mac laptops is only available to those laptops with Intel processors.

    Mac laptops using the PowerPC architecture must be turned into the warehouse and removed from the inventory.

  • Linux

    Linux Operating SystemsApproved Encryption Solution
    Kernel >= 2.6.10LUKS or a self-encrypting hard drive
    Kernel < 2.6.10Self-encrypting hard drive