University Systems help centre
In order to help mitigate risks to information associated with physical loss or theft, computer hard drives (and other devices such as USB keys and flash drives) can be encrypted to prevent unauthorized access to information. Whole Disk Encryption (WDE) is centrally supported by University Systems and provides benefits such as encrypting an entire hard disk, central management, policy enforcement, encryption key management, and recovery.
WDE protects your files if your computer is lost or stolen. If someone tries to break into your system to retrieve files, they will not be able to access the computer as long as they do not have your passphrase. This is most useful for laptop computers and desktop systems with confidential data.
WDE is limited to protecting the files while they are on your computer. It does not provide encryption to files that are:
- sent via email;
- kept on a separate flash drive/thumb drive/USB drive/floppy disk (which was not explicitly encrypted with WDE); or
- moved over the network via shared folders.
When you move an encrypted file off of your computer, it is no longer encrypted. If an encrypted computer is left unattended while the user is logged in, the files are accessible and the data is not protected.
The best protection of university data from physical loss or theft is to avoid storing it on a computer, smart phone, or USB device.
- New computers running Windows 7 Ultimate or Enterprise
- Apple computers running 10.7 or 10.8 (that are not using BootCamp)
The related support tab below also includes instructions for using PGP, which was the recommended Whole Disk Encryption software until 2013. If your computer does not meet the system requirements to use the currently recommended encryption software, please contact the Computer Help Desk for assistance with using PGP.
|Notice for travellers: This software contains encryption technology, which is restricted in some countries. Some countries may require a permit to bring encrypted devices into the country. University Systems recommends that any persons planning on travelling to a foreign country with an encrypted device should contact Foreign Affairs and International Trade Canada prior to departure.|
- Change your PGP Whole Disk Encryption passphrase: Mac
- Encrypt a portable device with PGP: Windows
- PGP-supported versions of OS X: Mac
- Shredding a document permanently using Eraser: Windows
- Shredding a document permanently using PGP: Mac
- Shredding a document permanently using PGP: Windows
- Shredding a document permanently using Secure Empty Trash: Mac
- Using a PGP Portable device: Mac
- Using a PGP Portable device: Windows