From the KnowledgeBase
Encryption software at Princeton; guidelines and procedures
Solution:
The recommended method to protect data is to install encryption
software
which converts data to a format that is unreadable by anyone except
authorized users. This University-wide encryption project applies to
all eligible faculty and staff laptops. Studies show that many people
who lose or have their computer stolen often have personal and family
data at risk, as well as confidential University data.
What type of
computer is
affected?
All FCP and DeSC computers are required to be encrypted. In June 2012,
OS X laptops become eligible.
What type of
computer is NOT affected?
- Dual-boot/multi-boot computers
- Virtual Machines
- Linux or any flavor of Unix
- RAID desktops
Is encryption required
for DeSC and FCP
computers?
DeSC Standard laptops are automatically encrypted during setup or when
they are joined
to DeSC. All FCP funded laptops are
now required to be encrypted. All existing FCP funded Mac OS X laptops,
that are not scheduled be replaced before January 2013, must be
encrypted
What
if my computer already has other encryption
software installed?
For audit reasons and to manage risk, your computer will need to be
re-encrypted
with University Encryption Service software. You will be responsible to
decrypt your computer.
How to request encryption
software installation
Installation can be requested from your departmental SCAD/DCS member or
OIT
assistance may be requested by contacting the OIT Help Desk at
8-4357(HELP)
option #1.
Traveling with encrypted laptops abroad
What you need to know when traveling out of the country with encryption
software
can be found at:
www.princeton.edu/itsecurity/services/encryption.
Additional information on encryption
software
Princeton encryption service FAQ
Information for technical support representatives
For installation, use the documentation on the OIT Image Deployment (ImageDocs) SharePoint site. (SCAD/DCS login only). Laptop power adapters are required for the software installation process.
Note: Before performing an in-place operating system upgrade (i.e. OSX 10.6 to 10.7, Windows Vista to Windows 7), decrypt the computer.
External devices and encryption
External USB drives will not be encrypted.
