Full disk encryption is a security concept intended to protect the data on a computer while it is at rest. This is particularly useful in case a computer is lost or stolen. Even if your device ends up in a malicious actor's hands, your private data won't be. Having your computer encrypted could also protect both you and the University from liability if you keep legally sensitive data on your device.
Getting Started with Encryption
At USD, we encrypt our Mac and Windows computers using the technologies built into each operating system. Doing so allows us to centrally manage and store the recovery information, should disaster strike.
To see about getting your computer encrypted, please contact the help desk so that they may evaluate your device's eligibility. Once that is done, they can set your device up to sync with the system and begin encrypting.
Windows Process
Please note that on Windows YOU MUST BE CONNECTED TO THE USD NETWORK (VPN or on campus) in order for your recovery information to sync and encryption to begin.
Before the encryption process begins, you will see a notification like the one below giving you the option to start immediately or postpone for up to 3 days.
After you click Start, you will then see a window like this one showing the status. Feel free to close this window and continue using the computer as normal. No further interaction is required.
Check the status: You can see the encryption progress by searching "Manage BitLocker" on the Start menu or by selecting "BitLocker Drive Encryption" in the Control Panel.
Mac Process
Macs can be encrypted anywhere, so long as there is an Internet connection.
IMPORTANT: Entering your password at the prompt configures your account to allow you to unlock the computer when it starts up. Failing to do so may prevent you from being able to start your computer and could require assistance from ITS to reconfigure properly.
Before the encryption process begins, you will see a notification like the one below giving you the option to start immediately or postpone for up to 3 days (at which point it will start automatically).
As mentioned in the notification, the option to start encryption manually will be available in Mac@USD should you choose to defer. Simply search for “FileVault” or “Encryption” and then click the button that says “Encrypt”.
Once preparations have been completed, you will see a notification reminding you to restart your computer and enter your account password at the prompt.