| Title | Created | Resolved | |
|---|---|---|---|
| Service Maintenance: UCB Files | Friday, June 21, 2013 - 10:00pm | Friday, June 21, 2013 - 11:59pm | VIEW |
| Service Maintenance: Microsoft Exchange | Friday, June 21, 2013 - 10:00pm | Friday, June 21, 2013 - 11:59pm | VIEW |
Encryption Software - FAQ
General FAQ
No. You should never encrypt devices that you use independently of your computer such as phones, iPods, or digital cameras. Encryption would make this kind of removable media inoperable.
Yes, PGP does support encrypting removable media such as thumb drives or external hard drives. Please note that PGP must be installed on any computer that you wish to use with the removable media so that you can decrypt the data on it.
Yes, PGP Whole Disk Encryption is compatible with OSX 10.4.10 and later on Intel based Macs.
No. PGP Whole Disk Encryption is available for Windows and Mac (Intel-based) operating systems only.
Yes. Our campus offers PGP whole-disk encryption, which is strongly encouraged for all faculty laptops. Encryption is required for laptops and workstations that store private data such as grades or educational records.
The IT Security Office will be contacting departments that are known to have stores of private data to help install PGP on laptops. Departments with OIT-provided desktop support will also be proactively contacted to install the software. You may also download and install the software yourself or contact the IT Service Center for help with this process (help@colorado.edu or 303-735-4357). Please note that admin access is required for installation of PGP.
Similar to a password, a passphrase uses a sentence and a neumonic reminder that aids in creating and remembering strong passwords. PGP on a Mac uses passphrases to authenticate your identity. OIT recommends that PGP on Windows be synchronized to your Windows logon credentials instead of creating a passphrase. See step 14 in the Windows Installation, Configuration, and Encryption document.
Yes, a 64-bit version of the client exists for Windows.
After successfully changing your IdentiKey password in Identity Manager, your AD password is automatically synchronized. To synchronize this new password with PGP, follow these steps:
- Start your computer, and when prompted by the PGP login screen, enter your OLD password (or passphrase).
- The old password (or passphrase) will no be accepted by Windows and will fail. So now you must manually log into Windows with the new password you have just set in Identity Manager.
- Once you have successfully logged into Windows with the new password, PGP will automatically synchronize to it and function normally again the next time you restart your computer.
PGP whole disk encryption is currently only available for Windows and Mac (Intel-based) operating systems; however, PGP is reportedly developing a Linux-compatible option.
Yes. OIT highly recommends that faculty and staff with Windows laptops synchronize their PGP boot passphrase with their Windows login. See step 14 of PGP on Windows Installation, Configuration, and Encryption document.
In the event you forget your password or passphrase, a recovery token may be used to gain access to your machine. Please contact the IT Service Center (5-HELP) for assistance.
At its essence, encryption is the transformation of information into a form that is only readable by those with particular knowledge or technology. In the case of computer encryption generally passwords, passphrases and/or keys are used to protect information at rest on a computer or sent by that computer.
The encryption of a physical disk’s entire contents.
In the event your laptop is lost or stolen, encryption prevents anyone else from gaining access to your data. This is particularly important if your laptop contains student grades and other educational records. It should be noted that the storage of private data is addressed by university administrative policy and that private data such as grades and educational records should only be stored on workstations or portable devices when specifically needed for business purposes. If there is a business need to store other types of private data mentioned in the APS (Social Security numbers, healthcare records, etc.), please contact the IT Security Office for guidance on how to properly secure that data according to minimum security standards.