Device Encryption

Device encryption is being piloted with a limited pool of University-managed workstations at this time. All University-managed workstations will be encrypted at a later date with prior notification.

Overview

Device encryption will be enabled on all University-managed workstations (desktops and laptops) to strengthen information security controls, achieve strategic goals, and meet industry standards for data protection and regulatory compliance.

Impact on Campus Community

Once your University-owned device is encrypted, all data remains secure—even if a device is lost, stolen or compromised. No action is needed for Windows devices located on campus; encryption is handled automatically. Mac users are asked to follow these simple steps at FileVault Encryption for University-Owned Macs. Any device located off campus will need to connect via VPN or return to campus for the encryption process to start.

Encryption Tools

ITS is using two encryption tools: Bitlocker for Windows devices and FileVault for Macs. Both tools are designed to have minimal impact on system performance, ensuring devices are responsive even when encryption is enabled.

Common Questions / FAQ

Q: What is BitLocker/FileVault and why is it being used on my University-owned device?
A: BitLocker (Windows) and FileVault (Mac) are tools that protect data by encrypting your entire drive. Data remains safe even if a device is lost, stolen or compromised.

Q: Will I need to do anything to enable encryption on my device?
A: Windows devices are protected automatically with Bitlocker. No action is needed. Mac users must follow a these simple steps the first time they login at FileFault Encryption for University-Owned Macs.

Q: How does encryption affect my ability to share files with others?
A: Encryption does not affect file sharing. You can share files as usual and be confident that sensitive information is shared securely.

Q: What happens if my University-owned device is lost or stolen?
A: Encryption will protect data from unauthorized access, even if a device is lost or stolen. Report the incident to ITS immediately for further assistance.

Q: Are there any specific steps I need to follow when updating the operating system on an encrypted device?
A: No. ITS will manage any necessary encryption-related adjustments during the update process.

Q: What should I do if I need my BitLocker/FileVault password or recovery key?
A: If you forget your password or need your recovery key, contact ITS.

Q: How can I verify that my device is encrypted with BitLocker/FileVault?
A: For BitLocker, check the status in the Control Panel under "BitLocker Drive Encryption." For FileVault, check the status in System Preferences under "Security & Privacy."

Q: I would like technical information about FileVault or BitLocker.
A: For technical information please review the official documentation for FileVault and BitLocker.

If you need assistance before or after device encryption, please contact ITS:

Email: askIT@albany.edu
Call: 518-442-3700
Web: https://www.albany.edu/its