University of Utah Cybersecurity Program Disk Encryption

Owned by Robert White
Last updated: Nov 28, 2023
3 min read

Recent policy changes state “All devices storing, processing, creating, or transmitting University data, where technically feasible, shall be Encrypted”.

Table of Contents

Policy Reference

If you would like to learn more. You can read the policies below

Policy 4-004: University of Utah Information Security Policy

Rule R4-004C: Data Classification and Encryption

Windows Disk Encryption - “Bitlocker”

Encryption Process

Disk Encrypts in the background and should not disrupt anything.

Once the process is complete there will be a lock icon on your local disk that will indicate that it is protected by Bitlocker Encryption.

Bitlocker enabled drive example

Mac disk encryption steps [FileVault 2]

Once the encryption policy is applied to your computer, the next time you restart you will see the following messages.

Log in as usual

 

Some things you may notice with disk encryption enabled

It’s rare there are any problems with disk encryption. Below are the few items we have noticed in testing.

Windows - Bitlocker Recovery Mode

Once Bitlocker is enabled some very rare uncommon changes to the computer can trigger a “Bitlocker Recovery” that requires a key to unlock. In the event that this occurs please call US-IT at 801-587-2297 for assistance.

MacOS differences after FileVault is enabled

  • When you restart or shutdown and startup, your computer will take about a minute or so to sign in. This is normal. When you restart and sign in, you are decrypting the encrypted drive. You won’t notice this, if your screen is locked from going to sleep or if you close the lid on your laptop and need to log in. That will be as fast as it has been.

  • If you restart your computer, while connected to a docking monitor, you will need to unplug and re-insert the USB-C cable for your docking monitor after logging into your computer before it will work.