•  Whole Disk Encryption Frequently Asked Questions (FAQ)

The CELO project is focused on the protection and privacy of BGSU related data and intellectual property.  The use of whole disk encryption to secure and protect data is an important phase of this project.  

As whole disk encryption is deployed to faculty and staff devices, key points to be aware of regarding this implementation include:  

• encryption is the transformation of data into a form that is unreadable to anyone who does not have the decryption key
• whole disk encryption is the encryption of an entire disk, whether it is associated with a desktop or laptop - this initial phase of the project will focus on the primary disk used by each machine and future phases will address other forms of storage such as flash drives
• the software BGSU will be using for whole disk encryption is from PGP Corporation (http://pgp.com)
• all University owned, asset tagged devices will be equipped with software to provide whole disk encryption - laptops will the the first area of focus for installation
• Windows devices will receive encryption software prior to Macintosh systems
• once a machine is utilizing whole disk encryption, the user will enter their MyBGSU password at the time of login to decrypt the entire disk, the disk will once again be encrypted when the user shuts down the system
• users will see a PGP ion in the system tray that contains features which will be addressed at a later time, such as encrypting flash drives or other portable media
• it is important to remember that while a disk is decrypted, information on the disk is vulnerable - from the time a user enters their MyBGSU password to access their system until the system is shut down again the information on the hard drive is decrypted and vulnerable to theft or compromise
• security of information is an important responsibility for each user of BGSU data - each individual with a BGSU account agreed to this responsibility when receiving their account - Network and Computer policies:  http://www.bgsu.edu/downloads/cio/pfile9602.pdf
• Technology Support Specialists (TSS's) will be deploying PGP software to University owned machines

The TSS's will be working through department contacts in order to arrange the installation of this software to University owned devices.  The process will be completed in a manner similar to the annual desktop install procedure.  The individual to whom the device is assigned must be present at the time of installation.  While completing the PGP encryption install, the TSS may also complete installation of the Altiris inventory agent and new barcode label.  Information about the Altiris inventory software and examples of the new barcode label may be found on the web at:  http://www.bgsu.edu/offices/cio/page25936.html.

These components are being implemented as layers of protection for the University's technology infrastructure.  Even with many layers of protection in place, the security of data is only as good as the practices of each individual user.  It is imperative that each person follows best practices in using, storing,and securing BGSU data and intellectual property.

Please direct any questions regarding the Whole Disk Encryption phase of the CELO project to cio@bgsu.edu.

Return to CELO home page