Hard Disk Encryption
The University provides secure platforms for data storage to keep data backed up regularly and safe from unauthorized access. However, there are situations where data is stored on desktops or laptops to support work, and hard disk encryption provides security for such data.
Encryption on a computer's hard disk makes it difficult to access the data stored on the computer without the right access privileges or decryption keys. If a device is lost or stolen or there is an online threat to gain unauthorized access, the data stored on the device is protected due to encryption. This will reduce the possibility of a data breach and protect individuals and the University from the resulting consequences.
Encryption works by scrambling real data and converting it to a non-readable format. The University provides full hard disk encryption which works by encrypting a computer's hard disk including files, the operating system, and applications on the computer.
Limitations
Hard disk encryption only protects files while they are on your computer. Hard disk encryption will not apply to files:
- shared via email;
- transferred to or stored in shared network drives or cloud platforms.
An encrypted file will no longer be encrypted when it leaves your hard disk unless transferred to another encrypted hard disk or an encrypted USB drive.
Encryption will not protect data from unauthorized access where an encrypted computer is left unlocked and unattended. Anyone close to the computer can access the data stored on it.
Note: Information on how to maintain file encryption for different use cases will be available in due course.
Operating systems and approved encryption software
The following are the supported operating systems for hard disk encryption:
- Windows OS 10 and up: Dell Encryption
- Mac OS 10.14.6 and up: Mac FileVault. See .
Data Backup
Usually, hard disk encryption will not impact how you access your files or corrupt your files, but it is important that you back up your data before enabling hard disk encryption. To learn how to back up your files or to get support, email helpdesk@neiu.edu or follow the .
Encryption on employee-owned computers
Enabling hard disk encryption to protect data is good practice at home or work. If you wish to enable encryption on your personal computer, please see the user guide below for Windows and Mac computers:
- Windows:
- Mac:
FAQs
Windows Computers
A few minutes between 5-10 minutes. After this, your computer will reboot or you may be asked to restart your computer. The encryption process will start after the computer is restarted.
Typically, it takes between 3 - 5 hours depending on the volume of files on your computer.
Like any software installation, shutting down or restarting your computer will stop the encryption software installation and you will need to start the process again.
No. You will not be able to work for 5-10 minutes during the installation.
Yes. The process will run in the background and should not affect your work.
Encrypting data does not restrict the ability of a user to view, create, change, rename, copy, move, share, or delete their files and folders as usual.
No. Encryption is limited to the hard disk or USB drive being encrypted. Files on cloud platforms will not be impacted.
It depends:
Yes, if the encrypted files are shared with USB drives. When transferring files from an encrypted hard disk to a USB drive, you will be prompted to encrypt the USB before files can be transferred.
No. Encrypted files shared via email or transferred to the shared network drives/folders or Google Drive will lose encryption. Encrypted files will only remain encrypted when they are stored on an encrypted hard disk or USB drive.
MAC Computers
After about a minute, the computer will restart. When you log into the computer, it will ask you to confirm encryption. The entire process should not take longer than 2-3 minutes to complete.
No. You will not be able to work during the installation.
Yes. The process will run in the background and should not affect your work.
Encrypting data does not restrict the ability of a user to view, create, change, rename, copy, move, share, or delete their files and folders as usual.
Please contact helpdesk@neiu.edu or (773) 442-4357 and a technician will check if your Mac is currently enrolled in our Mobile Device Management system.
There are several possible reasons why you do not have the FileVault Disk Encryption - NEIU:
Did you previously run the Novell Migration & Login Improvements? If you haven’t, you may need to do so. It can be run via the Self-Service application.
Are you logging into the computer with a generic account or is a generic account currently on your computer? You can check by going into the System Preferences / Settings —> Users & Groups. The generic account may be named neiustaff. If so, please contact the Help Desk and a technician will either rename the account or, if the account is not being used, will remove the account.
Your Mac may also need to be re-enrolled into our Mobile Device Management system. Please contact the Help Desk to inspect or troubleshoot the issue
It is essential that the Self-Service process is used. This process will escrow a digital security key with our management system and allow the Service Desk technicians to troubleshoot technical issues and assist with unlocking the computer if the password is forgotten.
After your computer has been encrypted, the computer will prompt you to enter your computer password before completing boot up. If your computer password is the same as your NetID password, the computer will automatically log you into the NEIU network after you log into the computer.
If the two passwords are different (not synchronized), the computer will prompt you to synchronize the two by entering both your NetID password and then your computer password. This will change your computer password to match your NetID password.
You can share your files with others but any files which leave your computer will no longer be encrypted.