Encryption

There is already an extensive Wiki site managed by campus ITS to provide assistance to all users (TSCs, students, faculty, staff) with information on encryption policy and how to encrypt systems with UT Austin Approved Encryption Methods

General UT Austin Computer Encryption

Approved Encryption Methods for Laptops and Desktops

Approved Encryption Methods for Handhelds

Apple iOS Hardening Checklist

Google Android Hardening Checklist

For additional questions or assistance, please contact ECE-IT at help@ece.utexas.edu

Encryption Guidelines

If this is your Operating System...
Use this encryption solution...
Windows Operating Systems Approved Encryption Solution
Windows 8 Pro/Enterprise BitLocker with TPM (preferred) or without TPM (pre-boot authentication-legacy systems only)
Windows 7 Enterprise BitLocker with TPM
Windows 7 Pro

If the laptop is University-owned, upgrade to Windows 7 Enterprise*
If the laptop is personally-owned, upgrade to Windows 7 Ultimate (campus computer store)
When upgraded, use BitLocker with TPM (preferred)

Windows 7/8 Home

If the laptop is University-owned, upgrade to Windows 7/8 Enterprise*
If the laptop is personally-owned, upgrade to Windows 7 Ultimate/8 Pro (campus computer store)
When upgraded, use BitLocker with TPM (preferred)

Windows Vista

If the laptop is University-owned, upgrade to Windows 7/8 Enterprise*
If the laptop is personally-owned, upgrade to Windows 7 Ultimate (campus computer store)
When upgraded, use BitLocker with TPM (preferred)

Windows XP Remove from Inventory, Upgrade System
 
  • Effective immediately, ALL University-owned devices (for Windows), will need to be purchased with TPM.  As per departmental policy.
  • Upgrading to Windows 7 Enterprise:  Please note that going from any version of Windows 7 to Windows 7 Enterprise requires a full re-installation, not an upgrade. 
  • BitLocker note:  To use BitLocker, the device must be equipped with a Trusted Platform Module (TPM) chip, and it must be enabled.
  • Devices without TPM "may" be encrypted with BitLocker, but will require additional software/hardware requirements and configurations (pre-boot authentication)
 
Apple Mac Operating Systems
Approved Encryption Solution
Mac OS X 10.7 "Lion" & above

FileVault 2

Mac OS X 10.6 FileVault - Home Folders
Linux Operating Systems Approved Encryption Solution

Redhat 6+ 
Fedora 9+ 
Ubuntu 6+ 
Ubuntu 12.10+

Linux Unified Key Setup (LUKS) Encryption
 
Encrypting partitions of an existing installation with LUKS will most likely require a reinstall of the operating system as this option is only presented to users at install time. You are urged to make certain that you have complete and working backups of all data before beginning this process.