Workstation Hard Disk Encryption

Encryption is the process of converting or scrambling data and information into an unreadable, encoded version that can only be read with authorized access. Encryption is a widely used security tool that can prevent the interception of sensitive data, either while stored in files or while in transit across networks.

Encryption on Cal Poly devices is performed using native tools for each major operating system:

• FileVault for MacOS and

• BitLocker for Windows. 

Each technology is managed by different external tools and controlled by ITS.

Once a device is encrypted, it requires either an authenticated login or a recovery key.  When a device is initially encrypted, a recovery key is created and saved to the management server.

Please contact the Cal Poly Service Desk or create a support request ticket to have an administrator contact you for assistance.

• External disks are different for each platform:

  • MacOS does not encrypt external disks by default and will only enforce internal disk protection. 

  • Windows requires all disks to be encrypted to have data written to them. 
    For instance, if you insert a USB drive into a Cal Poly Windows device it will require you to encrypt the device prior to writing any data to it.  You can opt to not encrypt the device, but it will remain read-only.

• Once an external device is encrypted, it is recommended to save your secure passphrase to LastPass for future retrieval.

• To encrypt external devices on a Mac you will need to utilize Disk Utility. 

• Some devices may be allowed as an exception for external disks. 

  • To acquire an exception, please create a ticket and each case will be reviewed by the Information Security Office.

• The official recommendation for file sharing on campus is via Microsoft OneDrive