Encryption

There is already an extensive Wiki site managed by campus ITS to provide assistance to all users (TSCs, students, faculty, staff) with information on encryption policy and how to encrypt systems with UT Austin Approved Encryption Methods

For additional questions or assistance, please contact ECE-IT at help@ece.utexas.edu

Encryption Guidelines

If this is your Operating System...	Use this encryption solution...
Windows Operating Systems	Approved Encryption Solution
Windows 8.1/10 Pro/Enterprise	BitLocker with TPM (preferred) or without TPM (pre-boot authentication-legacy systems only)
Windows 7 Enterprise	BitLocker with TPM
Windows 7 Pro	If the laptop is University-owned, upgrade to Windows 7 Enterprise* If the laptop is personally-owned, upgrade to Windows 7 Ultimate (campus computer store) When upgraded, use BitLocker with TPM (preferred)
Windows 7/8 Home	If the laptop is University-owned, upgrade to Windows 7/8 Enterprise* If the laptop is personally-owned, upgrade to Windows 7 Ultimate/8 Pro (campus computer store) When upgraded, use BitLocker with TPM (preferred)
Windows Vista	If the laptop is University-owned, upgrade to Windows 7/8 Enterprise* If the laptop is personally-owned, upgrade to Windows 7 Ultimate (campus computer store) When upgraded, use BitLocker with TPM (preferred)
Windows XP	Remove from Network, Inventory, and Upgrade System

Effective immediately, ALL University-owned devices (for Windows), will need to be purchased with TPM.  As per departmental policy.
Upgrading to Windows 7 Enterprise:  Please note that going from any version of Windows 7 to Windows 7 Enterprise requires a full re-installation, not an upgrade. 
BitLocker note:  To use BitLocker, the device must be equipped with a Trusted Platform Module (TPM) chip, and it must be enabled.
Devices without TPM "may" be encrypted with BitLocker, but will require additional software/hardware requirements and configurations (pre-boot authentication)

Apple Mac Operating Systems	Approved Encryption Solution
Mac OS X 10.7 "Lion" & above	FileVault 2
Mac OS X 10.6	No longer supported by Apple
Linux Operating Systems	Approved Encryption Solution
Redhat 6+ Fedora 9+ Ubuntu 6+ Ubuntu 12.10+	Linux Unified Key Setup (LUKS) Encryption

Encrypting partitions of an existing installation with LUKS will most likely require a reinstall of the operating system as this option is only presented to users at install time. You are urged to make certain that you have complete and working backups of all data before beginning this process.