Enterprise Whole-Disk Encryption Service by ITS

Information Technology Services, part of University of Texas at Austin, launched the Enterprise Whole-Disk Encryption service. The service provides a centrally funded and managed encryption solution for faculty and staff to protect sensitive digital data, including research data, that is stored on portable devices.

“Mobile computers allow faculty the greatest flexibility for their research needs. Unfortunately, the portable nature of laptops and other external media increases the possibility of loss or theft. This service allows faculty peace of mind knowing their research data is safe,” said Cam Beasley, Information Security Officer at the University of Texas at Austin.

Benefits of the service include:

• Data-at-rest encryption. All data remains encrypted, including the operating system, when the computer is off. (Please note that computers are not protected if they are in sleep or standby mode.)
• Management tools. Desktop support staff can manage users and encryption options for devices.
• Recovery of data. Passwords can be reset and data recovered if the startup password is lost or forgotten.
• Mitigated impact in the event of loss or theft. Unauthorized individuals are unable to access data stored on the computer if it is lost or stolen.
• Windows Vista and XP compatibility. Windows Vista computers cannot use BitLocker at the same time.

The ITS Help Desk will be providing full support for faculty interested in this service, whether they have dedicated support staff for their other computer needs or not.

Campus IT groups have played an important role in testing and providing valuable input for the implementation of this service. Technical staff in the McCombs School of Business and the Cockrell School of Engineering, in particular, participated in testing the service. Originally launched as the ‘SafeBoot’ project, Enterprise Whole Disk encryption provides a mechanism for faculty and staff to protect their portable devices and comply with UT System Security Practice Bulletin #1. During the course of the project, SafeBoot was purchased by McAfee. While the installer and client are still called ‘SafeBoot’ at present, the product is now called McAfee Endpoint Encryption. In an effort to avoid confusion, ITS has named the service ‘Enterprise Whole-Disk Encryption.’