Faculty and staff members who work with sensitive data at Lehigh, such as confidential student personal or health records, staff personal or employment data (including performance appraisals), and employee identification numbers, should store this information securely on their workstation, laptop, or in a secure location on a network. Client Services recommends that sensitive data be stored on a secure network location (such as a user's H: Drive). In cases where sensitive data needs to be stored or processed on a workstation or laptop, it is recommended that Whole Disk Encryption should be used. Whole Disk Encryption (WDE) is the highest level of encryption and is recommended for users who need to secure an entire hard disk or external storage device. This type of encryption is HIGHLY recommended by LTS because it secures the entire hard disk so users do not need to know where sensitive data files are stored. Lost or stolen devices without proof of WDE could trigger a data breach. Windows 7 Enterprise and Ultimate versions (Bitlocker) and the newer versions of the Macintosh operating system (FileVault) have WDE software built into the operating system. The following operating systems can be encrypted using WDE:
Windows 10 (Enterprise and Ultimate/Pro Versions only) Bitlocker
Macintosh FileVault (OSX Lion and newer)
Students who want to encrypt their computer or files, please see http://www.lehigh.edu/stars.
...
For Windows PCs in the "AD" domain:
For Windows PCs in InTune:
Note: In order to retrieve your key, you must have another means to access this tool other than the primary computer that is locked - such as a smartphone or second computer. If you do not have this, please contact your department computing consultant or the Help Desk at 8-HELP (4357).