Device encryption

Quick Encryption guide (Laptops with TPM Module)

1. Sign in to Windows with an administrator account.
2. Click on Windows Search (Magnifying Glass), enter encryption, and select Manage BitLocker from the results.
3. Select Turn on BitLocker, and then follow the Windows instructions.
4. It is very important that you save at least two copies of the Encryption Recovery Key. We recommend that you print out a copy and store it in a secure location away from your laptop, email a second copy to yourself or save a copy to your Google Drive. Please be aware that if you forget either the device password or encryption recovery key, there is a real risk that you will be unable to access the device and its data. Remember to regularly backup all your files to a safe location as Laptops do fail.  

Full Instructions

1. Click on Search, enter encryption, and select Manage BitLocker the list of results.
2. Turn on Bit-Locker and follow the instructions
3. Should you encounter the following Trust Platform Module message then please stop as your laptop is not compatible, otherwise continue to step 4.
   
   Starting BitLocker
   This device cannot use a Trusted Platform Module. Your administrator must set the “Allow BitLocker without a compatible TPM” option in the “Require additional authentication at start-up” policy for OS volumes
   
   
4. You will be presented with the options on how to unlock your drive at start-up.  Select Enter Password.
5. Use a complex password with at least 8 mixed case alphanumerical characters. Enter the password twice and select next.
6. You are presented with four options on how to back up your recovery key.
   
   *We recommend that you save your recovery key to two locations, such as a file on a USB device, email it to your UCD Email account immediately or save it to Google Drive. You must keep the recovery key safe and accessible but not with your laptop.  This recovery key is the only way you can access your laptop if your device encounters an issue otherwise it will need to be  rebuilt and you will lose any information stored on your device.  
   
   
7. Next, Select the option to “Encrypt used disk space only (faster and best for new PC’s and drives)” and Select Next
8. Select the option “New encryption mode (best for fixed drives on this device)” and Select Next
9. Confirm that the tick box is checked  - “Run BitLocker system check” Select Continue
10. Restart the machine when prompted in order for encryption to begin
11. The BitLocker login screen appears, enter the password that was created in step 6. Press Enter to continue
12. Check the encryption status by going to Manage BitLocker as outlined in step 1.

If you encounter any issues or require assistance, then please go to the (opens in a new window)IT Hub or drop into one of the IT Support centres in Daedalus or Health Science. 

What should you do?

In order to protect your phone or tablet and the data stored on it you should have a look at the security features that are available in your phone. All phones have security settings though the exact options available will differ depending on manufacturer, model and software version. Use whichever features your device offers that provide the best security for your needs:

Password, passcode, or PIN: Setting a password, passcode, or PIN to access your device is generally simple and effective. Use a code that is four digits or longer, and keep it secret, like you do for your email password or passphrase.

Unlock pattern: Some mobile devices let you set unlock patterns that function like PINs. Use a pattern with some complexity (e.g., with at least five points), keep it secret, and protect it from observers. Additionally, be aware that smudges on the face of your device may reveal your pattern to unauthorized users.

Device lockout: Most mobile devices provide a lockout option that can be configured to automatically lock if your phone has not been used for a set period of time 5mins etc.

Auto-wipe: Auto-wipe is similar to the lockout option, but more secure. After several consecutive unsuccessful password, pattern, or PIN attempts, the device will automatically erase (i.e., wipe) all stored data and reset itself to the factory defaults.

Note: When you use the auto-wipe option, make sure to back up your data regularly. Consult your device's documentation for instructions on backing up data.

Encryption: Certain handheld devices are capable of employing data encryption. Consult your device's documentation or online support resources for information about available encryption options.