Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

There is already an extensive Wiki site managed by campus ITS to provide assistance to all users (TSCs, students, faculty, staff) with information on encryption policy and how to encrypt systems with UT Austin Approved Encryption Methods

...

For additional questions or assistance, please contact ECE-IT at help@ece.utexas.edu

Encryption Guidelines

If this is your Operating System...Use this encryption solution...
Windows Operating SystemsApproved Encryption Solution
Windows
8.1/
11Not officially released but TPM will be required to run Windows 11
Windows 10 Pro/EnterpriseBitLocker with TPM (preferred) or without TPM (pre-boot authentication-legacy systems only)
Windows
7 Enterprise
8.1BitLocker with TPM
Windows 7 Pro

If the laptop is University-owned, upgrade to Windows 7 Enterprise*
If the laptop is personally-owned, upgrade to Windows 7 Ultimate (campus computer store)
When upgraded, use BitLocker with TPM (preferred)

Windows 7/8 Home

If the laptop is University-owned, upgrade to Windows 7/8 Enterprise*
If the laptop is personally-owned, upgrade to Windows 7 Ultimate/8 Pro (campus computer store)
When upgraded, use BitLocker with TPM (preferred)

Windows VistaIf the laptop is University-owned, upgrade to Windows 7/8 Enterprise*
If the laptop is personally-owned, upgrade to Windows 7 Ultimate (campus computer store)
When upgraded, use BitLocker with TPM (preferred)
. Extended supported by Microsoft until January 10, 2023
Windows 7Remove from Network, Inventory, and Upgrade System
Windows Vista

Remove from Network, Inventory, and Upgrade System

Windows XPRemove from Network, Inventory, and Upgrade System
  • Effective immediately, ALL University-owned devices
(for Windows), will need to
  • should be purchased with a Trusted Platform Module (TPM)
As per departmental policy.Upgrading to Windows 7 Enterprise:  Please note that going from any version of Windows 7 to Windows 7 Enterprise requires a full re-installation, not an upgrade. 
  • Please email help@ece.utexas.edu for unique systems that are being considered.
  • BitLocker note:  To use BitLocker, the device must be equipped with a Trusted Platform Module (TPM) chip, and it must be enabled.
  • Linux Encryption with LUKS:  TPM integration with LUKS is being investigated.
  • Devices without TPM "may" be encrypted with BitLocker, but will require
additional software/hardware requirements and configurations (pre-boot authentication)
  • an exception with the campus Information Security Office (ISO) and ECE IT Office.  Upon approval, recommendations will be made.
Apple Mac Operating SystemsApproved Encryption Solution
Mac OS X 10.
7 "Lion"
14 (Mojave & above)

FileVault 2

Mac OS X 10.6No longer supported by Apple

Linux Operating SystemsApproved Encryption Solution
Redhat 6+
Fedora 9+
Ubuntu 6+
Ubuntu 12.10+

RedHat
CentOS
Ubuntu

Linux Unified Key Setup (LUKS) Encryption
Encrypting partitions of an existing installation with LUKS will most likely require a reinstall of the operating system as this option is only presented to users at install time. You are urged to make certain that you have complete and working backups of all data before beginning this process.