Device Encryption


An ITCS technician will respond to support requests during regular operating hours.

 Phone: 252-328-9866 / 800-340-7081

Submit a Ticket


Submit this request to have encryption enabled on your Android, iOS or Windows tablet, Linux, Mac or Windows desktop/laptop, Thin Client or USB hard drive or USB flash drive.

Device encryption scrambles data files and renders them unreadable to everyone except an authorized user. Therefore, if your device is lost or stolen, your data is secure. This not only protects the information from theft, but also you and the university from unnecessary liability

The information on this page is for encrypting any type of data. See these guidelines for the specifics of sensitive data storage and protection, includi ng storage approvals, file disposal and security.

Available To

Faculty, Staff, Students, Researchers

Get Started

Submit this request to have encryption enabled on your Android, iOS or Windows tablet, Linux, Mac or Windows desktop/laptop, Thin Client or USB hard drive or USB flash drive.

Features and Benefits

ECU Devices

ECU-purchased MacBook laptops and desktops. FileVault 2 is enabled. See the Apple Support article, “Use FileVault to encrypt the startup disk on your Mac.”

ECU-purchased Windows laptops. Dell Encryption software is enabled. Recovery keys are managed through Dell Encryption.

You can also submit this request to have encryption enabled for your Linux, Mac or Windows laptop.

Personal Devices

Important! The recovery keys for personal systems should NOT be saved on the same drive that is encrypted. Hardware changes, BIOS updates, and even some software updates can cause a lockout which will require the recovery key. If it is saved on the locked drive, you do not have access to it. Piratedrive is a secure choice for storing encryption keys as well as printing a copy and saving in a secure location.

Also important! It is a best practice to back up your data before applying encryption in case there is a failure during the process and data is lost.

BitLocker Drive Encryption. Included as part of Windows 7 Ultimate or Enterprise and Windows 8.1/10 Professional or Enterprise editions, BitLocker encrypts an entire drive. A drive can be password-protected, decrypted or BitLocker can be temporarily suspended at any time by the authorized user. See these Bitlocker resources from Microsoft.

Mac FileVault 2. Encryption is built-in. Available from the Security & Privacy pane of System Preferences. Click the FileVault tab in the pane to enable or disable FileVault. See this support article from Apple.

WinZip encryption software. WinZip compresses and encrypts files for sharing. The licensed version of WinZip Pro encrypts files using 256-bit AES encryption. WinZip Pro can be purchased from the WinZip website in single-user or multi-user licensing formats (ECU has no site license for this software).

External storage devices. Bitlocker To Go is available for Windows devices. Disk Utility encrypts external media on a Mac.

Mobile Devices

Submit this request to have encryption enabled for your Android, iOS or Windows tablet.

Personal mobile devices are usually encrypted if a PIN or other method of screen lock is enabled. Please see the Related Articles section on this page for specific ECU guidelines on encrypting personal mobile devices.

Storage Devices

Flash Drives. ITCS recommends Ironkey hardware-encrypted flash drives for portable storage. If the flash drive is lost, the data is protected by AES hardware encryption. Ironkey flash drives can be purchased through Staples.

Please Note: Flash drives from state contract vendors (Staples, Tiger Direct, CDWG, etc.) must be blank (without data pre-installed). To learn more about flash drives purchase guidelines, visit the Tech Purchasing website.

What About Email?

Email encryption is required when sending sensitive data OUTSIDE ECU. To learn how to send encrypted email, visit the Email Encryption service page.

Related Policies and Guidelines

Guidelines for Protecting Sensitive Data


No fees are associated with this service.

Submit a Ticket

Related Articles (3)

Configure Dell Encryption software for your Windows computer.
Questions answered about management of an encrypted ECU-owned faculty/staff computer.
All mobile devices used to access ECU email or other business functions require the device meet security requirements and be encrypted. This article outlines how to enable encryption on your personal mobile device.


Service ID: 11914
Thu 1/28/16 10:07 AM
Thu 6/23/22 10:20 AM
Service Owner
Desktop Technologies Support-West