Full Disk Encryption

Settings > System > About > Listed under Windows Specifications 

Which version of Windows operating system am I running?

Example from Windows 10:

Enabling BitLocker will require administrator privileges. If you encounter any difficulties with these instructions, contact the CWRU Help Desk or visit the [U]Tech CARE Center for assistance.

OIS recommends that you use a standard user account for all day-to-day activities and elevate to admin privileges only when needed. This process can be performed from a standard user account and will prompt for privilege elevation when needed.

You can use your computer while the drive is being encrypted, but you will need to reboot the computer once the encryption process is complete.

Instructions to turn on device encryption for Windows 10 and 11

For planned updates, hardware changes, or configuration changes, there is an option in the BitLocker menu to suspend BitLocker but not turn it off. Turning off BitLocker is not recommended for temporary situations, as it will decrypt the drive and require the entire process to be repeated to be turned back on.

When you set up BitLocker, you will need to choose a recovery option in the event you:

1. With TPM chip: forget your user account password

2. Without TPM chip: lose the USB startup key or forget the decryption PIN

3. Upgrade the operating system

4. Move the encrypted drive to a new computer

5. Install a new motherboard

6. Change the boot configuration settings

7. Update the computer BIOS

Recovery options: 

1. Plaintext recovery key
   1. BitLocker can generate a plaintext recovery key that can be typed in manually during recovery.
   2. Save to a file and print out. Store the printout in a secure location, such as a locked drawer or cabinet.
   3. Save to a USB. Store the USB in a secure location, such as a locked drawer or cabinet.
2. Microsoft Account
   1. You can access your recovery key options at any time through the BitLocker main menu.
   2. If you ever regenerate the recovery key, make sure you update all of your recovery key backups.

Enabling FileVault will require administrator privileges.

ISO recommends that you use a standard user account for all day-to-day activities and elevate to admin privileges only when needed. This process can be performed from a standard user account and will prompt for privilege elevation when needed.

Instructions to use FileVault to encrypt your Mac startup disk

FileVault will encrypt the files for all users of the computer; each user will be prompted to enter their password during setup. If a user is not enabled in FileVault, they will not be able to log in or access their data. User accounts that you add after turning on FileVault are automatically enabled.

When you set up FileVault, you will need to choose a recovery option in the event you forget your account password.

Recovery options: 

1. Plaintext recovery key

   1. FileVault can generate a plaintext recovery key that can be typed in manually during recovery.

   2. The key can be copied into a file and printed out. Store the printout in a secure location, such as a locked drawer or cabinet.

2. iCloud
   1. If you store your recovery key in your iCloud account, there's no guarantee that Apple will be able to give you the key if you lose or forget it. Not all languages and regions are serviced by AppleCare or iCloud, and not all AppleCare-serviced regions offer support in every language.

If you want to change the recovery key used to encrypt your startup disk, turn off FileVault in Security & Privacy preferences. You can then turn it on again to generate a new key and disable all older keys. Make sure you update all your recovery key backups.