Disk encryption

Disk encryption is considered an essential part of keeping your data secure, particularly in the event that your device is lost or stolen. We strongly recommend that alongside the University's endpoint security solution, you set up disk encryption on your devices.

Please note: It is imperative that you securely back up your disk encryption password and recovery keys, as without these you will not be able to decrypt the machine or access the data on it. It is also imperative that you keep your device data securely backed up, to guard against device loss, malfunction, or the loss of decryption keys.

Table of Contents

Information for staff and students:

1. BitLocker for Windows
2. FileVault for macOS
3. Linux Unified Key Setup
4. iOS and Android encryption

Information for local ITSS:

1. Sophos Endpoint Disk Encryption

Information for staff and students

We recommend using one of the following methods of disk encryption on your devices:

Bitlocker for Windows

BitLocker is Microsoft's standard whole disk encryption system for Windows. You can enable it on your system drives as well as on removable disks.

• Further information on BitLocker
• System requirements for using BitLocker
• Further information on device encryption in Windows 10
• Guidance on how to set up BitLocker

FileVault

FileVault is a disk encryption feature for macOS which helps prevent unauthorized access to the information on your startup disk so that unauthorised users can’t access your information.

• Further information on FileVault
• Guidance on how to enable FileVault
• Guidance on how to reset your FileVault recovery key
• Guidance on how to disable FileVault

Linux Unified Key Setup (LUKS)

Linux Unified Key Setup (LUKS) is the standard way of encrypting disks on Linux, often in combination with Logical Volume Management (LVM). It's usually easiest to set up your system drive at installation time rather than afterwards. Modern Linux installers will typically have an option to help you configure this.

• Setting up LUKS on Fedora

iOS and Android 

Protecting your mobile devices is just as important as your laptop or computer. Both Android and iOS have services which allow you to encrypt the data on your device and ensure that your data is secure.

• Encryption services on Android devices
• Data Protection service on iOS

Information for IT Support Staff (ITSS)

Sophos Endpoint Disk Encryption

Please see the following help pages for more information and guidance on setting up Sophos Endpoint Disk Encryption.