Encryption

Except when absolutely neccessary, do not take personal and confidential information off campus. Whenever personal and confidential information is taken off of Queen's campus, it should be encrypted.

Information can be accessed from off campus using any of the following services:

 

• ITServices provides the ability to access your sensitive data from off campus as long as you have an Internet connection.
  • Queen's Webmail (Undergraduate) and Outlook Web App (Staff & Faculty) allows secure access to your Queen's email from off campus. Please note that in order to access archived email, your email client must be configured appropriately.
  • QShare is a secure data storage application that allows access from off campus.
  • Other Queen's applications can be accessed using the Windows Remote Access service.
• If you are travelling to a location that does not have Internet access and you need to have access to personal and confidential information, store only the files which are absolutely necessary on an encrypted USB key. Encrypted USB keys are available at the Campus Computer Store.


• If personal and confidential information must be stored directly on a desktop or laptop, store only the files which are absolutely neccessary using an encryption method (see below). ITServices recommends using both file and disk level encryption solutions to ensure optimal data security.

Encryption Methods (By Operating System)

---

 

Windows 7 Enterprise & Ultimate

 

• Built-in Encryption
  
  
  • Secure your computer at the disk level by using the built-in BitLocker software. Please see our Windows 7 Bitlocker Tutorial for more information.
  • Once you have secured your disk using BitLocker create a folder where all of the sensitive data will be stored. 
    
    

    *NOTE* It is good practice to store all sensitive data in one location. It will make it much easier to secure and keep track of the data.
    
    

  • Copy the sensitive data to your computer via a secure USB key or direct connection to the Queen's network.
  • Use Windows Encrypting File System (EFS) to secure the data at the at the file level. Please see our Windows 7 EFS Tutorial for more information.
    
    

    *NOTE* It is very important to follow the EFS instructions exactly or risk losing access to your sensitive data.

• Third-Party Encryption (Please note that these products are supported by the software vendor)
  
  
  • TrueCrypt is a free encryption solution and can be found here: http://www.truecrypt.org/

Windows Vista Enterprise & Ultimate

 

• Built-in Encryption
  
  
  • Secure your computer at the disk level by using the built-in BitLocker software. Please see our Bitlocker Tutorial for more information.
  • Once you have secured your disk using BitLocker create a folder where all of the sensitive data will be stored. 
    
    

    *NOTE* It is good practice to store all sensitive data in one location. It will make it much easier to secure and keep track of the data.
    
    

  • Copy the sensitive data to your computer via a secure USB key or direct connection to the Queen's network.
  • Use Windows Encrypting File System (EFS) to secure the data at the at the file level. Please see our EFS Tutorial for more information.
    
    

    *NOTE* It is very important to follow the EFS instructions exactly or risk losing access to your sensitive data.

• Third-Party Encryption (Please note that these products are supported by the software vendor)
  
  
  • TrueCrypt is a free encryption solution and can be found here: http://www.truecrypt.org/

Windows Vista Home, Business

 

• Built-in Encryption
  
  
  • These versions of Windows do not support BitLocker, Microsoft's full disk encryption software. 
  • EFS is supported in these versions of Windows but since both full disk and file level encryption is recommended, you should choose from one of our recommended third-party solutions instead.
• Third-Party Encryption (Please note that these products are supported by the software vendor)
  
  
  • TrueCrypt is a free encryption solution and can be found here: http://www.truecrypt.org/

Windows XP Pro

 

• Built-in Encryption
  
  
  • These versions of Windows do not support BitLocker, Microsoft's full disk encryption software. 
  • EFS is supported in these versions of Windows but since both full disk and file level encryption is recommended, you should choose from one of our recommended third-party solutions instead.
• Third-Party Encryption (Please note that these products are supported by the software vendor)
  
  
  • TrueCrypt is a free encryption solution and can be found here: http://www.truecrypt.org/

Mac OS X (10.4 and up)

 

• Built-in Encryption
  
  
  • Mac OS offers FileVault which encrypts an entire user's account. For more information, follow the link setting up FileVault on your Mac.
    
    

    *Note* If you use FileVault, this will disable all mapped network drives and printers on that account. If you rely on shared network resources, this solution is not for you.

  • Mac OS also offers the ability to create encrypted disk images. These can be created through Disk Utility and then used as "containers" to hold your sensitive data. For more information, follow the link setting up an encrypted disk image.
• Third-Party Encryption (Please note that these products are supported by the software vendor)
  
  
  • TrueCrypt is a free encryption solution and can be found here: http://www.truecrypt.org/

Help & Support

---

• ITServices offers an Encryption Service to assist users in setting up Windows 7 BitLocker.
• Please contact the IT Support Centre by telephone at 613.533.6666 or fill out the online help form.