{"id":10382,"date":"2020-03-03T13:35:09","date_gmt":"2020-03-03T18:35:09","guid":{"rendered":"https:\/\/www.bumc.bu.edu\/it\/?page_id=10382"},"modified":"2025-10-17T14:46:06","modified_gmt":"2025-10-17T18:46:06","slug":"encryption","status":"publish","type":"page","link":"https:\/\/www.bumc.bu.edu\/it\/infosec\/safe-computing\/encryption\/","title":{"rendered":"Turn On Encryption"},"content":{"rendered":"

Turning on the encryption that comes with Windows or Apple devices ensures that a theft does not turn into a breach.\u00a0 Patients and research subjects rightly expect us to safeguard their health information.\u00a0 And because encryption is generally free and does not impact computer processing, an unencrypted stolen device often leads to enforcement penalties: https:\/\/www.hhs.gov\/about\/news\/2019\/11\/05\/failure-to-encrypt-mobile-devices-leads-to-3-million-dollar-hipaa-settlement.html<\/a>Encrypting Personal Desktops, Laptops, and Tablets<\/p>\n

Encrypting Managed Devices<\/h2>\n
\n
\n
\n
\n
\n
\n
\n

All new BU managed devices (e.g., desktops, laptops, and tablets) come standard with encryption turned on. \u00a0We are now working with individuals and departments to turn on encryption for older, managed devices.\u00a0 BU Data Protection Standards, Minimum Security Standards require encryption for all managed devices.\u00a0 \u00a0http:\/\/www.bu.edu\/policies\/minimum-security-standards\/<\/a><\/span><\/p>\n

When we start the encryption process, there will be a small impact to performance. \u00a0But there is no impact after the process is complete.\u00a0 <\/span><\/p>\n

We have found that it generally takes a few hours to overnight for the encryption process to complete.\u00a0 So, we generally recommend starting the process when you end your work day (e.g., 5:00 p.m.)\u00a0 \u00a0<\/span><\/p>\n

Although it is very rare, there is a small chance that data will be corrupted during the encryption process.\u00a0 So, we recommend placing a copy of your important files and folders in BU Microsoft OneDrive.\u00a0 We have instructions here: https:\/\/www.bumc.bu.edu\/it\/support\/storage-options\/bu-onedrive\/backup-local-folders-to-onedrive-windows\/<\/a>\u00a0<\/span><\/p>\n

To start the encryption process or to confirm your device is encrypted, send an email to bumchelp@bu.edu<\/span><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n

Follow the instructions below to turn on encryption for your personal devices<\/p>\n

Encrypting Personal Phones<\/h2>\n

If you bought your phone in the last two years and passcodes or biometric scans are required to unlock it, then encryption is automatically turned on. If you bought your phone more than two years ago, then it is likely you have to manually turn on encryption by going to settings.<\/p>\n

Encrypting Personal Desktops, Laptops, and Tablets<\/h2>\n

1. Check to see if your personal device has encryption enabled.<\/h3>\n

Windows computer<\/h3>
<\/p>\n
    \n
  1. On a Windows computer, below are steps to find if you have BitLocker enabled. Note: <\/strong>if you do not see that you have BitLocker on your computer, then you either have an older version of Windows or Windows 11 Home. Please update it to Windows 11 Pro; there may be a cost to upgrade from Windows 11 Home.\n
      \n
    1. Click on Windows icon on the bottom-left screen
      \n\"\"<\/a><\/li>\n
    2. Type “Manage BitLocker” and click the result shown below.
      \n      \"\"<\/a><\/li>\n
    3. If enabled, you will see “Window (C:) BitLocker on”.
      \n      \"\"<\/a><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

      <\/div>\n<\/div>\n\n

      Apple computer<\/h3>
      <\/p>\n
        \n
      1. On an Apple computer, below are steps to find if you have FileVault enabled\n
          \n
        1. Go to the top left corner, click on the Apple icon, then click on \u201cSystems Preferences\u201d.
          \n          \"\"<\/a><\/li>\n
        2. Then click on \u201cSecurity and Privacy\u201d.
          \n          \"\"<\/a><\/li>\n
        3. Then click on “FileVault” tab.
          \n          \"\"<\/a><\/li>\n
        4. If enabled, you will see “FileVault is turned on for the disk Macintosh HD”.
          \n          \"\"<\/a><\/li>\n<\/ol>\n<\/li>\n<\/ol>\n

          <\/div>\n<\/div>\n\n

          <\/h3>\n

           <\/p>\n

          2. If your personal device does not<\/span> have encryption enabled, then follow these steps.<\/h3>\n

          Windows computer<\/h3>
          <\/p>\n

          Enable encryption by following these instructions here: https:\/\/support.microsoft.com\/en-us\/help\/4028713\/windows-10-turn-on-device-encryption<\/a><\/p>\n

          Note:\u00a0As you\u2019re going through the steps, be sure to save your recovery key by printing\/writing it on paper and save it to a cloud location of your choice.\u00a0<\/strong><\/p>\n