---
title: "Workstation Hard Disk Encryption"
canonical: "https://tech.calpoly.edu/space/CPKB/1959624705/Workstation%20Hard%20Disk%20Encryption"
format: markdown
---
Workstation hard drive encryption policies require all connected storage to be encrypted so that data cannot be accessed from a computer without the proper keys or user authentication. Encryption policies apply to both Windows and Mac computers and are managed by ITS.

> ✅ Looking for help with a locked computer or encrypting an external/USB drive?   
> ✅ **[See Disk Encyption Help](https://calpoly.atlassian.net/wiki/spaces/CPKB/pages/2118451201)**

> ℹ️ - Due to the nature of our work at Cal Poly, university-owned **computers may have access to sensitive data **dependent on a user’s role.
> ℹ️ - **It is the responsibility of Cal Poly to safeguard any data that is accessed and stored locally on all computers** and protect that data from misuse.


<details>
<summary>What is encryption?</summary>

Encryption is the process of converting or scrambling data and information into an unreadable, encoded version that can only be read with authorized access. **Encryption is a widely used security tool that can prevent the interception of sensitive data**, either while stored in files or while in transit across networks.
</details>

<details>
<summary>How is encryption enforced?</summary>

Encryption on Cal Poly devices is performed using native tools for each major operating system:

- FileVault for MacOS and
- BitLocker for Windows.

*Each technology is managed by different external tools and controlled by ITS. *
</details>

<details>
<summary>How is encryption managed locally?</summary>

Once a device is encrypted, it requires either an authenticated login or a recovery key.  When a device is initially encrypted, a recovery key is created and saved to the management server.
</details>

### Windows Encryption Resources

- [BitLocker overview](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/)
- [BitLocker FAQ](https://learn.microsoft.com/en-us/windows/security/operating-system-security/data-protection/bitlocker/bitlocker-overview-and-requirements-faq)
- [How to Encrypt an External/USB Flash drive](https://www.microsoft.com/en-us/microsoft-365-life-hacks/privacy-and-safety/how-and-why-to-encrypt-usb-flash-drive)
- [Microsoft 365 - OneDrive](https://www.microsoft.com/en-us/microsoft-365/onedrive/online-cloud-storage)

### MacOS Encryption Resources

- [How does FileVault encryption work on a Mac?](https://support.apple.com/guide/mac-help/how-does-filevault-encryption-work-on-a-mac-flvlt001/13.0/mac/13.0)
- [Encrypt Mac data with FileVault](https://support.apple.com/guide/mac-help/encrypt-mac-data-with-filevault-mh11785/13.0/mac/13.0)
- [Encrypt and protect a storage device with a password in Disk Utility on Mac](https://support.apple.com/guide/disk-utility/encrypt-protect-a-storage-device-password-dskutl35612/mac)

---