Encryption Initiative – UW Madison McAfee Endpoint Encryption (formerly SafeBoot) CTIG – March 20, 2009.

Encryption Initiative – UW Madison

McAfee Endpoint Encryption (formerly SafeBoot)

CTIG – March 20, 2009

Introductions

Phil Saunders, LAN ManagerOffice of the Registrar

Division of Enrollment Services

333 East Campus Mall– open house soon!

Why are we here?

Effective Practices for Restricted Data HandlingRisk Reduction Strategy

• Find It: Determine if you store or process restricted data.

Are you at Risk?

OR

ORTHEN

Risk Reduction Strategies Risk Assessment

Why Encryption?

It’s 3 a.m. . . .

Do you know where your notebooks are?

Full Disk Encryption protects lost devices- and you - from data loss and litigation!

Would you trust . . .

this guywithyour files?

File and Folder Encryption protects specific data

How doesit work?

File encryption

Think of file encryption as a secret codeA simple

synchronouscode:A=1B=2C=3D=4Etc

A message:20 – 7 – 9 - 6

Folder encryption

Think of folder encryptionas a safe deposit box

Full Disk Encryption

Think of Full Disk Encryptionas a bank vault

How does itreallywork?

File and folder Encryption• Encrypts individual files

or entire folders• Requires authentication

to decrypt and access the files

Full Disk Encryption

• Replaces the master boot recordwith a special pre-boot environment

• Encrypts the entire hard drive• Preboot Authentication plus OS

authentication• Decrypts as files are used

How to choose between Full Disk and File/Folder?

When to use Full Disk EncryptionFull Disk Encryption protects against

lost devices

When to use file/folder

• Need an additional layer of security

• Need portability• Need to support removable media

What isUW Madison

doing?

Laptop/Desktop Encryption Project

Full disk and file/folder encryption for

PC

Mac

Nice if you can get it

AIG BONU

S

Product Selected

Where are we now?

• Installed on about 400-ish computersAdmissions, Financial Aid, ISIS Central, Registrar’s office, (DEM) & UW Survey

• UW Milwaukee purchasing their own licenses and running their own server

• Ready for more participants!

How can I get Involved?

EmailAllen Monette

[email protected]

Linda [email protected]