Category:Disk Encryption - Revision history

Steve410.cs.jhu.edu at 15:28, 20 December 2017

2017-12-20T15:28:20Z

Steve410.cs.jhu.edu at 15:27, 20 December 2017

2017-12-20T15:27:23Z

Steve410.cs.jhu.edu at 15:27, 20 December 2017

2017-12-20T15:27:02Z

Steve410.cs.jhu.edu at 17:53, 5 May 2016

2016-05-05T17:53:33Z

Steve410.cs.jhu.edu: /* Disk Encryption Passphrases */

2016-03-03T16:00:48Z

Disk Encryption Passphrases

Steve410.cs.jhu.edu at 20:57, 13 January 2016

2016-01-13T20:57:07Z

Steve410.cs.jhu.edu at 20:55, 13 January 2016

2016-01-13T20:55:40Z

Phil.cs.jhu.edu: Created page with "JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, stud..."

2016-01-13T20:48:30Z

Created page with "JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, stud..."

New page

JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other personally identifiable information (PII), and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).

We provide guidance for implementing full-disk encryption on various systems on the following pages:

* [[Linux Disk Encryption]]
* Windows Disk Encryption ''coming soon''
* OSX Disk Encryption ''coming soon''

== Disk Encryption Passphrases ==

The passphrase for your disk should be something long enough that it cannot be guessed, even by a determined computer, but ideally something that you can remember. It should not be the same as your everyday password for your computer. (It's okay to use the same passphrase for your disk encryption and your root/administrator account, assuming that you primarily use <tt>sudo</tt> or similar privilege escalation tools rather than <tt>su</tt> (or logging in as root/administrator) to work with administrative permissions.) If you need to write your passphrase down to remember it, keep it somewhere safe (e.g. your wallet) and protect it in the same way that you would protect the key to your office or home. Do not store it anywhere near your computer.

One method for generating long but reasonably memorable passphrases is [http://world.std.com/~reinhold/diceware.html Diceware].

[[Category:Security]]

@@ Line 5: / Line 5: @@
 Whiting School's central IT group (WSE) has put together an overview of JHU's disk encryption requirements at:  [http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption]
-We provide guidance for implementing full-disk encryption on various systems on the following pages:
+Some guidance for implementing full-disk encryption on various systems on the following pages:
 * [[Linux Disk Encryption]]

@@ Line 1: / Line 1: @@
-:JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted.  This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects.
+JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted.  This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects.
-:Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).
+Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).
 Whiting School's central IT group (WSE) has put together an overview of JHU's disk encryption requirements at:  [http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption]

← Older revision		Revision as of 15:27, 20 December 2017
Line 1:		Line 1:
−	JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).	+	:JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects.
		+
		+	:Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).

	Whiting School's central IT group (WSE) has put together an overview of JHU's disk encryption requirements at: [http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption]		Whiting School's central IT group (WSE) has put together an overview of JHU's disk encryption requirements at: [http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption]

← Older revision		Revision as of 17:53, 5 May 2016
Line 1:		Line 1:
	JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).		JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).
		+
		+	Whiting School's central IT group (WSE) has put together an overview of JHU's disk encryption requirements at: [http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption http://wseit.engineering.jhu.edu/get-help/computer-hard-drive-encryption]

	We provide guidance for implementing full-disk encryption on various systems on the following pages:		We provide guidance for implementing full-disk encryption on various systems on the following pages:

← Older revision		Revision as of 20:57, 13 January 2016
Line 1:		Line 1:
−	JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other ''personally identifiable information'' '''(PII)''', and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).	+	JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other [https://en.wikipedia.org/wiki/Personally_identifiable_information ''personally identifiable information'' '''(PII)'''], and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).

	We provide guidance for implementing full-disk encryption on various systems on the following pages:		We provide guidance for implementing full-disk encryption on various systems on the following pages:

@@ Line 9: / Line 9: @@
 == Disk Encryption Passphrases ==
-The passphrase for your disk should be something long enough that it cannot be guessed, even by a determined computer, but ideally something that you can remember.  It should not be the same as your everyday password for your computer.  (It's okay to use the same passphrase for your disk encryption and your root/administrator account, assuming that you primarily use <tt>sudo</tt> or similar privilege escalation tools rather than <tt>su</tt> (or logging in as root/administrator) to work with administrative permissions.)  If you need to write your passphrase down to remember it, keep it somewhere safe (e.g. your wallet) and protect it in the same way that you would protect the key to your office or home.  Do not store it anywhere near your computer.
+* The passphrase for your disk should be something long enough that it cannot be guessed, even by a determined computer, but ideally something that you can remember.
 One method for generating long but reasonably memorable passphrases is [http://world.std.com/~reinhold/diceware.html Diceware].
 [[Category:Security]]

← Older revision		Revision as of 20:55, 13 January 2016
Line 1:		Line 1:
−	JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other personally identifiable information (PII), and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).	+	JHU requires that anyone who stores "sensitive information" on their laptop must ensure that information is encrypted. This includes, among other things, financial data, student records, employment records, social security numbers, other ''personally identifiable information'' '''(PII)''', and certain research data involving human subjects. Sensitive information might come from a variety of sources, including email sent to you. Consequently, we recommend that every computer used for Department work (administrative, class-related, research, or other) make use of full-disk encryption, especially if that computer ever resides in an unsecured environment (e.g. a laptop you ever take out of your office, or a desktop located in a room to which multiple people have access).

	We provide guidance for implementing full-disk encryption on various systems on the following pages:		We provide guidance for implementing full-disk encryption on various systems on the following pages: