It is required per IT policy 5.10 that our computers be encrypted for the security of our systems and data. I have completed this process on computers currently in use and this encryption will be included on all new computers going forward as well. The program used to encrypt all Windows computers is called Bitlocker. (MacBooks use FileVault.)
With this encryption now enabled on your computer, be aware that it’s possible that you may run into an issue where Bitlocker asks for a recovery key in order for you to log into your computer.
Please be sure to read the information below (“Bitlocker is asking for a recovery key!”) on how to prevent this and how to deal with this, if it happens to you.
To read the Cornell policy see: https://it.cornell.edu/policy/policy-510-information-security, full policy: https://www.dfa.cornell.edu/sites/default/files/vol5_10.pdf (page 17)
What is encryption?
Encryption is the process of scrambling data to make it unreadable to anyone who does not possess the proper key to unscramble it.
When you log on to an encrypted computer, your drive is decrypted. When you shut down your system, the drive is re-encrypted. This means that, when your device is powered off, your disk is protected against use by others.
How does this affect you?
If you have a Dell Latitude laptop or a Dell Optiplex workstation, nothing will look or act differently with your computer on a typical day to day basis. (Read info below about Bitlocker asking for a recovery key.)
If you do not have a Latitude or Optiplex, you will have a small micro USB drive in one of your USB ports that MUST stay inserted at all times in your computer. If it’s removed, you will not be able to start your computer unless the USB is reinserted or you enter the Bitlocker recovery key.
Bitlocker is asking for a recovery key!
If you turn on your computer one day and Bitlocker is asking for a recovery key (see screenshot below), you’ll need to contact your local IT person, your Executive Director, or your Regional IT manager (me!) for the recovery key. Once you are logged into the computer, you need to schedule a time with me to double check that the encryption is still working properly on your computer.
What caused the computer to ask for a key?
- anything that effects the windows startup or shutdown routine
- hardware changes or failures
- malware
The most important things to remember to avoid Bitlocker encryption issues:
- Properly shut down your computer every night, especially if you plan to travel with your laptop
- NEVER force a shutdown during a Windows Update
- Mark your calendar for the second Tuesday, Wednesday and Thursday of the month – this is when Microsoft pushes out the majority of its windows updates. Give yourself extra time before leaving the office for the updates to install if you need to take your laptop with you
- OR if you put your laptop to sleep for a while, be sure that it is plugged in with the power cable so that it doesn’t improperly shut down
If you have any questions, please don’t hesitate to ask!