Encryption Services Description

Protecting information assets and following best practices are essential at the University of British Columbia. At UBC, different encryption services are utilized for different systems.

Mac and Windows machines are encrypted with McAfee Whole Disk Encryption (WDE), which provides a user-friendly encryption service with centralized management and high performance encryption.

UBC currently uses Symantec PGP full disk encryption for Linux systems. Please contact the UBC IT Service Centre Help Desk directly for more information.

McAfee WDE (Whole Disk Encryption)

McAfee WDE software provides full disk encryption for laptops and mobile devices. Full disk encryption helps prevent the loss of sensitive data, especially in the event of lost or stolen equipment. Advantages of using McAfee WDE include:

  • Enforcing strong access control with pre-boot authentication
  • Enabling transparent encryption without hindering users or system performance
  • Ensuring consistent protection across all devices

    • McAfee MNE (Management of Native Encryption)

    McAfee MNE manages various functions of Apple's Native FileVault2 and Microsoft's BitLocker encryption package. These include:

  • Managing the encryption state of FileVault2 and BitLocker
  • Key Escrow (stores recovery key securely on the McAfee server)
  • Tier 1 recovery
  • Password Policy Management
  • Reporting on encryption state

    • McAfee Encrypted USB

    McAfee's USB Encryption extends security to the mobile environment by safeguarding data copied and transported on portable USB storage devices. Features include:

    • Providing the highest levels of encryption (AES-256) and certifications (FIPS 140-2)
    • Providing data mobility without compromising security policies
    • Controlling data access with strong, two-factor authentication
    • Tracking and managing encrypted USB storage devices on a company-wide scale with ePO for Password Recovery.

    Who Can Use This?

    McAfee Whole Disk Encryption and Symantec PGP Whole Disk Encryption are available for installation on UBC-provided hardware for faculty and staff.

    Technical Requirements

    • A Campus-Wide Login (CWL) account
    • For McAfee - Windows 7 and above, Mac OSX 10.8.2 and above.
    • For Symantec - please contact UBC IT Help Desk for more information.