Encrypt a macOS Device
Introduction
University sensitive information stored on a mobile computing device is at risk for unauthorized access and disclosure if appropriate security measures are not implemented to protect the device against loss or theft of information.
The best way to protect University sensitive information is to not store it on a mobile computing device; however, it is recognized that storage of University sensitive information on a mobile computing device may be necessary in certain situations. In these cases, encryption provides protection against unauthorized access and disclosure.
This article provides instructions for using Apple's Filevault drive encryption technology to encrypt and protect data stored on Apple laptops.
Encryption must be used in concert with other security measures to maximize protection of information technology resources and of University sensitive information. The Office of the Vice-Provost and Associate Vice-President (Information Services & Technology) has provided a Mobile Security website that contains further information about other security measures.
For additional information, please see:
Applicability
This article is intended for use by any faculty, staff, or student member who would like to safeguard data stored on an Apple Mac OS X laptop.
Procedure
Please follow the instructions found on this website to encrypt your macOS laptop.
Recovery Key
During the FileVault 2 activation process, a recovery key is presented that should be recorded and then securely stored.
- If the device is University tagged / owned do not use the iCloud option but rather record the key and send it to IST to be recorded securely.
- If the device is personally owned recovery keys can be stored with Apple using the iCloud option. AppleCare will disclose them after successfully answering previously enrolled security questions.
Notes
- Ensure your macOS user account password(s) are strong. (See the University’s password guidelines)
- The macOS user account password unlocks the encrypted data.
- If at any time you have difficulty or encounter problems with this process, please contact the IST Service Desk at 780-492-9400 or ist@ualberta.ca.
Keywords: encrypt, encryption, SPED, privacy, security, data, protect, drive, password, passcode, VPIT, VP-IST, mobile, laptop, macbook, mac, apple, os x, vault, filevault, macos