Windows Encryption Service

The Windows Encryption Service is offered by the IT Support Centre to assist users with enabling full-disk encryption on their computers using the native Windows BitLocker Drive Encryption (BLDE) feature.

Getting Started

Eligibility:

• This service is available to Queen's staff and faculty.

Cost:

• This service is provided at no cost to staff and faculty.

 

Requesting the Service:

• Contact the ITServices Support Centre by calling 613.533.6666 during business hours or by filling out the online help form at http://www.queensu.ca/its/helpform.

 

Additional Information:

• Encryption is primarily used to secure sensitive data that is stored locally on a computer. You can greatly reduce the need to encrypt your computer by:
  • using IMAP for email or webmail;
  • using an encrypted USB flash drive to store and/or transport sensitive data;
  • storing files on a network drive provided by ITServices’ Active Directory Service;
  • using Remote Access Server for off-campus access to your network drives; and
  • using QShare for off-campus access to files.

 

Related Links:

• Electronic Information Security Guidelines (A5. Encryption)
• Queen's University Computer User Code of Ethics

Features

• configure eligible computer for Windows BitLocker Encryption;
• help user backup the BitLocker Recovery keys; and
• explain how to use encrypted computer and BitLocker Recovery keys.

 

Note: The person requesting this service must be present during the onsite call to provide login credentials and to receive and store the BitLocker Recovery Key.

Requirements & Preparation:

Before calling the IT Support Centre to have BitLocker Drive Encryption (BLDE) implemented on your computer, you should ensure the following is in place:

 

1. Data backups must always be current, ongoing and tested.
2. The computer should have a hardware feature called TPM (Trusted Platform Module).  Please note that most new business model laptops come with the TPM feature. If your computer does not have this feature, a dedicated USB flash drive can be used. Check the specifications on the manufacturer’s website to see if the computer has the TPM feature, or contact the IT Support Centre for help finding this information.
3. Most new computers running Windows 7 will likely not be running Windows 7 Ultimate or Enterprise and will need to be upgraded. These can be purchased from the Campus Computer Store. Compare versions here. 
4. Download, install & run Windows 7 Upgrade Advisor to ensure the computer meets or exceeds the minimum system requirements for Windows 7 Ultimate/Enterprise. We may ask you to save and email this report to IT Support Centre Staff before you purchase Windows 7. (Note: There are two tabs at the top of this results screen, 32-Bit and 64-Bit; we want to read both.)
5. It is recommended that the computer is, or will be, joined to the ITServices' Active Directory Service, but this is not required. It is recommended as a secondary backup of the Security Recovery Key file. 

Help & Support

• Contact the ITServices Support Centre by calling 613.533.6666 during business hours or by filling out the online help form .