PGP and Encryption

Concerning PGP and UF’s mobile device encryption policy.

  • UF’s license for PGP is expiring in December. Remove it.
  • PGP will no longer be compliant to UF’s mobile device encryption policy.  Replace it.
  • UF’s official replacement is BitLocker (Windows) (Windows 8.1 or earlier devices will need to have a TPM chip), FileVault 2 (Mac), and Luks (Linux) when combined with the UFEM agent. Both are required.
  • There is a list of devices reporting to the PGP console (it took a bit to create because the console shows devices reporting since birth even if they haven’t reported again). Sent it to you yesterday.
  • UFIT has a team of temporary workers to help units migrate their encryption. To schedule talk to Tricia Cook (pkcook@ufl.edu).
  • UFIT encryption migration team has a set of procedures they use that we can share.  Look in ‘Shared Documents’ of the ENG-NET-MGRS UF Connect sharepoint site (link removed… no longer valid).
  • UFIT encryption migration team has backup software that was purchased that can backup PGP encrypted devices with a bitwise copy of the encrypted drive.  Casper Secure Drive Backup. Info below.
  • MIS is testing the UFIT’s encryption migration teams processes and backup software.  We will let you know how it goes at next ENG-IT meeting.
  • We will be migrating encryption for own user base (BME, CHE, EG-ADM, and ISE) first.  After we test and address our users we can assist in your units if you would like.

Finally, in the past PGP was announced as available for UF employee home use.  This also goes away.  I don’t really know what UF is proposing for personally owned computers as it pertains to compliance to UF policies concerning encryption.  Time to ask this question.