Even computers with PGP installed need to be serviced. If the computer needs to be rebooted several times during service, set up an additional passphrase so that you don't have to ask the main user for a password every time.
Delete the passphrase after maintenance is complete if there are security concerns.
To add a passphrase to a computer with a completely encrypted disk:
- Open PGP Desktop.
- Locate the PGP Disk Control box on the left pane of the PGP Desktop main screen.
Data integrity is best when you image the system before it is encrypted.
If you must image the system after Stanford Whole Disk Encryption is installed, submit a HelpSU request to begin the process of unencrypting your system.
NOTE: Removing whole disk encryption is a very time consuming process and is not recommended. If necessary, it can be enabled by IT Services staff to guarantee the integrity of the audit trail.
Stanford Whole Disk Encryption (SWDE) uses software from PGP. You cannot install the SWDE service without encrypting your drive, and you cannot encrypt removable devices without encrypting the boot drive on which the SWDE service is installed.
An encrypted USB drive is unreadable on a computer that doesn't have PGP software installed.
An unencrypted USB drive works normally on a workstation that uses the SWDE service.
In order to be whole-disk encrypted, Macintosh computers cannot have an actual Windows partition. Whole-disk encrypted Macs should run Windows within MacOS via virtualization such as Fusion or Parallels. If needed, please consult your local technical support staff for help with this process.
To encrypt a USB or Firewire drive, insert the drive and open the PGP Desktop Client. Choose PGP Disk, click Encrypt Whole Disk or Partition, select the drive you want to encrypt, and follow the prompts.
See the Security for Windows, Macintosh, and Unix Computers web page for other products you can use to keep Stanford's data secure.
Submit a HelpSU request to start the process of removing the encryption and license.Removing WDE from your computer completely reverses the encryption operation.