If you plan to store data on a hard drive, you need to make sure it is encrypted and meets UCSF's minimum security standards. Hard drives can be lost, stolen, or broken, and thus need to be protected to prevent data loss. 

Services

When encrypting a hard drive, there are two options:

• Hardware encryption: Hardware encryption is recommended as it is considered safer/more secure. You can purchase and use hardware-encrypted hard drives such as those recommended by UCSF.

• Software encryption: Software encryption uses software programs to encrypt data. Although software encryption may be less expensive, it is more vulnerable to low-level attacks and is thus less recommended. 
  • DDPE (Dell Data Protection Encryption): DDPE is a comprehensive encryption solution for UCSF that is available to all UCSF faculty, staff, and students and can be used to encrypt your hard drive.
    • Proof of encryption: If you will be using software encryption to encrypt your hard drive, you will need to save proof of that. This can simply be a screenshot of the encryption status. In the case that the hard drive is lost or stolen, you should be able to show proof that it was encrypted. Information on how to determine the encryption status can be found here.
    • Please note: Do not store proof of encryption on your hard drive. If the hard drive is lost or destroyed, you must be able to access the proof of encryption.

Directions

1. Determine whether you will be using hardware or software encryption. 

2. For hardware encryption, purchase a hardware-encrypted hard drive like those recommended by IT.
3. For software encryption, use an encryption service like DDPE to encrypt your external hard drive and save proof of encryption somewhere not on the hard drive.

Support

For support with DDPE, visit DDPE FAQs.

If you have further questions or are experiencing any issues with your DDPE application, you can call the UCSF IT Service Desk at 415-514-4100 or submit a ticket.