KU Medical Center and Kansas University Physicians, Inc. require that any "mobile PC" (laptop, tablet, etc.) used for any aspect of University or KUPI business be encrypted, including student-purchased tablets.
McAfee Endpoint Encryption (also called "MEE") provides full-disk encryption that protects data stored on the laptop regardless of where it has been saved on the hard drive. MEE protects the information in the event that the laptop is lost or stolen; however, it does not protect information sent via email or stored on other media such as USB thumb drives, CDs or DVDs.
All newly purchased mobile PCs must be encrypted prior to being used for any University or UKP business. If you acquire a mobile PC that has not yet been encrypted, you must call Jayhawk Tech Clinic (IT Help Desk) at 913-588-7995 and arrange to have it encrypted before you use it.
With the exception of UKP-owned HP tablets, Information Resources also will install the CompuTrace device-tracking software if your laptop supports it (older models do not) and it has not been installed previously. CompuTrace enables the identification and retrieval of lost or stolen mobile PCs and, if necessary, disabling the device to prevent compromise of the information stored on it.
Q. Why encrypt?
A. Encryption makes information unintelligible. Full disk encryption makes it impossible to inadvertently store information in an unencrypted state. Without encryption information can easily be stolen. Even with password protection on an encrypted device, a theif can remove the hard drive from the computer and utilize it elsewhere. With encryption, information cannot be compromised even if the device storing the information is stolen.
Q. What if I forget my password or get locked out of encryption?
A. Contact Jayhawk Tech Clinic (IT Help Desk) at 913-588-7995 to get a one-time password that will allow you to login to the laptop. You will need to provide proof of identity in the form of a picture ID for all password resets. If you are locked out of encryption, then the network analyst will be able to assist you accordingly.
Q. Do I have to encrypt my laptop with McAfee Endpoint Encryption (MEE)?
A. Yes, all laptops that are used for any aspect of University business, regardless of how it was acquired or funded, must be encrypted. Once your mobile PC has been encrypted, you will enjoy the peace of mind that comes from confidence your information will not be compromised in the event of loss or theft.
Please note that personal laptops that were purchased with personal funds are not included in this requirement.
Q. Does McAfee Endpoint Encryption work on a Macintosh laptop?
A. Yes, all KUMC owned Macintosh devices must also have MEE. For additional questions please contact the Jayhawk Tech Clinic at 913-588-7995.
Q. What University policies cover the use of encryption on our laptops?
A. The relevant KUMC policies that cover the use of encryption are:
Q. What happens if I forget my password?
A. Contact Jayhawk Tech Clinic (IT Help Desk) at 913-588-7995 to get a one-time password that will allow you to login to the laptop. You will need to provide proof of identity in the form of a picture ID.
Q. I changed my KUMC network password and now I can't login to my laptop.
A. You will need to synchronize your MEE password with you new KUMC network password. To do this, log into MEE with your previous password and then, when prompted, enter your new KUMC network password to log into Windows. MEE will then synchronize to match your new KUMC password and you can use the new password to login to MEE for any future logins. If you are unable to login with either your previous or new passwords, contact Jayhawk Tech Clinic (IT Help Desk) at 913-588-7995 for assistance.
Q. My student tablet has a Windows username that is different from my KUMC network username. How do I change my password?
A. If your username on your tablet does not match your KUMC username, you will not be able to use single sign-on and you will always have to enter two passwords: (1) your MEE password to unlock the laptop, and (2) your Windows username and password. You can use the same password for both logins if you wish.
To change your MEE password:
From the MEE screen when you first power on your laptop, enter your KUMC username and then click on the "Change Password" checkbox .
To change your Windows password:
Log into Windows, press CTRL-ALT-DEL and select "Change Password".
It is possible to change your Windows username to be the same as your KUMC network username. Contact Jayhawk Tech Clinic (IT Help Desk) at 913-58-7995 for assistance.
Q. Does McAfee Endpoint Encryption have any effect on my Windows applications?
A. No, MEE's encryption is transparent to the Windows operating system.
Q. Will McAfee Endpoint Encryption affect my laptop's performance?
A. No, encryption will have a very small impact on your laptop performance when writing files.
Q. Does McAfee Endpoint Encryption work on a Macintosh laptop?
A. McAfee currently does not have a version of the MEE encryption software that can be installed on Apple laptops. We expect to have this capability by December, 2011.
Q. Does McAfee Endpoint Encryption encrypt network drives or USB thumb drives?
A. No, MEE only encrypts the local hard drives contained within your laptop. If you have a need to encrypt files on KUMC network servers, USB thumb drives or other media, please contact Information Security at 913-588-3333.
Q. Can I re-partition my laptop or have multiple boot partitions?
A. McAfee Endpoint Encryption can support this scenario, however, you will need to contact Jayhawk Tech Clinic (IT Help Desk) at 913-588-7995 to discuss the use of non-standard settings. Changing the partitioning on an already-encrypted device without approval from Information Security is a violation of the University's Appropriate Use of Information Systems policy and will render the device unusable.
Q. Can you encrypt my smartphone or other mobile device?
A. There are currently no plans to encrypt either University-owned or personally-owned SmartPhones; however, as outlined in the University's Mobile Security policy, they should not be used to store sensitive information. If you regularly send or receive email that contains sensitive information, you should NOT synchronize your KUMC email to your personal smartphone.
Q. Who should I contact if I have additional questions about McAfee Endpoint Encryption?
A. Faculty, staff or students with questions about MEE that are not covered by this FAQ, should contact Jayhawk Tech Clinic (IT Help Desk) at 913-588-7995 for additional assistance.