Encryption protects data from being stolen, changed, or compromised and works by scrambling data into a secret code that can only be unlocked with a unique digital key. Encrypted data can be protected while at rest on computers in transit between them or while being processed, regardless of whether those computers are on-premises or remote cloud servers.
Protecting the campus data is everyone's responsibility at CSUB. The campus offers several tools to help protect data being sent both within and outside of campus. Anytime Level One or Teo data leaves the campus; it must be encrypted using one of these campus-approved encryption solutions.
Sending secure files within the CSU
MOVEit is a web-based utility that staff and faculty can utilize to send files within the CSU organization. MOVEit is restricted only to users with a CSU campus account, and users must be on the campus network or VPN to utilize the service.
Sending an encrypted e-mail outside of the CSUB.EDU e-mail domain
Proofpoint Email Encryption
Standard email systems are not a secure way to send sensitive content. CSUB has a solution that will allow you to send communications to individuals outside of campus in a secure manner. When a message is sent, the user will get an invitation to create a logon to a CSUB-branded Proofpoint secure message portal.
Before using the product, you must have the Proofpoint secure message icon added to your Office instance. CSUB Staff or Facility please contact the Service Center at 661-654-4357 (HELP) or ServiceCenter@csub.edu to have this application installed.
KB0012968 How To: Send a Secure Message in Proofpoint
KB0012969 How To: Access a Secure Message with Proofpoint
Encrypting a single file or folder
7-Zip
7-Zip is a free file compression program that also allows you to encrypt and password-protect files you compress. You can compress multiple files into a single archive file. For someone to open an encrypted file created with 7-Zip, that person will need to have 7-Zip or a compatible program and the password you created for the shared file.
CSUB Staff or Facility, please contact the Service Center at 661-654-4357 (HELP) or ServiceCenter@csub.edu to have this application installed.
How To: Encrypt Files with 7-Zip
How To: Decrypt a File with 7-Zip
To download 7-Zip, go to: http://www.7-zip.org/download.html
Whole Disk Encryption
BitLocker
BitLocker is a feature of Windows that encrypts your data to keep it safe from unauthorized access. Using BitLocker Whole Disk Encryption (WDE), your entire disk is encrypted. When you log on to an encrypted computer, your drive is decrypted. When you shut down your system, the drive is re-encrypted. This means that when your device is powered off, your disk is protected against use by others.
The ITS default configuration is to deliver all Windows computers on campus with BitLocker enabled. The ITS security team strongly recommends all users enable BitLocker on their personal devices to protect their data.
Additional information about BitLocker can be found here.
File Vault
File Vault is a component of the Mac OS X operating system. It encrypts your data to keep it safe from unauthorized access. When you log on to an encrypted computer, your drive is decrypted. When you shut down your system, the drive is re-encrypted. This means that when your device is powered off, your disk is protected against use by others.
The ITS default configuration is to deliver all MAC computers on campus with File Vault enabled. The ITS security team strongly recommends all users enable BitLocker on their personal devices to protect their data.
Additional information about File Vault can be found here.
Secure Sockets Layer (SSL) Transport Layer Security (TLS)
Secure Sockets Layer (SSL) certificates, sometimes called digital certificates, are used to establish an encrypted connection between a browser or user’s computer and a server or website. SSL certificates establish an encrypted connection between a website/server and a browser with what’s known as an “SSL handshake.” For visitors to your website, the process is invisible — and instantaneous.
Anytime you have campus data flowing between two separate systems, you must configure SSL or TLS to transfer the data securely in an encrypted format. The ITS Infrastructure Services team can help create an SSL certificate or assist in getting a secure connection set up. Contact the Service Center at 661-654-4357 (HELP) or ServiceCenter@csub.edu to schedule.
More information about SSL and TLS can be found here.