Full Disk Encryption (FDE)

macOS

Encrypt Your Mac Laptop

PSU-owned Mac laptops running macOS 10.10 and higher have encryption enabled by default. If you need an exception made for your computer to turn off encryption, contact your Departmental IT Support. If your department is not listed, contact the Helpdesk.

Troubleshoot Login Issues on Your Mac Laptop

If you have not logged on to a particular Mac laptop before, you will need to be added as a FileVault user. Contact the Helpdesk for assistance.

If you are having trouble logging on to a Mac laptop you have used before, or if you have forgotten your Odin password, try the steps below to log on:

1. Turn on your laptop.

2. From the startup screen, select your account.

3. Click the help button 

   

   . If you created a password hint, it will be displayed.

4. Enter your previous Odin password (the last password you had before your current one).

   • If you are presented with another login window, enter your current Odin password to log on. Your password should sync right away and you should be able to use your current Odin password to log on next time.

   • If you are not presented with another login window and go straight into your desktop, ensure that you are either connected wirelessly to PSU Secure or connected with an ethernet cable to a working network port. Your passwords should sync within 5-15 minutes of logging in.

   • If you still cannot sign in, continue to the next step.

5. Connect your laptop to the PSU campus network with an Ethernet cable.

6. Try to log on to your account from the login window.

   • If you can successfully log on, your passwords should sync and you should be able to use your current Odin password to log on next time.

   • If you still cannot sign in, contact the Helpdesk for assistance.

Windows

Encrypt Your Windows Desktop

In most cases, OIT will enable encryption on new Windows desktops by default. To verify that Full Disk Encryption is turned on, open File Explorer, then access This PC. If Full Disk Encryption is enabled, you will notice a lock icon on the C drive. Windows desktop computers do not require a PIN.

Encrypt Your Windows Laptop

In most cases, OIT will enable encryption on new Windows laptops by default. You will need to personalize your encryption setup with a Personal Identification Number (PIN). 

Follow these steps to set up your PIN:

1. Log in to your new laptop with your Odin username and password.

2. When you encounter a prompt that says "Create PIN for C:", enter a PIN that follows the guidelines below:

   1. Must be 4-20 characters

   2. May contain letters and numbers

   3. Will be case sensitive ("password" is different than "PaSSworD")

   4. Don’t use any existing passwords (like your Odin password).

3. Re-type your PIN in the Confirm PIN field.

4. Select "Create PIN".

Note: You should memorize your PIN and avoid writing it down. If you must write it down, keep it on your person and never leave it where someone else could read it. Only share your PIN with the people allowed to use your laptop.

Unlock Your Windows Laptop or Tablet

The encryption software will prompt you for your PIN when you restart your Windows laptop or restore it from a hibernation state. Enter your PIN when prompted, then log in as usual. You should always lock your screen whenever you step away from your computer, and you will not be asked for your encryption PIN to unlock it.

Tablets do not have an on-screen keyboard during boot up, therefore you must have a keyboard or a USB keyboard to unlock a tablet.
 

Reset the PIN for Your Windows Laptop or Tablet

If you’re unable to log in to Windows because you have forgotten your PIN, you can follow the directions below to unlock the computer using the Self-Service Portal, and then create a new PIN. Alternatively, you can contact the Helpdesk for assistance.

Recovering Your Locked Device

1. When your computer asks for the encryption PIN, press Esc once on your keyboard.

2. On the next screen, locate the Recovery Key ID and record the first 8 characters. Leave this screen up on the computer.

3. Using another (non-locked) computer, go to the Self Service Portal and sign in with your PSU Odin account.
   Note: The Self-Service Portal can only be used if you have previously signed in on your locked computer.

4. Read the notice, then select the box beside "I have read and understand the above notice."

5. Select Continue.

6. On the next screen, enter a minimum of 8 characters of the Recovery Key ID and select a reason (i.e. Lost PIN).

7. Record the 48-character Recovery Key.

8. Return to the locked computer and enter the 48-character Recovery Key.

9. Press Enter.

Reset Your PIN on an Unlocked Device

Select one of the following two methods to reset your PIN:

1. Open the Start Menu and select Computer.

2. Right-click on your encrypted hard drive (usually C:).

3. Select "Change BitLocker PIN".

4. In the dialog box that appears, create a new PIN and then type it again to confirm it.

5. Press the "Change PIN" button.

OR

1. Open the Start Menu and select Control Panel.

2. Select "BitLocker Encryption Options" in the Control Panel.

3. Select the link that says "Manage your PIN".

4. In the dialog box that appears, create a new PIN and then type it again to confirm it.

5. Press the "Reset PIN" button.

Related Articles

• Page:
  Data Security Guidelines
• Page:
  Full Disk Encryption (FDE)