USB External Device Instructions Acceptable Use: HSC Security Practices regarding the encryption of external USB devices

• The Encrypted USB Storage Device may only be used for temporary storage and/or data transport of duplicate data. • A complex password must be used upon encryption, loss of the password will render the data on the USB unrecoverable. Further recovery safeguards are NOT APPLICABLE.

Some things to note before getting started:

• It is recommended that the USB device (Flash Drive/External HDD) be formatted to “NTFS” before saving data to the device and/or encrypting the device. Make sure that you have saved desired data from the USB Device before formatting the drive! There is no mechanism to restore the data from the USB Storage Device once it has been formatted. • The following steps must be performed on a [. 1511] device or above that is connected to the Health domain for BitLocker encryption to work in our environment.

Format the Device

• Connect the USB device to the computer and locate the device in the . • Right-click the external USB device, select “…”, and select the following options: o : NTFS o : *Something easily identifiable* o Format options: [Select] “Quick Format”

Activate BitLocker

• Locate the device in the File Explorer • Right-click the external USB device, select “Turn on BitLocker”, and select the following options: o Use a password to unlock the drive (This should be automatically selected if you are connected to the Health domain) o Enter a unique PIN, ensure that your new PIN meets the following requirements: . Password is case sensitive. . Must be least 8 characters long. . Must not include part of your name or user name. . Must have at least 1 of each of the following characters: . Uppercase (A-Z) . Lowercase (a-z) . Number (0-9) . Symbol (!, #, $, etc.) o Click “Next” and select “Print the recovery key” . You may want to select a write-to-PDF option or a physical for yourself. Note: Use of the recovery key will allow FULL access to the encrypted device. Should this information become readily available, it nullifies the integrity of the encryption. Treat the recovery key with the same respect as you would your HSC NetID password. o Click “Next” and select the first option: “Encrypt used disk space only (faster and best for new PCs and drives) o Click “Next” and “ encrypting”

Version Date: March 16, 2020 USB External Device Encryption Instructions