Apple Mac OS X Instructions

UF-owned and managed Mac OS X computers should use PGP or another encryption solution that complies with UF standards. Personally-owned Mac OS X computers may use the built-in FileVault2 encryption function until an improved version of the UF encryption is available. Use of FileVault2 or other non-standard encryption requires completion of an encryption form.

To Enable FileVault2 Encryption

OSX 10.7 Lion and 10.8 Mountain Lion

  1. Run Software Update (under the Apple menu) to make sure your system has the latest updates from Apple.
  2. Enable FileVault by opening System Preferences, click on the Security and Privacy preference pane and click the button labeled Turn On FileVault….
  3. Complete the encryption form and submit it to your local IT support.

Depending on the specifics of your computer, it can take several hours up to twelve or more, to complete the encryption process. Be sure to write down and store in a safe place, the recovery key that is generated during the encryption process. We also suggest selecting the option to store the recovery key with Apple in case you should forget your encryption password.

For more information, see the following Apple tech support document:

OSX 10.6 Snow Leopard and earlier versions

Computers running earlier versions of OSX can be encrypted using specific versions of PGP, which the university has licensed. Each version of OSX requires a specific version of PGP, and we encourage you to contact the UF Computing Helpdesk for assistance. In these situations, if the hardware is capable of running a newer version of OSX, we advise upgrading to 10.7 Lion or 10.8 Mountain Lion and using FileVault2 instead.

Note that OSX 10.6 Snow Leopard includes a FileVault encryption feature. This version is very different from FileVault2 included in newer versions, and is not sufficient for encrypting laptops used at the University of Florida.

Dual booting with Bootcamp

FileVault2 is not an option for Macs configured using Bootcamp to dual-boot OSX and Microsoft Windows. PGP does support this configuration, but it is complicated and prone to error. Because of the complexity, we recommend against this configuration, but more information can be found at: