Sending secure files within the CSU

MOVEit is a web-based utility that staff and faculty can utilize to send files within the CSU organization.  MOVEit is restricted only to users with a CSU campus account, and users must be on the campus network or VPN to utilize the service.

Setting up a MOVEit account

MOVEit Login

Sending an encrypted e-mail outside of the CSUB.EDU e-mail domain

Proofpoint Email Encryption

Standard email systems are not a secure way to send sensitive content. CSUB has a solution that will allow you to send communications to individuals outside of campus in a secure manner. When a message is sent, the user will get an invitation to create a logon to a CSUB-branded Proofpoint secure message portal.

Before using the product, you must have the Proofpoint secure message icon added to your Office instance. CSUB Staff or Facility please contact the Service Center at 661-654-4357 (HELP) or ServiceCenter@csub.edu to have this application installed.

KB0012968 How To: Send a Secure Message in Proofpoint

KB0012969 How To: Access a Secure Message with Proofpoint

Encrypting a single file or folder

7-Zip

7-Zip is a free file compression program that also allows you to encrypt and password-protect files you compress. You can compress multiple files into a single archive file. For someone to open an encrypted file created with 7-Zip, that person will need to have 7-Zip or a compatible program and the password you created for the shared file.

CSUB Staff or Facility, please contact the Service Center at 661-654-4357 (HELP) or ServiceCenter@csub.edu to have this application installed.

How To: Encrypt Files with 7-Zip

How To: Decrypt a File with 7-Zip

To download 7-Zip, go to: http://www.7-zip.org/download.html

 

Whole Disk Encryption

BitLocker

BitLocker is a feature of Windows that encrypts your data to keep it safe from unauthorized access. Using BitLocker Whole Disk Encryption (WDE), your entire disk is encrypted.  When you log on to an encrypted computer, your drive is decrypted. When you shut down your system, the drive is re-encrypted. This means that when your device is powered off, your disk is protected against use by others.

The ITS default configuration is to deliver all Windows computers on campus with BitLocker enabled. The ITS security team strongly recommends all users enable BitLocker on their personal devices to protect their data.

Additional information about BitLocker can be found here.

File Vault

File Vault is a component of the Mac OS X operating system. It encrypts your data to keep it safe from unauthorized access. When you log on to an encrypted computer, your drive is decrypted. When you shut down your system, the drive is re-encrypted. This means that when your device is powered off, your disk is protected against use by others.

The ITS default configuration is to deliver all MAC computers on campus with File Vault enabled. The ITS security team strongly recommends all users enable BitLocker on their personal devices to protect their data.

Additional information about File Vault can be found here.

Secure Sockets Layer (SSL) Transport Layer Security (TLS)

Secure Sockets Layer (SSL) certificates, sometimes called digital certificates, are used to establish an encrypted connection between a browser or user’s computer and a server or website. SSL certificates establish an encrypted connection between a website/server and a browser with what’s known as an “SSL handshake.” For visitors to your website, the process is invisible — and instantaneous.

Anytime you have campus data flowing between two separate systems, you must configure SSL or TLS to transfer the data securely in an encrypted format. The ITS Infrastructure Services team can help create an SSL certificate or assist in getting a secure connection set up. Contact the Service Center at 661-654-4357 (HELP) or ServiceCenter@csub.edu to schedule.  

More information about SSL and TLS can be found here.