Personal Device Security Guidelines

Introduction

If you don’t have a UO-provided laptop and you're planning to work remotely using your personal device, you’ll need to take extra steps to make sure your work stays secure. Below are the UO's Personal Device Security Guidelines for both Mac and Windows computers.

Remember, even if you’re working remotely, we are here still here to support you. If you need help, contact your department or unit IT or the Technology Service Desk.

Information

Mac Computers

Apply Updates

Prevent unauthorized access 

  • Install anti-virus software 
    • McAfee is provided free of charge to UO faculty, staff, and students 
    • Install the unmanaged version on your personal Mac 
    • Update the Signatures 
      • After installation, McAfee Endpoint Security for Mac automatically updates the content files to protect the Mac from the latest threats. By default, this update is scheduled at 4:45 pm local time every day. When the files are updated for the first time, it may take longer time to download the full content. The subsequent updates will be incremental. You can view the content files last update details in the Console page. 
    • Complete a full scan of your computer. We recommend plugging your computer in for the duration of the scan.
      • After you install the software to clean any infected files that might reside in the Mac, run an on-demand-scan to scan the local volumes. Configure the on-demand scan task to define:
        • The items to scan (files, folders, and drives)
        • Set frequency of scan (daily, weekly, monthly, or Immediately)
        • Define the action when malware is found (Delete or Clean)
  • Turn your firewall on
    • To turn on your firewall, go to System Preferences > Security (& Privacy) > Firewall > "Turn on Firewall" or "Start"
    • Detailed instructions

Use strong passwords 

Encrypt your hard drive

Before you encrypt your computer

  • Save your recovery key and computer password somewhere safe!If you lose them, you will lose access to your own computer!
  • Back up your computer files to a secure cloud service or external hard drive. (Note: External hard drives should also be encrypted, with the same caution to make sure you save the recovery key.)

How to encrypt

  • FileVault provides encryption for MacOS. To enable it, select  Apple menu  >  System Preferences  >  Security (& Privacy) >  Click the FileVault  tab > then Turn On FileVault. 
  • Once FileVault is active, enter your username and password to unlock the drive 
    • Make sure not to forget your log on information! 

Lock your screen

  • Lock your screen when you are not at your computer. Go to the Apple menu and choose  Lock Screen  or press  Command+Control+Q 
  • To automatically lock the screen when the screen saver turns on, click  Apple menu  >  System Preferences  >  Security( & Privacy) >  Click the  General  tab > select the option to require password after sleep or screen saver begins

 

Windows

Apply Updates 

Enable automatic updates on your computer and web browser to keep your system secure and up to date.

Prevent unauthorized access

Enable automatic updates on your computer and web browser to keep your system secure and up-to-date: 

  • Open Windows Security (Start  >  Settings  >  Update & Security  >  Windows Security) 
  • Enable Windows Defender and Application Firewall 
  • The University of Oregon has a site license for McAfee, faculty, staff, and students can install the anti-virus product without cost 
    • Please use McAfee Endpoint Security or Windows Defender, not both 
    • Install the unmanaged version of McAfee Endpoint Security 

Use strong passwords 

Encrypt your hard drive 

Before you encrypt your computer

  • Save your recovery key and computer password somewhere safe!If you lose them, you will lose access to your own computer!
  • Back up your computer files to a secure cloud service or external hard drive. (Note: External hard drives should also be encrypted, with the same caution to make sure you save the recovery key.)

How to encrypt

  • Home versions of Windows do not offer hard disk encryption. If you have a Professional, Educational or Enterprise version of Windows, encryption is provided with Bitlocker. You can configure it by going to  Control Panel  >  System and Security  >  Bitlocker Drive Encryption. 
  • Once you have enabled Bitlocker, remember to save your encryption key! 

Lock your screen

  • To set your PC to lock automatically when the screen saver pops up 
    1.  Go to Control Panel > Appearance & Personalization > Change screen saver  
    2.  Check the box for  On resume, display log on screen.  
  • You can lock your computer screen by pressing  Windows Key + L  or by pressing Ctrl+Alt+Delete and choosing  Lock.

Details

Article ID: 101092
Created
Thu 3/12/20 7:42 PM
Modified
Fri 6/5/20 4:25 PM