Stanford University requires verifiable whole disk encryption for all desktop and laptop computers used by faculty, staff, and post-docs on the campus network. This requirement applies to both Stanford and personally owned computers that are used for Stanford activities on the campus network, other than those granted exceptions due to special requirements.
Computers that handle High Risk Data must use Stanford Whole Disk Encryption (SWDE). BigFix must be installed on computers participating in the SWDE service for monitoring, automatic security patches and computer updates, and auditing purposes.
For computers that do not handle High Risk Data, SWDE is recommended but there is an option to install VLRE (Very Lightweight Reporting Engine, pronounced “velour”), a read-only agent that provides encryption verification without requiring BigFix. VLRE periodically reports on the computer's encryption and screen saver password status, but leaves maintenance of the computer entirely to the user. If your computer is not encrypted, VLRE steps you through the encryption process.
