
Columbia University Medical Center logo,  Columbia University Medical Center Information Technology

Encryption FAQs

Encryption basics are covered on the main Using Encryption page, and see these FAQs for information specific to the CUMC Endpoint Security Campaign.

How do different types of encryption work?

  • Individual file and folder encryption - this encrypts only the data or locations that you specify, whether on a computer or removable media such as a USB key, CD, external hard drive, SD card, etc. Some of these programs can also be used to send encrypted email attachments.
    • Some programs require that when you save the file to or attach it to an email, you specify that it should be encrypted and select a password. The encryption program will include the ability to decrypt with the proper password so that the receiver does not have to have your same encryption software installed on their computer. NOTE: CUMC IT Exchange email accounts can send encrypted information to outside addresses, click here for instructions.
  • Pre-boot authentication - pre-boot authentication (PBA) provides a higher level of security than full disk encryption, which does not encrypt a computer's operating system files. See Encryption Requirements for information on equipment (including personally owned) that must use PBA.
    With pre-boot authentication a password prompt will appear when the computer first starts up, before the Windows or Macintosh operating system/splash screen loads.

Can I use a BIOS password for pre-boot authentication?



How do I know if my smartphone or tablet is encrypted?

What happens if I forget my encryption password?

Symantec Endpoint Encryption (SEE) and GuardianEdge (GE) FAQs

Either program will appear in your computer's All Programs list:

    Windows All Programs Link


    GuardianEdge in Windows Program List Symantec Endpoint Encryption
    GuardianEdge Symantec Endpoint Encryption

How can I use or verify that pre-boot authentication is running on a computer with SEE or GE installed?
Please see information under the Verifying or Requesting Pre-boot Authentication with Symantec Endpoint Encryption heading near the top of the SEE PBA web page. Both versions have a similar pre-boot authentication screen but will either display "Symantec" or "GuardianEdge" in the initial splash screen with a black background.

Can I use SEE Pre-boot Authentication on a shared computer?
Yes, but you must set up your own SEE login. Once a computer has an SEE Pre-boot Authentication account created on it, you will not see the Windows login screen or be able to create your own account without having the existing SEE PBA account holder log in first. See the NOTE under step 1 of the Registering SEE Pre-Boot Authentication on Your Computer instructions for step by step assistance.


Should or can I upgrade to Symantec Endpoint Encryption if I have GE installed?
At this point it is fine to continue using GE as your encryption program on a computer if it is already installed, however you can contact us at 5-Help, option 5, to request that GE is removed and SEE is installed.

  • It is not possible to do a straight upgrade (installing SEE over GE), instead the computer must first be fully decrypted and GE must be properly removed before SEE can be installed.
  • CUMC IT must be involved in any removal of the site licensed GuardianEdge program due to the use of a GE administrative password that can not be given to non-CUMC IT staff.
  • If you are running GE, you may not be able to open files that have been encrypted by SEE. Computers using SEE can open GE encrypted files.

Why am I getting prompted for two different passwords on my hardware encrypted USB drive?
If your computer was running GuardianEdge and had not recently been on campus or done a GE server check in to get updated settings, it will have automatically encrypted an attached USB drive. Please see instructions under Preventing or Resolving Double-Encryption on a Drive to resolve this issue.

| TOP |

Last updated 12/12/2013
