Recommended encryption tools for ePHI

On-disk data encryption

• In Windows 2000, XP Professional, and Server 2003, you can use the Encrypting File System.
• In Vista, you can use the native BitLocker utility.
• On Macs running Mac OS X 10.3 (Panther) or later, you can use FileVault to encrypt the entire disk.
• For a reliable, open-source, whole disk encryption tool, you can use TrueCrypt.

Encrypting data transfers

• From/to your desktop to/from a web site: You should ensure that the secure sockets layer (SSL) protocol is being used by the web site. This means that the web site's address starts with a "https" and not "http". If this is not the case, information will be transferred in cleartext.
• From/to your desktop to/from Unix/Linux host: You should use a stream encrypted protocol such as SSH.
• FTP: Since FTP is not encrypted and information is sent in cleartext, UITS does not recommend FTP to transfer ePHI.

Comments/Questions/Corrections