Data is increasingly becoming UCSF’s lifeblood and most critical asset. We’ve curated a collection of tools and products to help you protect UCSF’s data These tools and products have been vetted by IT Security, and we encourage you to use them.

Security software

UCSF ITS provides client security software free of charge to faculty, staff, learners and researchers: 

• IBM Endpoint Manager 
• File Encryption
• Anti-virus, anti-malware, software firewall 
• Network Access Control
• VPN Client

For more information, visit Software@UCSF (requires MyAccess login). 

External Hardware-Encrypted Hard Drives

We recommend the Apricorn Aegis Padlock product line of USB hard drives and solid state drives. You can browse Apricorn's full product lineup at https://www.apricorn.com/

These are PIN-protected, hardware-encrypted external drives that secure data with 256-bit AES hardware encryption, compliant with FIPS 140-2.

Hard drives are typically the cheapest-per-GB option, but solid state drives are significantly faster and highly resistant to physical shock and vibration.
 

• "Aegis Padlock Fortress" are portable hard drives ideal for maximizing storage capacity for price.
• "Aegis Padlock DT" are physically larger, faster hard drives ideal for non-portable usage. These require an included AC adapter.
• "Aegis Padlock SSD" or "Padlock Fortress SSD" are solid state drives ideal when small physical size, speed, or water/dust/vibration resistance are primary concerns.

Drives 16TB and larger are available.

Features

• Secure PIN access with multiple configurable user codes.
• USB 3.0 - up to 10X faster than USB 2.0. 
• Software-free design - No computer admin rights required or software to install or run. 
• Compatible with Windows, Mac, Linux and many non-computer devices.
• Wide variety of drives available to meet many physical size, data capacity, and speed requirements.

Purchase info

Learners: Purchase from your preferred vendor.

Employees: To order through BearBuy (requires punchout):

1. Click on the CDW-G under "Punch-out and UCSF Suppliers" (a new punchout window will open).
2. In the top "Search" box, enter "Apricorn Padlock".
3. Select a drive that meets your needs.

External Hardware-Encrypted USB Flash Drive 

We recommend the Apricorn Aegis Secure Key product line of USB flash drives. You can browse Apricorn's full product lineup at https://www.apricorn.com/

These are PIN-protected, hardware-encrypted flash drives that secure data with 256-bit AES hardware encryption, compliant with FIPS 140-2 Level 3.

Flash drives are physically smaller and typically faster than external hard drives, but are more expensive.

• "Secure Key 3NX" flash drives should be suitable for most use cases.
• "Secure Key 3NXC" flash drives have a USB-C connector, which is ideal for newer laptops and mobile devices. 
• "Secure Key 3.0" flash drives are available in larger capacities (240GB - 1 TB).

 Flash drives are available with capacity ranging from 2GB - 1TB.

Features 

• Secure PIN access with multiple configurable user codes.
• USB 3.0 - up to 10X faster than USB 2.0. 
• Software-free design - No computer admin rights required or software to install or run. 
• Compatible with Windows, Mac, Linux and many non-computer devices.
• Apricorn Aegis flash drives are waterproof and dustproof (rated IP67 or IP68).

Purchase info

Learners: Purchase from your preferred vendor.

Employees:  

Option 1: To order through BearBuy (requires punchout):

1. Click on the CDW-G under "Punch-out and UCSF Suppliers" (a new punchout window will open).
2. In the top "Search" box, enter "Apricorn Flash" . 
3. Select a drive that meets your needs.

Option 2: To order through McKesson Supply Chain Management:

1. Create a New Requisition.
2. Enter the following: APRICORN SECURE KEY USB 128 GB. 
3. Enter the desired quantity of each item ordered.

Cable lock for laptop

Kensington standard laptop cable lock 

Cable locks are a great way to secure your devices:

• Connect one end to something that is immobile, such as a heavy fixture like your desk.
• Then connect the other side to the security port of your device. 
   

Features

• The industry standard
• A 6-foot cable made of steel composite with a carbon, tempered-steel core and patented T-bar lock to provide the most secure connection to the security slot
• Wide range of compatibility–laptops, monitors and any device with a Kensington security slot
• One-piece design for ease of use–no little pieces to lose or misplace with this computer lock
• No screws, brackets or glue for installation of this computer lock–no changes to your computer 

 
Purchase info

Learners: Purchase from your preferred vendor.

Employees: To order through BearBuy (requires punchout):

1. Click on the CDW-G under "Punch-out and UCSF Suppliers" (a new punchout window will open).
2. Next to Search within your contracts, enter the CDW-G Part #: 1728320.

MacBook Pro Retina Bracket Lock

(When Mac does not have a lock slot available)

MacBook Pro Retina Bracket Lock with new wedge lock technology–chosen best MBPR lock 
 

Purchase info

Learners: Purchase from your preferred vendor. 

Employees: Order through BearBuy, and select Non-Catalog item.

The vendor is listed under Compulocks Brands: see Compulocks site for more product information.