Summary
This article intends to provide guidelines when traveling overseas. When traveling internationally, there are often considerations that must be taken to be proactive for software access, operating system activation, and sensitive data protection
Environment
LSA Faculty & Staff PC and Mac devices
Sensitive data guidelines
A user who is bringing sensitive data overseas must comply with various laws and university regulations in order to complete their trip successfully. Consult the Information Assurance travel page for details.
Windows computers
When traveling with a Windows Computer, the following steps should be taken to ensure all things will continue to function, and LSA Tech Services staff are able to assist users remotely should something go wrong.
- Update Group Policy.
- Have Tech Services ensure the LAPS account is functioning (send support request via lsatechnologyservices@umich.edu).
- Ensure BitLocker is functioning (send support request via lsatechnologyservices@umich.edu).
- Ensure the VPN client is installed, and functions.
- Verify your software needs with your local IT support. Certain software titles require communication with a licensing server, or require updated licensing files on an annual cadence. If you believe you have a title that is licensed, you may send a support request via lsatechnologyservices@umich.edu for considerations while traveling overseas (especially for long-term overseas trips). Some titles may have the ability to have an alternative license which will not require the campus connection.
- For long-term trips, regularly connect to the campus network using VPN or Direct Access. The Operating System and Microsoft Office requires reactivation every 180 days, which happens automatically when talking on the university domain. Additionally, cached credentials require refreshing on the domain every 500 days. The VPN or Direct Access should automatically establishes this connection to refresh these counters.
Macintosh computers
When traveling with an Apple Computer, the following steps should be taken to ensure all things will continue to function, and LSA Tech Services staff are able to assist users remotely should something go wrong.
- Ensure the user has logged in at least once.
- Ensure the VPN client is installed, and functions.
- While on an on-campus network (or VPN is running), relaunch Managed Software Center to cause a checkin with Izzy.
- Verify your software needs with your local IT support. Certain software titles require communication with a licensing server, or require updated licensing files on an annual cadence. If you believe you have a title that is licensed, you may send a support request via lsatechnologyservices@umich.edu for considerations while traveling overseas (especially for long-term overseas trips). Some titles may have the ability to have an alternative license which will not require the campus connection.
- For long-term trips, regularly connect to the campus network using VPN. Microsoft Office and certain other titles require reactivation every 180 or 365 days, which happens automatically on the VPN and relaunching the affected applications.
General technology travel advice
- Do not save sensitive information on the devices you're bringing. Credit card numbers, passport information, social security numbers should all be cleared off of your devices prior to travel.
- Clear your web browsing history and similar stored information.
- Ensure two-factor is enabled on our Weblogin account, and ensure Duo is functioning on your 2-factor device.
- We recommend using two-factor authentication on any personal accounts.
- Backup all data to CrashPlan, Dropbox, or Google Drive before leaving.
- Run a full scan of anti-virus and anti-malware using built-in antivirus tools to ensure it starts the trip in a clean state.
- Ensure encryption is enabled on LSA owned devices. Recommend encrypted flash drives (Available from the Tech Shop) if external storage is needed.
- Consider that some nations block access to certain web providers like Google, Dropbox, and other sites. Download documents as needed.
- Confirm any data or devices are not subject to Export control. Even Duo is export controlled to some nations.
- Consider changing your umich/kerberos password to a password that you will only use for the duration of the trip, and then change it once you return.
Traveling with loan hardware
If your user is traveling to a nation with potential data import/export concerns, it is always wise to travel with a loaner computer instead of the user's assigned device. The user should leave their other computers behind when traveling with a loaner computer.
External resources
The "International Travel with University Machines and Data" article in our public KB contains information on this topic oriented to end users.