RE: Does W2K hold user's email, EFS etc private key securely ?

From: Schwarz, Roland (Roland.Schwarz@bdr.de)
Date: 09/16/02


From: "Schwarz, Roland" <Roland.Schwarz@bdr.de>
To: focus-ms@securityfocus.com
Date: Mon, 16 Sep 2002 15:35:40 +0200

Could you provide any details on how you
implemented EFS keys on smart cards.
Official MS whitepapers say that this is not possible.

Thanks
Roland

> -----Original Message-----
> From: Fred.Langston@guardent.com [mailto:Fred.Langston@guardent.com]
> Sent: Tuesday, September 10, 2002 12:48 AM
> To: bkml@att.net; fp56@dial.pipex.com; focus-ms@securityfocus.com
> Subject: RE: Does W2K hold user's email, EFS etc private key
> securely ?
>

> We are currently using EFS key storage on Smart cards with
> XP, so that one's
> incorrect. This one goes a long way toward solving the
> previously mentioned
> problem. At the time of your SANS article, you were correct,
> but things
> have changed with, as you said, newer versions.
>