Re: Creating a recovery agent on local computer

On XP Pro use the cipher /R command which will generate a .cer file that
contains only the certificate/public key and a .pfx file that contains the
certificate/private key. The .cer file is the one you want to import/add as
a Recovery Agent. Use cipher /? to find syntax on the cipher command. Be
sure to backup your user/RA EFS private key to a password protected .pfx
files and store in offline media somewhere safe. You might want to select
the option for delete of the private key for the RA when you export it and
keep it only off of the computer. --- Steve

http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 --- EFS
best practices.

"Nick Savoiu" <edu_uci_ics@_savoiu_> wrote in message
news:eMOa7q%23FGHA.740@xxxxxxxxxxxxxxxxxxxxxxx
> Hi,
>
> I'm trying to create a recovery agent on my XP laptop.
>
> I followed the instructions at
>
> http://www.microsoft.com/windows2000/en/advanced/help/default.asp?url=/windows2000/en/advanced/help/encrypt_to_add_recovery_agent.htmIt's
> not for WinXP but it seems to work. However when I get to the partwhere I
> should select a recovery agent I need to browse for a certificate(I'm not
> on a domain, therefore no active directory).How do I create this
> certificate in the first place?Thanks,Nick
>


.

Relevant Pages