Re: EFS Certificate Needed

One may generate and EFS recovery agent .pfx by use of
the cipher utility with the /r option. See cipher /?
After being installed, that recovery agent will only have
decrypt capabilities on files EFS-touched afterwords.

If you believe you already have a recovery agent set up
and it is unable to decrypt EFS files, then you probably
need to use the efsinfo utility to examine the thumbprint
of the files that may not be decrypted, verify that the
account from which you attempt actually has the recovery
agent private key installed within it, etc.

Why is it that you say
The certificates I have are not worthy to be Recovery Agent
certificates even though their intended purposes are clearly
stated.
?? What is it that you are seeing and how? How are you
attempting to use this (these?) ?


"HonoredWriter" <honoredwriter@xxxxxxx> wrote in message
news:29109205-2BD1-4FB3-9465-1F84B2DAD118@xxxxxxxxxxxxxxxx
How do I obtain a Recovery Agent certificate to recover/restore/decrypt
some
previously encripted files? The certificates I have are not worthy to be
Recovery Agent certificates even though their intended purposes are
clearly
stated. ( Shucks, I'm thinking this computer has intuitive intelligence.)
--
HonoredWriter


.

Relevant Pages

  • Re: Backing up Encryption Certificate
    ... EFS certificates are exported, imported, and removed ... by use of the Certificates MMC snapin. ... Designation of an EFS recovery agent in the local ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS Recovery Agents
    ... This happens if the Encrypting File System recovery policy implemented on this computer contains one or more EFS recovery agent certificates that have expired. ...
    (microsoft.public.windowsxp.general)
  • Re: How to add EFS data recovery agents on Windows 2000 workgroup server
    ... and use efsinfo to view the results. ... > Looking for information to add a 2nd EFS recovery agent ... > required when running the W2K recovery agent wizard via MMC Local ... > logged into server with account to be used for 2nd recovery agent ...
    (microsoft.public.win2000.security)
  • Re: Replacing First Domain Controller Computer
    ... Does backing up the System State accomplish this? ... there you should see the efs recovery agent certificate. ...
    (microsoft.public.windows.server.active_directory)
  • Re: EFS Recovery Agent
    ... Other accounts can be made the EFS recovery agent. ... search for EFS Recovery Agent at www.microsoft.com/support for instructions. ...
    (microsoft.public.win2000.security)