Re: Data security question in MCSE 70-270 exam

From: Eric Chamberlain (eric.chamberlain_at_newsgroups.nospam)
Date: 05/14/04 

Date: Thu, 13 May 2004 19:39:39 -0700

The answer is misleading. EFS certificates can't be used directly from
smart cards.

"Serge calderara" <anonymous@discussions.microsoft.com> wrote in message
news:ECC540B4-0307-4F5D-9213-2ED4D7C07970@microsoft.com...
> Dear all,
>
> I ma studying my fture MCP exam 70-270 by using the MCSE Readness review
book from Microsoft.
> In topics cover, there is one question that I am not really able to
understand hope you can help me to catch it.
>
> The question is :
> An account manager has lost its portable with critical data on it. IT
departement is able to installed a new one with previously backup. But in
order to protect critical company data they need to setup a strategy
>
> One of the correct answer was:
> You add the computer to the company domain and issue user certificate for
S/MIME and EFS from AD-integrated Certificate Services Certificate
Authority. YOu install the certificates on a PC Smart Card that is
compatible wiuth windows XP and Windows Server Certificate Service. You
install the Smart Card into the new laptop computer and verify that suitable
drivers are install.
>
> Based on that answer I have been told that certificated can not be read
directly from a flash card, it can be export to it for backup, but for using
it it has to be install on the PC. According to the answer I understand it
like it is possible to read it directly from the flash card right ?
>
> If yes how can I test that?
>
> THnaks for your light on that issue
> Regards
> Serge
>

Relevant Pages

  • RE: Problems enabling smart card login on windows 2000
    ... Bad Certificate; ... Troubleshooting Windows 2000 PKI Deployment and Smart Card Logon ... | - Installing a Windows 2000 Server as a Domain Controller ...
    (microsoft.public.win2000.security)
  • Re: question about private certificate stored on smart card
    ... >> With Windows 2003 CA there is an option to archive user's private key. ... >> Archival is done automatically when certificate is issued. ... >> able to find out there are no smart card CSP available today that would ... > The software does allow recovery of smart card encryption certificates. ...
    (microsoft.public.win2000.security)
  • Re: Importing a Symmetric Key into the Microsoft Base Smart Card C
    ... On the Internet Accounts dialog box, click the Add button and select ... address stated in the e-mail certificate. ... account and click the Properties button. ... Outlook Express will ask you to insert your smart card. ...
    (microsoft.public.platformsdk.security)
  • Disable smart card authentication on Windows2000 Professional!
    ... to disable MS smart card authentication function in my ... To enable smart card or other certificate authentication ... certificate authority for your server certificate must be ...
    (microsoft.public.win2000.security)
  • Re: question about private certificate stored on smart card
    ... With Windows 2003 CA there is an option to archive user's private key. ... Archival is done automatically when certificate is issued. ... able to find out there are no smart card CSP available today that would ... that would enable users file encryption on a hard drive and later import it ...
    (microsoft.public.win2000.security)
Quantcast