Re: Data security question in MCSE 70-270 exam

From: Tim (Tim_at_NoSpam.com)
Date: 05/15/04 

Date: Sat, 15 May 2004 22:26:50 +1200

Eric,

Hope your still there.

So if a laptop is pinched with EFS files on it and one of the password
hacking utilities is used to gain access, then the EFS is useless?

- Tim

"Eric Chamberlain" <eric.chamberlain@newsgroups.nospam> wrote in message
news:u8BP1yVOEHA.2704@TK2MSFTNGP10.phx.gbl...
> The answer is misleading. EFS certificates can't be used directly from
> smart cards.
>
> "Serge calderara" <anonymous@discussions.microsoft.com> wrote in message
> news:ECC540B4-0307-4F5D-9213-2ED4D7C07970@microsoft.com...
>> Dear all,
>>
>> I ma studying my fture MCP exam 70-270 by using the MCSE Readness review
> book from Microsoft.
>> In topics cover, there is one question that I am not really able to
> understand hope you can help me to catch it.
>>
>> The question is :
>> An account manager has lost its portable with critical data on it. IT
> departement is able to installed a new one with previously backup. But in
> order to protect critical company data they need to setup a strategy
>>
>> One of the correct answer was:
>> You add the computer to the company domain and issue user certificate for
> S/MIME and EFS from AD-integrated Certificate Services Certificate
> Authority. YOu install the certificates on a PC Smart Card that is
> compatible wiuth windows XP and Windows Server Certificate Service. You
> install the Smart Card into the new laptop computer and verify that
> suitable
> drivers are install.
>>
>> Based on that answer I have been told that certificated can not be read
> directly from a flash card, it can be export to it for backup, but for
> using
> it it has to be install on the PC. According to the answer I understand it
> like it is possible to read it directly from the flash card right ?
>>
>> If yes how can I test that?
>>
>> THnaks for your light on that issue
>> Regards
>> Serge
>>
>
>

Relevant Pages

  • Re: Where is the 2k/XP certificate store in the registry?
    ... > what you are describing is true for all certificate purposes but EFS. ... > certificates on smart card. ... >> for the private key store, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS and Biometrics? Other options?
    ... Subject: EFS and Biometrics? ... private keys stored on a smart card. ... Basic EFS certificates are one of few ... stuff to rely on the smart card for credentials. ...
    (Focus-Microsoft)
  • Re: Where is the 2k/XP certificate store in the registry?
    ... what you are describing is true for all certificate purposes but EFS. ... desktop so when I have my certificate on smart card it can't ask me for PIN ... Please insert USB or smart card for EFS certificates... ... > Does anyone know where in the Registry the local machine and personal ...
    (microsoft.public.windowsxp.security_admin)
  • Re: EFS and Biometrics? Other options?
    ... Subject: EFS and Biometrics? ... Certificates and corresponding keys can be stored on smart cards, floppies, ... I tried to do it with a smart card but it didn't work. ...
    (Focus-Microsoft)
  • Re: Recovery Agent configured in GPO, but cannot see it in Encrypt
    ... details as that rsop.msc shows the computer displays the RA, the certificates ... EFS enabled, ... Group Policy settings can be forced to refresh ... because of domain Group Policy configuration you may have a problem with DNS ...
    (microsoft.public.windowsxp.security_admin)