Re: Cannot get EFS recovery agent function to work!

From: David Cross [MS] (dcross_at_online.microsoft.com)
Date: 03/22/05


Date: Tue, 22 Mar 2005 04:27:57 -0800

Yes. for more info:
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
Top Whitepapers:
Auto-enrollment whitepaper: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/autoenro.mspx
Best Practices for implementing Windows Server 2003 PKI: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/ws3pkibp.mspx
Troubleshooting Certificate Status and Revocation whitepaper: 
http://www.microsoft.com/technet/security/topics/crypto/tshtcrl.mspx
Windows Server 2003 web enrollment and troubleshooting guide: 
http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technologies/security/webenroll.mspx
"kgstrong" <kgstrong@hotmail.com> wrote in message 
news:OnbX28sLFHA.2988@TK2MSFTNGP14.phx.gbl...
>
> I'm new to Windows 2000, running Win2k Pro on a stand-alone machine. I 
> encrypted some files before I knew anything about EFS - now a program that 
> uses some of the files cannot access them. The files were encrypted under 
> my "power user" account.  The certificate that Win2k used to encrypt them 
> is enabled for "All Purposes" including Encrypted File System, and File 
> Recovery. As Administrator, I cannot import this certificate for the 
> Recovery Agent - says it is not enabled for file recovery.
>
> My Recovery Agent certificate (issued by Administrator to Administrator, 
> has a different thumbprint and is for File Recovery only.
>
> Does EFS recovery agent's certificate thumbprint have to match the 
> certificate the files were encrypted with in order to recover these files?
>
> Ken 


Relevant Pages

  • Re: Can no longer encrypt files
    ... and recovery agent's certificate. ... This was working fine until the account password expired and was changed. ... We then tried to encrypt the files again, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Encrypted Files
    ... >To update the meta data (EFS certificates and recovery ... >certificate thumbnail, which is used to encrypt the file ... >efsinfo /y will display your current EFS certificate. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Difficult Encryption Problem
    ... According to the XP Help documentation, for WinXP Pro - "The System State ... certificate server, the System State will also contain the Certificate ... Also with regards to setting up a recovery agent... ... Does EFS encrypt your data using the public key, ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Encrypted Files
    ... >>To update the meta data (EFS certificates and recovery> certificates on the ... >>certificate thumbnail, which is used to encrypt the file ... >>efsinfo /y will display your current EFS certificate. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: EFS File Share Help
    ... And your roaming profile cannot work properly. ... If user tries to encrypt a remote file/folder stored ... user, and subsequently requests, or generates a self-signed EFS ... The certificate and private key are loaded in a local profile ...
    (microsoft.public.windows.server.sbs)