Re: recovery agent

From: Hans Pennings (pennings@tiscali.nl)
Date: 05/21/02 

From: "Hans Pennings" <pennings@tiscali.nl>
Date: Tue, 21 May 2002 23:51:03 +0200

You are right. The date showed only the last two digits however.
I was not really thinking about the next century already...

"Drew Cooper [MS]" <dcoop@online.microsoft.com> wrote in message
news:O1RZuzGACHA.2196@tkmsftngp04...
> Are you sure that the expiration date isn't April 24, 2102? The default
> period for a standalone Win2k machine is 100 years.
>
> To remove the private key, export the certificate and opt to also export
and
> delete its key. If you've exported both cert and key into a .pfx file,
the
> import will give you both the cert and the key. My best guess is that
> you're importing from a .pfx that only contains a cert - without the
private
> key there is no decryption.
>
> For lots of info about EFS, including recovery agent import/export, check
> out:
>
http://www.microsoft.com/windowsxp/pro/techinfo/administration/recovery/defa
> ult.asp
> --
> Drew Cooper [MS]
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "Hans Pennings" <pennings@tiscali.nl> wrote in message
> news:ac5s1j$oc3$1@reader1.tiscali.nl...
> > When I created a certificate for a recovery agent (today), I noticed
that
> > the certificate lists an expiration date of April 24, 2002. Although
> > everything appears to work okay, this does not exactly look reassuring.
> Does
> > anyone know what this means?
> >
> > One item I have not figured out is removing the private key from the
> > recovery agent. When I import it later, I get no access to encrypted
> files.
> > Any suggestions?
> >
> > Thanks.
> >
> >
>
>

Relevant Pages

  • Re: recovery agent
    ... Are you sure that the expiration date isn't April 24, ... If you've exported both cert and key into a .pfx file, ... For lots of info about EFS, including recovery agent import/export, check ... > One item I have not figured out is removing the private key from the ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Private & Public Key storage location
    ... with that you complete the 'certificate' to have both public and private key ... To view the complete cert, you access the cert mmc, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Private & Public Key storage location
    ... with that you complete the 'certificate' to have both public and private key ... To view the complete cert, you access the cert mmc, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Private & Public Key storage location
    ... When you got the server cert file, ... its end & send only the public key to the CA along with the other websites ... The CA never know the private key of the website. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Encryption
    ... - make sure anything encrypted with the other cert was copied into ... If I encrypt a folder on the copied-to machine, ... The private key import for W2k I do not clearly recall at ...
    (microsoft.public.win2000.security)