EFS and creating Recovery Agent certificate

Sofista · #1 03-Mar-2008, 09:08 PM

Hi!

I`m preparing for my MCP and I can`t get my head around using RA, it might sound stupid but I got a problem :P

I know I should create certificate with cipher /r:file name but should I do it using administrator or the user that encrypted the file? Should the certificate be created before or after encrypting the files? I get a bit frustrated about it, It's not that important but I want to know it.

I`m using 70-270 Microsoft book and Sybex to prepare for the exam and they don`t give a lot of info about it

Can one of the wise and experienced user explain it? I`ve seen video made by JohnBradbury, it was great but there was no information about RA.

Kind regards

Robert

**derkit** · #2 03-Mar-2008, 09:17 PM

From my 70-271, if you create an admin account that can be used as an override if the user forgets his password, the Recovery Agent certificate needs to be made before the file is encrypted - normally it is an admin account as a user account probably wouldn't have NTFS permission access to the file anyway (generally speaking)

I'm hoping..... (always get worried when I try and help other people out, just in case I get it wrong!

)

silentjess · #3 03-Mar-2008, 09:48 PM

if i'm not wrong, http://www.microsoft.com/technet/sec...hyetc/efs.mspx
http://www.practicalpc.co.uk/computi...xpencrypt1.htm
administrator can create a .cer by loggin in as the user. both before or after selecting efs on a file or folder.
login as user, e.g. john
at cmd,
type cipher /r:filename
filename is the name of the key
in this case,
cipher /r:johnkey

the johnkey.cer and the johnkey.pfx are created under user's document setting folder.