Encrypting file system and certificates

- While PKI certificates can be used along with security…protocols like TLS to secure network communications,…PKI certificates can also be used to encrypt files.…And we're going to focus here on that using…Microsoft Encrypting File System or EFS.…We're going to build a custom PKI certificate template…so that we can control things like the validity period…for how long that certificate is valid for…encrypting files.…So let's get started here on the server where I've…installed the certification authority.…

I'm going to start by going to the Start Menu and…drilling down under Windows Administrative Tools…and then further drilling down into…the certification authority tool.…We can see we've got a CA here called FakeDomain1…and on the left in the navigator I'll expand that…to reveal Certificate Templates.…And we've got a basic EFS or Encrypting File System template…here, but I want to customize how that behaves,…so I won't use that.…There's also an EFS recovery agent template here, which is…a third party, such as the domain administrator,…