EFS certificate/privatekey cache

[Ondrej Sevecek]

Hello,
scenario is as follows:

1) have no files EFS encrypted (e.g. new profile)
2) encrypt some file = autogenerated certificate
3) export the certicate with private key and let THE PRIVATE KEY DELETE
4) file is still accessible due to cert/keys present in "EFS cache"
5) log off
6) log on
7) file is STILL ACCESSIBLE - keys are still in cache

so as I tried it, EFS key cache is flushed only through restart.

Is there any method to flush the cashe from user's session?

Thanks Ondra.

 

[Steven L Umbach]

In Windows 2000 you need to reboot. XP will clear it with a logoff. ---
Steve

 

[Ondøej ©eveèek]

Many thanks. Can I force key flush from the session?

Ondra.

 

[Steven L Umbach]

There is no way that I know of. --- Steve

Many thanks. Can I force key flush from the session?

Ondra.

 

[David Cross [MS]]

No, there is no mechanism to flush the cache

 

[Drew Cooper [MSFT]]

Other than rebooting, there is one way to flush the cache: Do EFS operations
with enough new users that the original user's cache entry is bumped. (I
don't remember what our cache size was in Win2k. 100, maybe?)
--
Drew Cooper [MSFT]
This posting is provided "AS IS" with no warranties, and confers no rights.

No, there is no mechanism to flush the cache

--


David B. Cross [MS]

--
This posting is provided "AS IS" with no warranties, and confers no rights.

http://support.microsoft.com

Many thanks. Can I force key flush from the session?

Ondra.