EFS private key generation with CA

[Ondrej Sevecek]

Hi,
as I understand, when enterprise CA is established, EFS when requires
certificate for the first time, ITSELF (= on the machine) generates private
key and certificate request and then only sends the request WITHOUT the
private key to CA for signment. Right? So private key never leaves user's
profile/local machine respectively?

thanks Ondra.

 

[David Cross [MS]]

correct

EFS:
http://www.microsoft.com/WindowsXP/pro/techinfo/administration/recovery/default.asp