eToken and EFS

[news.microsoft.com]

Hi,

I just deal with the Microsoft Certificate Services, especially the topic
Encrypted File System (EFS).
Is it possible to use an USB token to store the certificate and the private
keys so they never leave the token? Smartcard logon works without any
Problems, but it isn't possible to have more certificates on a eToken usind
the Smartcard Enrollment Station.

If I store encrypted files on a server, it always creates local user
profiles with the keys in. This is normal without roaming user profiles, but
should it also happen, if an external smartcard is used?

Thanks for your help.

Volker Schmid

 

[David Cross [MS]]

Today, in current versions of the operating system, EFS is not supported
with the provate keys stored on a smartcard. If you are interested in this
functionality, please contact (e-mail address removed) who will be holding a
discussion on this topic at the upcoming Professional Developer Conference.