Summary
The Encrypting File System is a valuable addition to data security, whether implemented in a domain or on a single standalone machine. A sound recovery policy is needed, however, because encryption keys can become damaged, accidentally deleted, or destroyed. Best practices dictate that the implementation of CA-produced encryption keys will make the system easier to manage. |