Note: You must be logged in as an administrator to perform these steps.

A recovery certificate is a special Encrypting File System (EFS) certificate that, if created and installed correctly, allows you to recover encrypted files if the encryption key is lost or damaged. You need to create a recovery certificate, install it, and then update the previously encrypted files with the new recovery certificate. Note: These steps cannot be completed on Windows Vista Starter, Windows Vista Home Basic, and Windows Vista Home Premium.

Steps to create a recovery certificate:

It is recommended that you store the recovery certificate on removable media such as a CD or USB flash drive.

1. Open the command prompt as an administrator.

2. Insert the removable media used to store the certificate.

3. Navigate to the directory on the removable media drive where you want to store the recovery certificate, type cipher /r:filename , (where filename is the name you want to assign to the recovery certificate), and then press Enter. If you are prompted for an administrator password or confirmation, type the password or provide confirmation. Note that Windows stores the certificate in the directory displayed at the command prompt. The removable media containing the recovery certificate should be kept in a safe location, such as a locked desk drawer.

How to install the recovery certificate:

1. Insert the recovery certificate of removable media.

2. Open 'Turn on Local Security Settings'. If you are prompted for an administrator password or for confirmation, type the password or provide confirmation.

3. Click Public Key Policy, right-click Encrypted File System, and then click Add Data Recovery Agent. This opens the Add Recovery Agent wizard.

4. Click Next and navigate to your recovery certificate.

5. Click the certificate, and then click Open.

6. When asked if you want to install the certificate, click Yes, and then click Next.

7. Run the command prompt as administrator.

8. At the command prompt, type gpupdate, and then press Enter.

Steps to update previously encrypted files with new recovery certificates:

1. Log in to the account you used to first encrypt the files.

2. Run the command prompt as administrator;

3. At the command prompt, type cipher /u, and then press Enter.

If you choose not to update your encrypted files with a new recovery certificate at this time, they will be automatically updated the next time you open them.

Refer to "Creating a recovery certificate for encrypted files in Vista system

"