EEFF encrypt usb device via authentication certificate

[Former Member]

Help! EEFF encrypt usb device via authentication certificate.. certificate can't find any certification.

[securitasis]

You have to create a Regular Key that would need to be attached to the User Key policy that is assigned to the machine in ePO.  Read over page 21 in the FRP Best Practice Guide @ McAfee KnowledgeBase - File and Removable Media Protection 4.3.0 Best Practices Guide

I've found it easiest to make a single global Regular Key that is the default (top) while also enabling the use of a user personal keys.  The user then has the option to make their encryption private (per local or domain account) or shared with other users.

Good luck.

[Former Member]

I have created a Global Key and my Personal account as Active and Regular..

My personal account smg\msolomon client side available keys..

Still can't find Authentication certificate...

Help please

[Former Member · Accepted solution]

Hi Paulo

You can create a authentication certificate in the AD server or as your domain server. Here are the step by step what I've done during my testing. This is a self-sign certificate so you can do this manually every workstation

Go to certmgr.msc> Personal Folder>Right Click All task> Request New Certificate.

After successfully creating the certificate

Next step is to export the certificate so you can install it to your workstation

After exporting the certificate in the certmgr.msc. Copy the certificate file and paste it on the "workstation that has an EEFF installed and connected to your AD server" and Import the file in the certmgr.msc>Personal

Now you can see the authentication certificate on the EEFF

-Jeoff

[Former Member]

Dear Jeoff,

Can you share the procedure for generate the testing cert?

[Former Member]

cdcheung2 wrote:

Dear Jeoff,
Can you share the procedure for generate the testing cert?

Hi cdcheung2

As mentioned above that was the whole procedure for creating the certificate authentication or testing cert. You can create the cert only in the AD server. Just add roles features "Active Directory Certificate Services> Certificate Authority" (I'm using Windows Server 2008 R2). Then  Go to certmgr.msc> Personal Folder>Right Click All task> Request New Certificate. Then Go next in the Enrollment certificate you must see "Active Directory Enrollment Policy" then go next as follows.

[Former Member]

Hi jeoff! si mike2 of smits. hahaha. tagal na to na post ko,