Using FSA with the Windows Encrypting File System (EFS)

FSA is compatible with the Windows Encrypting File System (EFS) on some versions of Windows.

For details, see the Enterprise Vault Compatibility Charts at http://entsupport.symantec.com/docs/276547.

To use FSA with EFS you must perform some configuration steps before you can create an archive point for an encrypted folder or volume.

To use FSA with EFS

  1. Configure the Vault Service account as an EFS recovery agent for the domain.

  2. Enable the file server and the Enterprise Vault server as remote servers for file encryption or decryption. See the following Microsoft TechNet article:

    http://technet.microsoft.com/en-us/library/cc757963.asp

    Set up the remote server delegation as follows:

    • With the file server selected as the remote server, trust it for delegation to the CIFS service and the Protected Storage service on the Enterprise Vault server and the Active Directory (certification authority) server.

    • With the Enterprise Vault server selected as the remote server, trust it for delegation to the CIFS service and the Protected Storage service on the file server and the Active Directory (certification authority) server.