ca证书申请（CA certificate request）

ca证申请（CA certificate request） ca证书申请(CA certificate request) With the popularity of Win 2000/XP, NTFS partition format is also increasingly popular. Many people use Win 2000/XP with EFS (Encrypting File System) to save some important data encryption. However, reinstall the system if there is no original backup personal encryption certificate and key file, the encrypted file will not be able to access (including copy), or even not allowed to delete (only through the format of the delete method). So the digital certificate backup and recovery is very important. A backup, digital certificate In the "start to run", type "MMC", open the "console", click "file, add / delete management unit", then click "add", in the "snap" column, double-click the "certificate" pop-up "certificate management unit" window; if the non administrator user login, "certificate" the automatic loading; as if the administrator login, click user accounts for me, and then click finish". Back to the console root ", the general personal certificate will be placed in the" individual "and" trusted "branch, so you need to backup the digital certificate to view or search for these branches. Select a certificate in the right pane of the "purpose" column can understand the issuance of certificates, such as "file encryption system" etc.. Right click the certificate, select all tasks to export ", open the" certificate of Export Wizard, and then follow the prompts. Tips: 1. recommendations in the "export the private key window (this option is available only in the private key can be derived and can be marked as is shown, the private key is used for file encryption and digital certificate system) and select" no, do not export the private key". You also need to export the private key password input protection, so also need to provide the password recovery in this certificate. 2. if you only need a digital certificate encryption system backup file, can take the "certificate to view" (select the certificate - the current user ", click" view, options "in the" view mode "column check" certificate "; then to) in the console root window" the encrypting file system branch, find the file encryption digital certificate in the right window, according to the above way can be directly derived. 3. if you just want to export your current user certificate (rather than certificates as administrator), you can click "in IE tools and Internet options" into the "content" tab, click the "certificate" button, select the certificate to be exported in the open "certificate" window, and then in accordance with the above method. A quick method is: select the certificate to be exported directly, drag it to the stored certificate folder with the mouse. Two, the recovery of the digital certificate 1. direct recovery Open the certificate - the current user "branch, selected to import the certificate of the logical storage area (view as" logical certificate store "), such as" person ", right click, select all tasks to import" open "certificate Import Wizard", according to complete the certificate import tips. If the import is a password protection certificate, also need to enter the password. Of course， We can also operate in IE, click Tools > Internet options "into the" content "tab, click the" certificate "button, and then import the corresponding digital certificate. 2. specified recovery agent Open the control panel, management tools and local security policy, in the "right click file system", is the strategy of public key encryption, select add data recovery agent ", selected by" as a proxy for the user or the user has a CER file recovery certificate proxy wizard fault recovery. When the recovery of encrypted data, the first to be designated as a data recovery agent user log on the computer, the user agent has fault recovery certificate import computer (the same specific implementation methods), then the need to restore data (file or folder) on right click, select "properties" in the "General tab, click the" advanced "Cancel" Encrypt contents to secure data check box can be encrypted data recovery. What is the name of a digital certificate? Digital certificate is also called the CA Certificate (certificate), is actually a very long encoding, digital signature and certificate name including the applicant's certificate and related information, the applicant's public key certificate issued by CA, the validity of the content, usually stored in the computer hard disk or IC card. Digital certificate by CA Certification Center issued certificate subject ("certificate of applicant" to obtain CA Certification Center certificate issued after a "certificate subject") only correspondence contained in the certificate of the public key. Because the encryption process is not reversible, only with the private key can decrypt the digital certificate, so the management is particularly important. In actual operation, generally uses the specified certificate backup or recovery agent method.