Certificates
The keys used by EFS are issued by the Microsoft Base Cryptographic Provider (or the Enhanced provider, if you use the high encryption option.) These keys cannot be transported in their native form. They must be exported to a transportable format called a certificate.
Handling certificates in Windows 2000 requires the use of an MMC snap-in called Certificates. This tool does not have a pre-existing console. You must create a custom MMC console containing the Certificates snap-in. If you are not familiar with building custom MMC consoles, refer to the online help or a reference manual. Figure 2 shows what the console looks like. When you have created a custom Certificates console, you can export certificates for storage and safekeeping and can import them when you need to recover a file.
Custom MMC console with Certificates snap-in loaded