How to back up the recovery agent Encrypting File System (EFS) private key in Windows
This article describes how to back up the recovery agent Encrypting File System (EFS) private key on a computer that is running Microsoft Windows Server 2003, Microsoft Windows 2000, Microsoft Windows XP, Windows Vista, Windows 7, Windows Server 2008 or Windows Server 2008 R2. Use the recovery agent’s private key to recover data in situations when the copy of the EFS private key that is located on the local computer is lost. This article contains information about how to use the Certificate Export Wizard to export the recover agent’s private key from a computer that is a member of a workgroup, and from a Windows Server 2003-based, Windows 2000-based, Windows Server 2008-based or Windows Server 2008 R2-based domain controller.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB241201.