??? ?????? ?????? ???? ?????? ???? ????? ???????

???? ??? ??????? ????? ?????? Microsoft Windows 2000 ?????? "???????" (CAs) ???? ????? ?????? ???? ????? ??????? (EFS) ??????? ???? ??????? EFS.

???? ???? ???

??? ????? ??? ??????? ??? ????? ???????:

• ??? ???? ?? EFS ?????????? ????? ?? ?? ?????? ??????? ??????? ?????.
• ??????? ???? ???? ???? ???? ?????? ????? ?????? ?????? ????????? ?????? EFS ????? ??????? ??????????.

???? ???? ??? EFS ? ?????? ??????? ??????? ?????

EFS ?? ???? ?? ???? ??????? Windows 2000 ?????? ??????? ??? ????? ????? ???? ????? NTFS. ?????? EFS "????? ?????" ???? ????? ?????? ???????? ??????? ??????? ?? Windows 2000.

????? ???????

????? ????? ????? ?????? EFS ??? ????? EFS ??????? ?????? ??. ??? ?? ????? ? ???? EFS ?????? ?????? ??????? ?????. ?? ???? ???? ????? ???? EFS ????? ??????? ? ???? ??????? ???? ?????? EFS. ???? ????? ???????? Windows 2000 CA ???? ????? ???? EFS ??? ????? EFS. ??? ????? ????? ????? ?????? ?????? EFS ??? ??? ????? ????? ????? ?? CA 2000 Windows ??? ?????? ?? ??? ?? ??? ?????? ???? ????.

??? ?????? EFS ??? ?????, ?? ???? ?????? ???? ????? ?????? ??????. ???????? ??? ???? EFS ??? ???????? ??????? ???????? ??? ???? ???? ??? ???? ?????? (??? ????? EFS ?????? ?????? ?? ?????? ??????? ??????? ?????? ???? ?????? EFS ?? CA ??? ?????? ?? Windows 2000).

???? ??????? ?????? ??????? ?????? EFS:

• ?????? ????? ????? ?? ??? EFS ??????? SetUserFileEncryptionKey API ??????? ?????? ???? ????? Microsoft (MSDN). ??????? EFS ???????? ????? ????? ?????.
• ????? ????? ??????? ??????? ?? ????? ??????? ?????? ??? ??? ???? ??????? ?? ??????? ???????:
  Version\EFS\CurrentKeys NT\Current HKEY_CURRENT_USER\Software\Microsoft\Windows
  
  ????: CertificateHash
  ?????: REG_BINARY
  ????????: ???? ??????? ????? ?????

????? EFS ?????? ????? EFS ????? ?? ?????Microsoft Rivest-Shamir-Adelman (RSABase) ????? ???? ???? (CSP). ??? ?? ??? ????? ??????? ????? ??? ??????? ??? ??? CSP. ???? EFS ?? ???? ???????? MY ???? ????? ??? ???????? ????????? ??????.

??? ?????? ??????? ??? ???????

?????? EFS ????? ?????? ?????? ???????? ?????? ?????? ?????. ??? ????? ????? ???? ?? ??? ????. ?? ???????? ????? ???????? ????????? DESX (????? ???? ?? ????? ????? ????????). ???? ????? ?? ???? ????????? ??????.

?? ??? ????? ????? ????? ?????? ???????? ??????? ??????? ????? ?? ????? EFS ?????????. ??? ????? ???????? ??????? ?????? "?" ??? ????? ????? ?? "?" ????? ??????? ?? ??? ???? ?? ????? ???? ????? ??? ?????? ??????? EFS. ????? ??? EFS ??? ????? ???) ? ???? ?????? ??????? ????? ??? ????? ????? ????? ??????. ?????? EFS ?? ??????? ???????? ??? ????? ????????.

????? ??? ??? ???? ???? ?????, EFS ????? ??????? ??????? ????? ?? ??? ???? ??????? ??? ??? ???? ????????? ???????? ????????. ??? ?? ??? ???? ????????? ???????? ???????? EFS ????? ?????? ??? ??????? ????????? ??? ?????? ?? ?????? ????? ????? ?????.

??? ??? ??? EFS ??? ???? ????? ?? ????? ????? ??????? ??? ???? ??????? ?? ?? ????. ?????? ??????? ????? ????? ??? ???? ??????? ??????? ???? IP.

????? ????? EFS

???? ?????? ?????? ????? EFS ???? EFS ????? ???? ?????? ????? ????? ?? ??? ?????? ?????. EFS ???? ?? ????? ??????? ??????? ??? ?????? ????????.

?? ???? ????? ????? EFS ????? ??????? ??????? ??? ???????? ????? EFS ?? ??????? ??????? ??????? ??? ????????. ????? EFS ?? ???? ??? ??????? ???????? ?????? ??? ????? ????? ?? ?????? ?? ?????? ??? ????? ????? ??? ???? ?????? ??? ????? ?????. ????? ????? ?? ????? ????? ????????, ???? ????? EFS ????? ????? ???? ???? ???? ?????, ??? ??? ???? ???? ?? ????? EFS ?? ??????.

??? ??? EFS ??????? ????? ????? ??? ?????? ??? ?? ??? ???? ?? ????? ?????? ???????? ????? ???? ? EFS ????? ????? ?????? ??????? ???????? ????? ?????.

?????? ?? ???????

EFS ??? ????? ?? ?????? ?? ???????.

???? ??????? EFS

????? ??????? ????? ??????? EFS ??? ????? ??? ???? ??? ??? ???????? ???? ??? ?????? ????? ??????. ???? ????? ?????? ???? ??????? EFS ???????? ???? ??????? EFS ??? Windows 2000 CA.

????? ????? ?????? ???? ??????? EFS ?? ??? ?????? ?????? ????? ?????????? ??? ??????. ????? ????? ????? ??? ???????? ????? ?????????? ??? ????????? ?????? ?? ??? ????????? ??????. ?? ???? ???? ???? ??? ????? ????????.

???? "????? ????? ???? ???????" ? ???? ??? ??? ???????? ? ???? ??? ??? ???????? ?????? ?? ???? ??? ????? ??????? ???????? ???????. ?????? ??? ??????? ?? ????? ?????? "???? ?????????". ???? ???? ??? ??????? ???????? ?? ???? ??? ??? ????? ?????? ??????? ??????? "???? ???????". ??? ??????? ??????? ???????? ???? "???? ???????" ???????? ??? ?????. ???? ??? ?? ????? ?????? ?????? (CA) ???????? ???????? ????? "???? ???????".

??? ??? ???? ??????? ?? ???? ?????? (???? ???? ?? ???? ????? ????? CA 2000 Windows ??? ?????? "????? ???? ??????? EFS ????????) ????? ??????? ??????? ???????? ???????? ????? ??????? ??????. ??????? ?????? ?? ??? ???????? ???? ???? ?????? ????? ???????.

????? ????? ??????? ??? ????? ????? ????? ????? ?????? ??? ???? ??????? ??????? ??????? ?? ??? ????? ????????? ?? ??? ??????? ???? ????? ??? ?????? ??????? EFS. ???????? ??? ???? EFS ?????? ??????? ????? ???? ????????? ?? ????? ????? ????? ??????, ???? EFS ?? ?????? ??? ????? ????????.

????? CA ??? ?????? ?????? ?? ??????? EFS ???? ???? ??????? EFS ????????

?????? EFS

????? ????? ???????:

• ??? ?? ????? ???? "??????? ???????" ?? ??????? ????? ????? ????? ????????.
• ??? ?? ????? ??? ???? "??????? ??????? ???????" ?? ??????? ???? "???? ????? ???????" (1.3.6.1.4.1.311.10.3.4).
• ????? ??????? ? ??? ????? ???????? ?? CSP RSABase Microsoft.
• ??? ?? ???? ??????? ??????? ????? ??? ??????? ??? ??? ???????.

??????? KeyUsage ?????? ???? EnhancedKeyUsage ?? ????? ??? ????? ?????? ??????? ?????? ???????? ???? ????? ??? ??? ?????.

???? ??????? ????? ?????? EFS ???????? ?????? ??? ??????:

• ?? ???? CA ???? ????? ????? ?? ????? ????? Microsoft. ?? ??? ??????? ??? ????? ??? ?????? ??????? ?? ??????? ????? ??????? ???????? ?? ??? ???? ????????? ??? ??????? ??????? ????? ?? ???????? ?????? ???????? MMC ????? ????????. ??? ??????? ???????? ??? CSP RSABase Microsoft ?????? ??????? ??????? ??????? ??? ??? CSP.
• ?? ???? CA ???? ???? ????? ????? ???????? ??? ??? ?????? ???? ???? XEnroll Microsoft ????? Microsoft ?????? ????????. ??? ????? ???????? ???????? ?? CSP RSABase Microsoft ???????? ??? ???????? ???????? ?? ?? ?????? ??????? ??????? ?????.

??? ????? ????? ?? ??? ????? ????? ??? ????? EFS ??? ??????? ??? ?? ??????? ?? ????? ??????. ??? ???? ????? ??????? SetUserFileEncryptionKey ???? ?? ????? ?????. ??? ?? ????? ??????? ?? ??? ?? ????? EFS ? ?? ??? ???? ?????? ?????? SetUserFileEncryptionKey. ????? ?? ????? ????? ?? ???? ???????? ?????? EFS ?? ????? ??????? ??????????.

?????? ??????? EFS

????? ????? ???????:

• ??????? ??????? = ????? ???????
• EKU = Recovery(1.3.6.1.4.1.311.10.3.4.1) ???

??? ?? ????? ?? ????? "????? EFS" ???? ???? ???? ?????? ?? ???? ????? Microsoft ???????? ????? ????? ??? ????? ???????? ?? ?? CA ???? ???? ?? ????? ??????? ???????? ????? ??????? ??? ??? ??? ???? ????????? ??? ???? Microsoft.

??? ??????, ???? ??????? ??????? ???????? "????? ???? ?????????".

????? ??????? ??????? ??? ??????? ?? ????? ??????? ????? ???????? ????? ?? ???? ???????? ???????? ??????? ????? ????????? ???????:

• ??? ?? ??? ????? ?????? ?? CSP RSABase Microsoft.
• ??? ?? ???? ??????? ??????? ????? ??? ??????? ??? ??? ??????? ?? CSP RSABase. ??? ?? ???? ??? ?????? "???? ??????? ?????Microsoft v1.0."

????? ??????? ??????? ????? ?? ?????? ???????? MMC ????? ??????? ??????? ???????? ?????. ???: ????? ??????? ?? ??? ??????? ?? ?????? ?? ??? Microsoft ???? ?????? ????? ? ???? ?????? ???? ???? ???? ?????? EFS ? ???? ??????? EFS ????????. ?????? EFS ??????? ?????? ?????? ?????????? ???????? ??? ????????.