The Data Protection profile encrypts enterprise data and restricts access to approved devices. Create an EFS certificate to encrypt your enterprise data protected by a Data Protection profile.
To create an EFS certificate:
- On a computer without an EFS certificate, open a command prompt (with admin rights) and navigate to the certificate store you where you want to store the certificate.
Run the command:
The value of <EFSRA> is the name of the .cer and .pfx files that you want to create.
- When prompted, enter the password to help protect your new .pfx file.
- The .cer and .pfx files are created in the certificate store you selected.
- Upload your .cer certificate to devices as part of a Data Protection profile. For more information, see Configure a Data Protection Profile.