| Event Id | 6028 |
| Source | EFS |
| Description | EFS recovery ploicy contains invalid recovery certificate. |
| Event Information | According to Microsoft: CAUSE: The Encrypting File System (EFS) recovery policy implemented on this computer contains one or more EFS recovery agent certificates that have expired. These certificates cannot be used. SOLUTION: Either renew the existing certificates or generate new certificates for the EFS recovery agents and reapply the recovery agent policy with those certificates. |
| Reference Links | Troubleshooting Encrypting File System Troubleshooting ms-PKI-Key-Recovery-Agent Layered Security in a VPN Deployment |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.