thinQmaster Virtual testing partner Adaptive practice exams that find your weak spots and drill them. Every answer explained. From $69
Enroll

thinQmaster

Find your exam

Five questions free, before you decide.

Step 1 · choose a vendor

In one of our camps? Your practice exams come with the tuition — they are on your study page already.

Security Fundamentals & Crypto · Intermediate

Key Recovery Agent

Designated person or account authorized to recover encrypted data or archived private keys.

Definition

Recovery agents allow organizations to restore access when users lose keys or leave. In Windows, EFS Data Recovery Agents and AD CS Key Recovery Agents serve this role. Their use should be controlled with dual control and audited.

Example

An AD CS key recovery agent retrieves a departed employee's archived encryption key to open their EFS-protected files.

Exam tip

Recovery agents must be tightly controlled; they can decrypt others' data.

Related terms