Error "The selected user has no certificates suitable for Encrypted File System Recovery and cannot be added as a recovery agent" attempting to designate a Recovery Agent for the domain

The Add Recovery Agent Wizard is unable to find the certificate because it is not published in Active Directory.

Use the following steps to resolve the issue:

1. Log on using an account with administrative rights to the Certificate Authority.
   
   
2. Click Start, select Run, and type certtmpl.msc to open the Certificate Templates snap-in.
   
   
3. Right-click on the certificate templates and select Manage.
   
   
4. On the General tab, check Publish certificate in Active Directory if it is not selected.
   
   
5. Restart the Certificate Services service from the Services snap-in or using the command net stop certsvc & net start certsvc.
   

You should now be able to add the user with the Add Recovery Agent Wizard.

For more information about adding a Recovery Agent, see the following Microsoft website:

Add a recovery agent for the local computer
http://technet.microsoft.com/en-us/library/cc783176(WS.10).aspx

Note This is a "FAST PUBLISH" article created directly from within the Microsoft support organization. The information contained herein is provided as-is in response to emerging issues. As a result of the speed in making it available, the materials may include typographical errors and may be revised at any time without notice. See Terms of Use for other considerations.