Ensure the Encrypting File System (EFS) service is set to "Manual" or "Automatic" in services.msc .
This creates two files: DRA_RecoveryCertificate.cer (public key) and .pfx (private key, password-protected). Store the .pfx on offline media. efsui.exe efs installdra
The primary use for the /efs /installdra switch is the deployment of a DRA certificate. Ensure the Encrypting File System (EFS) service is