RFS and PKI with government CAC card. There was a discussion back in 2006 that spoke of this challenge. I need to deploy 20K laptops using RFS to be used with CAC cards for PKI. We tried Credant and PGP which both presented unique problems. Credant didn't work well in the government spaces with the AD environment. PGP had problems during boot and required userid and pw. As you can tell I'm not terribly technical, but that aside I need to learn and understand how to comply with dual factor authentication, encrypt the data and then if the user lost their CAC card and couldn't remember their pw, how would we recoved the encrypted data. I believe we would do this with a public key, but not certain of that.