When encrypting via a Self Service policy, there are times that the key does not get escrowed. This issue has caused problem for us in the past. And, due to the unreliability of the process, causes some significant workflow changes.
Has anyone else seen 'missing' recovery keys? Anything you've done to minimize the problem?
EDIT: Just did an inventory and found about a 2.5% failure rate on key escrow.
thanks
Todd
