Password recovery settings
This section describes the two configuration steps necessary to be able to reset the password later if required for an encrypted container (for example, a force-encrypted USB stick). In order to use the offline password recovery functionality, you must generate a master certificate consisting of a public and private key pair before creating the first encrypted container.
To do this, click Create new recovery certificate. This will start the wizard for generating the main certificate.
Either specify the folder where you want to save the certificate file or, alternatively, choose a smart card as the location.
You can additionally save the certificate and password on the server so that they can be used by the DOC without the file having to exist locally.
Then follow the instructions here from step 3.