Enroll a new certificate into the Group Policy as an encrypted recovery agent.

• 将一个新证书作为经过加密的故障恢复代理注册到组策略。