Windows 10: Create EFS certificate with custom cipher options

Hi all.


I would like to create an EFS certificate for myself self-signed with the following properties:


signature algorithm and hash : at least SHA256 preferably SHA512

Public Key: RSA at least 4096 preferably RSA-8192 if possible

ECC Key size: 521


I would like to also export the file as .PFX


Generating an EFS certificate from the Certificates MSC console has issued me the following:


Signature : SHA1

Public KEY : RSA-2048

ECC Size: Is not displayed in the properties, but I think it generated the default size


I followed this tutorial on how to set it up:

https://www.limitededitionsolutions.com/change-efs-public-key-policy/


However some settings, such as key size for RSA is grayed out and set to 2048.

Only ECC can be changed.





Is there a way I can generate a certificate with the above bolded properties locally?


Thank you !

:)

 

Create a EFS certificate

Hello my name is Bradford and I'm an Independent Advisor for the Microsoft Community and I will try to resolve your problem with manually creating an EFS.

Below, is a tutorial on how to create a new EFSDRA Certificate so that you can recover the files from the encrypted drive and how to then use that certificate to recover data.

I apologize that this process is rather complex but the Microsoft tutorial is rather detailed:

Tutorial Link :

Please let me know if this helps

 

Create a EFS certificate

Sorry about that, this link: https://docs.microsoft.com/en-us/windows/securi...

 

Cannot Export / Backup my EFS certificate private key

Windows 10 Pro
1909

Hi Folks,

I am trying to export my EFS certificate as a backup, however I am having no joy.

Note: I can encrypt and decrypt files using EFS no problem using my account.

Trying in Certificate Manger:

certmgr.exe (As Administrator)
Personal / Certificates
Right click the EFS cert / Export

The option to export the private key is greyed out, with a note:

The associated private key is marked as not exportable. Only the certificate can be exported

Using cipher.exe:

cipher /x c:\temp\EFSCertBack

Error: Key not valid for use in specified state.

Before I decrypt all of my EFS files and start a fresh any ideas?

Cheers