Windows 10: Encrypting File System and Certificates

Hello


I was hoping someone could clearly explain why sharing files encrypted using EFS require Enterprise Certificate Authority?





Cheers


Julian Leach

:)

 

Windows 10 Encryption/Decryption of Folders/Files 'Certificate'

Hi,

Thank you for posting in Microsoft Community.

To understand the issue better, I suggest you to answer the below question.

• Were you able to Encrypt the data?
• Did you get any error message?
• What exact issue are you facing with Encryption and Decryption?

Note: The first time you encrypt a folder or file, an encryption certificate is automatically created. You should back up your encryption certificate.
If your certificate and key are lost or damaged and you don't have a backup,
you won't be able to use the files that you have encrypted.

Keep us posted to help you better.

 

Cannot Access Encrypted Files After Successfully Importing Encrypting File System (EFS) Certificate

I encrypted a folder and its contents on my Windows 10 system. I then successfully backed-up (export) my EFS certificate to a thumb drive and successfully imported the EFS certificate to a Windows 7 system. I confirmed the EFS certificate did in fact install
on the Windows 7 system and is located in my Personal | Certificates folder.

However, when I attempt to test the certificate by coping several of the encrypted files from my Windows 10 system to a USB drive and then attempting to open the files on my Windows 7 system, the file will not open. Windows as added a .PFILE file extension
to each of the documents. It's my understanding the .PFILE indicates a protected file; which would be correct.

I can open the files on the USB drive without any issues on my Windows 10 system. So, I'm confused why I can't open them on my Windows 7 system since I received successful confirmations on my both the export and import of the EFS certificate.

Any suggestions?

 

How to open recovered encrypted files

Hi Navid,

Thank you for posting in Community.

We understand your concern and we will provide the assistance required to help you resolve the issue.

You can lose access to encrypted files if you install a new operating system or upgrade your current one, or if your current operating system fails. The following steps can help you regain access to encrypted files.

As you have stated that, the recovered files belonged to the previous OS I would suggest that you transfer the encrypted files to an external drive and perform the steps mentioned below:

• Insert the USB that your certificate and key are saved on.
• Open Certificate Manager open Run Command and type
  certmgr.msc in the dialog box, and then press Enter.‌
  

Note: If you're prompted for an administrator password or confirmation, type the password or provide confirmation.

In the left pane, click Personal.

• Click the Action menu, point to All Tasks, and then click
  Import. This opens the Certificate Import wizard
  and then click Next.
• Click Browse and navigate to the file's location, click
  Open, and then click Next.
• If you have navigated to the right location but don't see the certificate you are importing, then, in the list next to the
  File name box, click Personal Information Exchange.
• Type the password, select the Mark this key as exportable check box, and then click
  Next.
• Click Place all certificates in the following store, confirm that the
  Personal store is indicated, click Next, and then click
  Finish.
• After you import the certificate, you should have access to the encrypted files.

Hope this information helps.