Windows 10: Folder Encrypted with BitLocker and Certificate/Key Issues

Dear Community,


Lenovo and Microsoft support could not help me with the following matters, but I hope you can.


I'm a self-employed CPA and I bought a new Lenovo laptop running Windows 10 in June to replace one that was failing. On both the old and new computer I have a folder encrypted by BitLocker where I store client files. However, two interrelated problems have developed relating to certificates and private keys:


1. When I first encrypted my client folder on the new computer, I received a prompt to save the certificate and private key for backup purposes, which I did. However, each week now I receive that prompt without any action on my part. After some investigation in certmgr.msc, I now know that each week I'm being issued a new certificate and/or private key. I have five certificates so far and three private keys. I'd like for the weekly re-issuance to stop, but I don't know how to get Windows to be satisfied with a single certificate and private key! Any suggestions?


2. When the weekly notices started I thought Windows was confused and I did not back up the second certificate and private key I was issued, since I thought I had done it already. However, now that Windows has moved on to issuing the third and further certificates, I can no longer access any files that were encrypted during that week-long period the second certificate was in effect.


I can see the second certificate in certmgr.msc but it says no private key is associated with it. All the other certificates have a private key associated with them. However, when I search the Windows folder where private keys are kept C:\ProgramData\Microsoft\Crypto\RSA\ using Recuva, I cannot find any deleted private keys, so I am hopeful that this second certificate can be used somehow. Is there a way to know what happened to the private key for the second certificate, and allow me to regain access to the files?


As a side note, I have three keys in the RSA folder, but five certificates in certmgr.msc and four of those certificates are paired.


I appreciate any advice you may have to solve either or both issues!

:)

 

Windows 10 Encryption/Decryption of Folders/Files 'Certificate'

Hi,

Thank you for posting in Microsoft Community.

To understand the issue better, I suggest you to answer the below question.

• Were you able to Encrypt the data?
• Did you get any error message?
• What exact issue are you facing with Encryption and Decryption?

Note: The first time you encrypt a folder or file, an encryption certificate is automatically created. You should back up your encryption certificate.
If your certificate and key are lost or damaged and you don't have a backup,
you won't be able to use the files that you have encrypted.

Keep us posted to help you better.

 

BitLocker Encrypted Hard Drive to MAC

Hi,



Thank you for posting your query in Microsoft Community. I regret the inconvenience caused to you. Let me help you.



I suggest you to perform below mentioned steps to disable BitLocker.

To disable BitLocker I would suggest you try the following steps and see if it helps.

• 
  Press Windows key + X and click on
  Control Panel.
  
• 
  Change View by from Category
  to Large Icons/Small Icons.
  
• 
  Click on BitLocker Drive Encryption and click on
  Turn BitLocker Off.
  
• 
  Follow on screen instructions. Click on Decrypt the Drive
  when the message appears.
  

I would suggest you click on the link below and refer the following article.

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

Scenario 12: Turning Off BitLocker Drive Encryption (Windows 7)

(You can refer the steps in the above link as they are applicable for Windows 10 as well)



Check if it helps.



I hope the information helps. Please keep us posted on the issue. We will be happy to assist you accordingly.

Thank you.

 

where to find bitlocker key?

The BitLocker key is in one of the three places that the program suggested to you:

• In a folder of your choice.
• Jotted down on a piece of paper.
• In your Microsoft account (if you have one).

Which one did you select at the time of encryption?

Did you create a backup of your data?