Re: NTFS File Encryption Question

Ok, but can you answer my original question:

I need to put NTFS EFS files on a USB external drive and then be able to read and use those files (with a password, of course) when that USB drive is plugged into another computer.

I've created the drive and EFS encrypted files, and they work -- on the computer on which they were created.

I exported the certificate (.pfx file) from the computer on which the files were made, and imported it into the "target" computer, thinking that this would give me access to the files on the target. However, it did not (or quite possibly I did it wrong).

Can someone tell me how to do this? No data has been lost or anything, I just want to understand how to create encrypted files on an external USB drive and then access those files "normally" when that drive is plugged into another computer. Importing the pfx file doesn't do it; taking ownership doesn't do it. I've been trying things for two weeks, and so far no luck. This is a workgroup situation (no domain present), only one user on each PC, and no "recovery agent".

Thanks

Don Burnette wrote:


Read up on encryption here:
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316

NTFS file encryption is not for the faint of heart. You take a risk when you encrypt. There is NO back door to get your files back if you find yourself in a situation where you can't access them. You must have a valid private key and certificate, and best to have a designated recovery agent.

Remember, encryption is only as good as the password you have assigned to your account. It runs transparent. If someone wants at your files, and can figure out your password, then it does no good...

It can be easy to have files ecrypted, and without thinking you do a reformat, or find yourself in a disaster situation and have to reformat, only to find you can no longer access those important files you have encrypted. Or you find yourself in a situation where suddenly your user profile has become corrupt...

I keep my private key and certificate seperate, on both a floppy and a cdr, and put away in a safe place.
I really probably don't need to use encryption, but I am paranoid and if my system should get stolen, or someone get access to it without my knowledge, I do not want them to easily be able to get to important personal information, like my financial files. But I realize, even with the precautions I take, I still run a risk of loss if I screw up, which can happen!

So if you really believe you need encryption, and accept the risk, I strongly suggest to do a lot of reading on it, then ecrypt some non important files, and test them, before ecrypting your important files that you can't do without.

Don Burnette

.

Relevant Pages

  • Re: Data Salvage protected folder HELP!
    ... > external USB setup to allow me to acceess and copy all of my pertinent ... An easy way to retrieve Windows files is to boot with Knoppix, ... http://www.beginningtoseethelight.org/efsrecovery/ - more encryption ...
    (microsoft.public.windowsxp.security_admin)
  • Re: usb flash disk, ext3 file systems, enforcing rights, security
    ... and I've also recently lost my USB flash drive. ... What I did was wipe the partitions and create 2 new ones, one for vfat, ... vfat partition, and everything else in the protected area. ... vfat and the other "83" for use with encryption. ...
    (Fedora)
  • Re: How to Facilitate and Use Data Protection on DOM (WinCE 6.0)
    ... encryption on and off, while still having the filter load. ... Decryption in my file system filter seems to work fine but the 2nd ... FS filter is NOT APPLIED to Removable USB ... Hard Disk as well as the Removable USB media. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: How to Facilitate and Use Data Protection on DOM (WinCE 6.0)
    ... encryption on and off, while still having the filter load. ... Decryption in my file system filter seems to work fine but the 2nd ... FS filter is NOT APPLIED to Removable USB ... Hard Disk as well as the Removable USB media. ...
    (microsoft.public.windowsce.platbuilder)
  • Re: USB Memory stick with transparent encryption
    ... Since the wear-leveling is implemented in the USB mass storage controller ... which does not only work under Windows but also under Linux. ... That means it's very likely that an encryption processor on that stick ...
    (comp.os.linux.misc)