Re: Encrypted Files

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Carey Frisch [MVP] (cnfrisch_at_nospamgmail.com)
Date: 09/09/04 

Date: Thu, 9 Sep 2004 10:26:11 -0500

Before encrypting anything important, you should back up your
personal encryption certificate (with its associated private key)
and the recovery agent certificate to a floppy disk and store it in
a secure location. If you ever lose your original certificate
(because of a hard disk failure, for example), you can restore
the backup copy and regain access to your files. If you lose all
copies of your certificate (and no recovery agent certificates exist),
you won't be able to use your encrypted files. No back door exists,
nor is there any practical way to hack these files.
(If there were, it wouldn't be very good encryption.)

HOW TO: Remove File Encryption in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308993

Without a backup of the original Encryption Certificate Key, encrypted files
are unrecoverable as they will stay encrypted forever. There is no recovery
method since the encryption algorithm is now completely different with a
reinstall of Windows XP.

See if the following articles help in any way:

HOW TO: Take Ownership of a File or Folder in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421

Best Practices for the Encrypting File System
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316

Encrypting File System in Windows XP
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx

EFS Files Appear Corrupted When You Open Them
http://support.microsoft.com/default.aspx?scid=kb;en-us;329741 

-- 
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Be Smart!  Protect Your PC!
http://www.microsoft.com/athome/security/protect/default.aspx
---------------------------------------------------------------------------------
"Jorist" wrote:
| My computer recently bit the dust, but I was able to salvage the Hard Drive. 
| I have some files on the HD there were encrypted that I need to retrieve. I 
| have tried installing the HD into a couple of other computers and been 
| unable to boot with it. However, I can install it as a slave device. Does 
| anyone have any idea how I would be able to recover these encrypted files in 
| this situation. I now know that I needed to have some keys backed up but I 
| didn't. But I think since the actual Hard Drive is unchanged I may still be 
| able to recover the files. Any help that can be provided would be greatly 
| appreciated. Thanks in advance.
| 
| John

Relevant Pages

  • Re: SQL-Server startet nicht ...
    ... Because connection encryption is required, ... You should verify that the certificate is ... Check the SQL Server error log and the Windows event logs for information ...
    (microsoft.public.de.sqlserver)
  • Re: Decrypt windows files
    ... Iam using Windows XP joined to a Windows 2000 Domain, I encrypted the files using my domain user account so I need a help in decrypting my files. ... Since you forget to back up your certificate, unless you set a recovery agent you are most probably out of luck. ... There is no backdoor to encryption. ...
    (microsoft.public.security)
  • Odd problem with File Encryption
    ... Disk to change the Administrator's password on a Windows ... >the encryption suddenly stopped allowing me access. ... >checked the certificate itself and it has not expired, ... >private key (yet in properties it says i have a private ...
    (microsoft.public.security)
  • Re: Administrative Privileges
    ... Create and Configure User Accounts in Windows XP ... Set, View, Change, or Remove Special Permissions for Files and Folders in Windows XP ... personal encryption certificate ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Questions regarding EFS
    ... Actually, it's not at all like adding a recovery agent, nor is the ... UserBob has an EFS certificate. ... Symmetric keys are used for file encryption ... Option 1- UserBob has UserJoe log on to Ripped2 and create a file, ...
    (Focus-Microsoft)