NTFS encryption

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Hi all,

when moving a disk with encrypted data a different WXP system (same userId and password, both local
and not connected) and importing both the EFS and Recovery Agent certificates, files can be opened
but they are not decrypted properly but contain garbled binary data. Moving the disk back shows that
the files are still OK.

WXp docs say that importing the correct certificates (incl. the private keys) is the way of choice
to move encrypted data to an account in a different system.

What's wrong here?

Regards
Uwe

 

[Guest]

Archived from groups: microsoft.public.windowsxp.security_admin (More info?)

Here's a couple of things to check:
1. Do both systems have the same service packs? WXP uses DESX and WXPsp1-2
uses AES. DESX cannot decrypt AES-encrypted files.
2. Have you imported the .pfx file to the second system (though it sounds
like you have)? The .pfx file is the certificate+private key. The key is
needed for decryption. This must be the same certificate and key that were
used to encrypt the files on the first system.
3. Check that you have permissions to the files on the second system.

Hope that helps.
Thanks.
Pat
--
This posting is provided "AS IS" with no warranties, and confers no rights.


"Uwe Pilgram" wrote:

> Hi all,
>
> when moving a disk with encrypted data a different WXP system (same userId and password, both local
> and not connected) and importing both the EFS and Recovery Agent certificates, files can be opened
> but they are not decrypted properly but contain garbled binary data. Moving the disk back shows that
> the files are still OK.
>
> WXp docs say that importing the correct certificates (incl. the private keys) is the way of choice
> to move encrypted data to an account in a different system.
>
> What's wrong here?
>
> Regards
> Uwe
>