Windows XP friends know that the most annoying thing for them is to forget to export the certificate of the backup EFS encrypted file when reinstalling the system. What should I do if I encounter this situation? Can't you watch these files can't be used? Would you like to re-use these encrypted files? Then come with me, but this method of decrypting files requires a encrypted file. of.
requirements: the case of the certificate is not backed up EFS-encrypted files to restore an encrypted file, applies only to that folder encryption, but its subfolders and sub-folders not encrypted, and no new files added to the folder case . If the files inside are also encrypted, this method can't do anything about it.
the author's Caozuojitong example to introduce the author's system is Windows Me /XP dual Caozuoxitong, in order to make Windows Me can access the file system of Windows XP, Windows Me need to install the NTFS For 98, this step Very critical.
Reminder: The software uses seven in Window XP system files, they are: autochk.exe, C_437.NLS, C_1252.NLS, L_INTL.NLS, NTDLL.DLL, NTFS.SYS, ntoskrnl .exe.
First enter Windows Me, then find the encrypted folder and copy the files inside to any folder. Then, open the file and see if the content of the file is what you want.
However, this method has little scope, because most people by encryption of all files. Therefore, it is necessary for us to properly back up the EFS encrypted file certificate, so as not to "repent for a lifetime." In the case that the encrypted file certificate has been backed up, you can use the following method to retrieve the encrypted file:
Backup Key: When there is a backup key, we will not be afraid to open the system. Secret file. Click "Start → Run", enter "certmgr.msc" in the "Run" dialog box to open the certificate manager, click "Personal → Certificate" under "Certificate → Current User" (can't see? You have no encrypted files) How can I have a certificate?) Select "Certificate" right-click, select "All Tasks → Export", select "Export Private Key" in the "Certificate Export Wizard" that pops up, then select the directory where the certificate is saved, press Enter, private The key is successfully exported.
When you want to reinstall the system, you can import the original private key.
Set up the Windows Recovery Agent (hereafter the magic user is an example):
STEP1: First log in to the system as magic user.
STEP2: In the "Run" dialog box, enter "cipher /r:c:\\magic" (magic can be any other name) Enter a password after entering the car, just enter a carriage return and then There are two files magic.cer and magic.pfx in the c drive.
STEP3: Install the magic.pfx certificate, enter the password of the protection certificate you just set, and press NEXT to complete the installation of the certificate.
STEP4: Enter "gpedit.msc" in "Start → Run", open the Group Policy Editor, under "Computer Configuration → Windows Settings → Security Settings → Public Key Policies → Encrypting File System", right Click the pop-up menu, select "Add Data Recovery Agent", open the "Add Recovery Agent Wizard" to open magic.cer, and then press the next step to complete the recovery agent settings. Finally, you can use the magic username to decrypt the encrypted file.