EFS and CERT_SYSTEM_STORE_SERVICES

[esskar]

Hi.

i'm playing around with EFS.
I have a windows nt service running as "SYSTEM".
Encrypting files, encryptes the files with a certificate named as
"COMPUTERNAME$(COMPUTERNAME$@DOMAIN)"

Now, i added a EFS enabled certificate using CertOpenStore and
CertAddCertificateContextToStore to the SERVICENAME\MY store (when i
open the registry at
HKLM\Software\Microsoft\Cryptography\Services\SERVICENAME\SystemCertificates\MY
i see the just added certificate)

but still, when i use file encryption, the service still uses the
"COMPUTERNAME$(COMPUTERNAME$@DOMAIN)" certificate, not the one i added
to the service store.

Does anybody know, if it is possible to associate a certificate to a nt
service so it is used when doing EFS?

Thanks. Regards,
Sascha Kiefer

 

[esskar]

okay, i just found the function: SetUserFileEncryptionKey
i thinks it will fulfill my needs.
it looks to me that it is a system-wide setting, isn't it?