Before you encrypt anything important, you should back up your
personal encryption certificate (with its associated private key)
and the recovery agent certificate to a floppy disk and store it in
a secure location. If you ever lose your original certificate
(because of a hard disk failure, for example), you can restore
the backup copy and regain access to your files.
If you lose all copies of your certificate (and no recovery agent certificates exist),
you won't be able to use your encrypted files. No back door exists,
nor is there any practical way to hack these files.
(If there were, it wouldn't be very good encryption.)
HOW TO: Remove File Encryption in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;EN-US;308993
Without a backup of the original Encryption Certificate Key, encrypted files
are unrecoverable as they will stay encrypted forever. There is no recovery
method since the encryption algorithm is now completely different with a
reinstall of Windows XP.
See if the following articles help in any way:
HOW TO: Take Ownership of a File or Folder in Windows XP
http://support.microsoft.com/default.aspx?scid=kb;en-us;308421
Best Practices for the Encrypting File System
http://support.microsoft.com/default.aspx?scid=kb;en-us;223316
Encrypting File System in Windows XP
http://www.microsoft.com/technet/prodtechnol/winxppro/deploy/cryptfs.mspx
EFS Files Appear Corrupted When You Open Them
http://support.microsoft.com/default.aspx?scid=kb;en-us;329741
--
Carey Frisch
Microsoft MVP
Windows XP - Shell/User
Be Smart! Protect your PC!
http://www.microsoft.com/security/protect/
----------------------------------------------------------------------------------------
|I have an XP Pro system and I encrypted a whole folder
| (with subfolders in it). I've only been using XP for 2
| weeks and didn't think of exporting the certificates for
| that folder nor any private keys for it. My system had
| crashed yesterday and I had no way of doing any recovery
| (no recovery disk of any sort) so I performed a NEW XP
| installation. Now, I couldn't open the encrypted
| folder. Is there any work around on this or is this
| considered a loss?
|
| Thanks.