XP encryption

[Guest]

I had to rebuild my XP after a failed Linux install. I have previous
encrypted files, which XP doesn't open now. I have tried to import my
previous encryption certificate, but it is a p7b extension, and my XP says it
needs p12b and won't allow me to import it. What's up? Help.

 

[Steven L Umbach]

That is because the p7b file contains only your public key - not the private
key needed to decrypt your files. A file with a .pfx extension that prompted
you for a password to protect the private key would be needed. Without the
private key for the user or Recovery Agent [if used which it is not by
default in XP Pro] you will not be able to decrypt your files which were
encrypted with either 3DES or AES. Depending on how you did your rebuild,
if your user profile from the previous install is intact [or in a backup
somewhere] you may still be able to recover your EFS files because the EFS
private key is stored in the user profile. There is a EFS recovery program
from Elcomsoft that even the free limited trial version will try to find and
help you recover your EFS private key so that you can at least see if it is
available or not. --- Steve

http://www.elcomsoft.com/aefsdr.html --- Elcomsoft
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 --- EFS
best practices

 

[Guest]

I looked in every corner of my local settings, and couldn't find anything. I
have a ghost image of my previous setup. I didn't use it because I didn't
have my data moved before the "incident". Is it possible to retreive the key
and cert from there?
--
Stan

That is because the p7b file contains only your public key - not the private
key needed to decrypt your files. A file with a .pfx extension that prompted
you for a password to protect the private key would be needed. Without the
private key for the user or Recovery Agent [if used which it is not by
default in XP Pro] you will not be able to decrypt your files which were
encrypted with either 3DES or AES. Depending on how you did your rebuild,
if your user profile from the previous install is intact [or in a backup
somewhere] you may still be able to recover your EFS files because the EFS
private key is stored in the user profile. There is a EFS recovery program
from Elcomsoft that even the free limited trial version will try to find and
help you recover your EFS private key so that you can at least see if it is
available or not. --- Steve

http://www.elcomsoft.com/aefsdr.html --- Elcomsoft
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 --- EFS
best practices

I had to rebuild my XP after a failed Linux install. I have previous
encrypted files, which XP doesn't open now. I have tried to import my
previous encryption certificate, but it is a p7b extension, and my XP says
it
needs p12b and won't allow me to import it. What's up? Help.

 

[Steven L Umbach]

If you have a Ghost image that includes your user profile from a time after
you started using EFS you may be able to recover or use the EFS private key.
The easiest way would be to restore the image and start the computer using
it and logon as your user account assuming the image contains the operating
system. If it does not but does contain your user profile you could try the
program from Elcomsoft. --- Steve

I looked in every corner of my local settings, and couldn't find anything.
I
have a ghost image of my previous setup. I didn't use it because I didn't
have my data moved before the "incident". Is it possible to retreive the
key
and cert from there?
--
Stan

That is because the p7b file contains only your public key - not the
private
key needed to decrypt your files. A file with a .pfx extension that
prompted
you for a password to protect the private key would be needed. Without
the
private key for the user or Recovery Agent [if used which it is not by
default in XP Pro] you will not be able to decrypt your files which were
encrypted with either 3DES or AES. Depending on how you did your
rebuild,
if your user profile from the previous install is intact [or in a backup
somewhere] you may still be able to recover your EFS files because the
EFS
private key is stored in the user profile. There is a EFS recovery
program
from Elcomsoft that even the free limited trial version will try to find
and
help you recover your EFS private key so that you can at least see if it
is
available or not. --- Steve

http://www.elcomsoft.com/aefsdr.html --- Elcomsoft
http://support.microsoft.com/default.aspx?scid=kb;EN-US;223316 --- EFS
best practices

I had to rebuild my XP after a failed Linux install. I have previous
encrypted files, which XP doesn't open now. I have tried to import my
previous encryption certificate, but it is a p7b extension, and my XP
says
it
needs p12b and won't allow me to import it. What's up? Help.