EFS Problem

Hi,

I have a standalone Windoes XP Pro laptop that is running SP2

I have enabled EFS on this PC on one of the folders.
I can see the certificate that is assigned for the user and i can open the file after it has been encrypted.

I have then exported the certificate without any problems.

If i delete the certificate from within the Certificates snapin and then reboot the laptop, i cannot get into the file, as access is denied......again this is what i would expect.

I then import the saved Cert back in and i can then open the file no problems....

alll good so far......

My question is the following.

If i remove the certificate and then try to import back in i put the password in as i did before, except i tick the box that say

ENABLE STRONG PRIVATE KEY PROTECTION. YOU WILL BE PROMPTED EVERY TIME THE PRIVATE KEY IS USED BY AN APPLICATION IF YOU ENABLE THIS OPTION.

I do this and a box comes up with IMPORTING A NEW PRIVATE EXCHANGE KEY

I set the security level to high, i then put another password in (i have tried the same and different passwords to the one i orginally exported the certificate with...
It says import is successful.

However instead of the encypted file then opening i get a access is denied...

i would expect it to prompt me for a password as i would imagine the key is accessed at this point?

Any ideas why this is not working???

Hope this makes sense.

Thanks
laytonblackhamAsked:
Who is Participating?
 
poseidoncanuckCommented:
Strong Key Protection is not compatible with EFS - it's not possible for Windows to be able to access the user's private key when it's been protected with the additional password.  EFS needs access to the private key in the LOCALSYSTEM context, but the strong key protection password can only be supplied in the user's context.

There's an extensive discussion of this issue here:
http://www.experts-exchange.com/Security/Operating_Systems_Security/Windows/Q_22103346.html
0
 
gtkfreakCommented:
Have you exported the Private Key when you exported your certificate? Did you export to a PFX file?
0
 
laytonblackhamAuthor Commented:
Hi,

Yes it was exported and was exported to a PFX file.
0
 
Computer101Commented:
Forced accept.

Computer101
EE Admin
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.