Re: Restoring EFS certificate

try

certutil -repairstore -user MY <certificate serial number>

certutil is part of Windows Server 2003 Administration Tools Pack (www.microsoft.com)

Regards

Martin

grishka@xxxxxxxxx wrote:
Hi,

Some time ago, I accidentally deleted my EFS certificate, so I lost
access to EFS-encrypted files. After a couple of hours of hard work, I
managed to recover the certificate from and old copy of the registry.
However, when I imported it it still doesn't work, because it doesn't
show the "You have a private key that corresponds to this certificate"
in the certificate properties. Later on, I succeeded in recovering the
private key, too. It resides in a GUID-named file in the ...\crypto\RSA
folder. I know that it's the right key because it has exactly the same
creation time as the certificate.
My question now is how do I associate the private key with the restored
certificate, as I suppose this is the ultimate reason I'm unable to
recover the files.

You help will be greatly appreciated.
Thanks in advance,
Greg.

.

Relevant Pages

  • Re: Need help with Windows XP EFS
    ... to have windows accept that master key, but when I drop it into a new ... I assume that letting Microsoft recover my ... private key will cost me a lot of money too. ... >> I just reinstalled my computer, and after that I found that the floppydisk>> with my certificate on it was broken. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • RE: SIMple SSL question ??
    ... I believe your book is instructing you to keep the private key secure. ... you use the certificate request wizard in IIS to install the cert after it's ... the certificate that's just been installed. ... If an attacker retrievs the SSL certificate, ...
    (microsoft.public.dotnet.security)
  • Re: Certificates, Keys, Mobile Users, Intended Usage
    ... Option that you think about uses self signed EFS certificates. ... Better then exporting user's private key as backup is to setup DRA (Data ... there is no EFS certificate and it will generate a new one. ... Mobile computer users benefit from encrypting sensitive ...
    (microsoft.public.win2000.security)
  • Re: PFXExportCertStoreEx
    ... which contains the actual PFX and write that to the disk. ... methods to export certificate + private key from the IE store. ...
    (microsoft.public.platformsdk.security)