An EFS encryption question.

Good afternoon everyone,

What I like to do is lock some of my sensitive files using the windows EFS encryption so that if someone were to steal my computer and somehow hack the password into my account, they still would not be able to read the files.

If I were to:

1. encrypt the files
2. then export the "encrypting file system" certificate from the certificate manager (in the personal folder) to a thumb drive (and a backup drive).
3. delete the certificate managers copy
4. Every time I want to access the files, I plug the thumb drive in, and use it to decrypt the files.

Is this a good way to do it ? Any red flags here ?

Thanks for your time and help

Peter

.

Relevant Pages

  • Re: Advice needed
    ... encryption keys, ... Creating special accounts for them is also not a good idea. ... I have a lot of sensitive files on my HDDS ... > cause don't want servicemen browse my personal files. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [SLE] Root password - is it THAT simple to alter it?
    ... > system(encryption my slow processing down but by how much?) or at ... > least putting sensitive data into one encrypted partition or something ... I tend to prefer encrypting only sensitive files rather than an ...
    (SuSE)