Re: Encryption > access denied after importing key with Certificate

From: Robert Gu [MS] (robertg@online.microsoft.com)
Date: 09/20/02 

From: "Robert Gu [MS]" <robertg@online.microsoft.com>
Date: Fri, 20 Sep 2002 10:31:00 -0700

There was a Win2K bug in importing the cert with key length longer than 512
bit. It may have been fixed in Win2k sp3. The bug is that the imported key
will use MS enhanced provider instead of the Base Provider. Win2K Gold EFS
uses MS base provider only. That could be your problem.

Also files encrypted in XP SP1+ would not be able to be read by XP-. By
default XP SP1 uses AES256, which is not available in SP1-. The sympton
would be open as garbage. This is not your case. Just for your info. To
share SP1+, you have to manipulate the reg key to let XP SP1 use non-AES
algorithm. 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
Robert Gu [MS Security Developer]
"martin" <martin_26@optusnet.com.au> wrote in message
news:3d0201c26050$883f86b0$3bef2ecf@TKMSFTNGXA10...
> Hi y'all
>
>          My situation is as follows, i encrypted some
> files on my XP-PRO partition & afterwards exported the KEY
> along with the Certificate to a floppy disk,using the
> windows back up utility , i back up the folder i encrypted
> & then burn it onto a CD-R,my problem is when i take the
> cd over to a windows2000pro machine ,after i import the
> folder from the backup & try to access the files after i
> import the key/certificate i receive error message "access
> denied", my query is ; has it got something to do with the
> fact that im burning the back up to a CDRW or is there are
> difference in the cypher strength levels between XP pro &
> win2000 pro ? any feedback will be greately appreciated
>
> thank in advanced
>
> Martin

Relevant Pages