Re: Encryption > access denied after importing key with Certificate

From: martin (martin_26@optusnet.com.au)
Date: 09/21/02 

From: "martin" <martin_26@optusnet.com.au>
Date: Fri, 20 Sep 2002 19:02:06 -0700

HiRobert,

       Dude that is some serious info u have provided,
much appreciated, i fully follow what u r saying, in
regards to the registry manipulation, is there a technet
doc which explains how to do modify the registry so XP-SP1
can use non - AES ?

Im currently checking out the website below, do u think
this can be of benefit too ?
http://www.microsoft.com/windows2000/downloads/recommended/
encryption/default.asp

Im going to export the cer/key & look at the bit length,
Ill let u know how it all goes ,
once again ..thankyou so much for your reply..

Kindest regards
Martin

>-----Original Message-----
>There was a Win2K bug in importing the cert with key
length longer than 512
>bit. It may have been fixed in Win2k sp3. The bug is that
the imported key
>will use MS enhanced provider instead of the Base
Provider. Win2K Gold EFS
>uses MS base provider only. That could be your problem.
>
>Also files encrypted in XP SP1+ would not be able to be
read by XP-. By
>default XP SP1 uses AES256, which is not available in SP1-
. The sympton
>would be open as garbage. This is not your case. Just for
your info. To
>share SP1+, you have to manipulate the reg key to let XP
SP1 use non-AES
>algorithm.
>
>--
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>
>Robert Gu [MS Security Developer]
>"martin" <martin_26@optusnet.com.au> wrote in message
>news:3d0201c26050$883f86b0$3bef2ecf@TKMSFTNGXA10...
>> Hi y'all
>>
>> My situation is as follows, i encrypted some
>> files on my XP-PRO partition & afterwards exported the
KEY
>> along with the Certificate to a floppy disk,using the
>> windows back up utility , i back up the folder i
encrypted
>> & then burn it onto a CD-R,my problem is when i take the
>> cd over to a windows2000pro machine ,after i import the
>> folder from the backup & try to access the files after i
>> import the key/certificate i receive error
message "access
>> denied", my query is ; has it got something to do with
the
>> fact that im burning the back up to a CDRW or is there
are
>> difference in the cypher strength levels between XP pro
&
>> win2000 pro ? any feedback will be greately appreciated
>>
>> thank in advanced
>>
>> Martin
>
>
>.
>

Relevant Pages

  • Re: Dbf ado.net provider for .Net ?
    ... Thanks, Jarek!! ... > At www.AdvantageDatabase.com you can find Advantage OLE DB Provider. ... > Regards Jarek ...
    (microsoft.public.dotnet.framework.adonet)
  • Re: Alias cannot be seen by same machine
    ... Regards ... >> Thanks for the reply Ace however I think you must have misunderstood. ... >> I didn't actually mention connection through a webserver. ... >> out a recent thing however, this problem does not occur without SP1 ...
    (microsoft.public.windows.server.dns)
  • Re: Order SP1 CD in Australia?
    ... just because SBS2K3 SP1 is now available for download doesn't ... > necessarily mean it's all of a sudden urgent. ... >> In the meantime i'm downloading the std SP1 files... ... >> Regards, ...
    (microsoft.public.windows.server.sbs)
  • Re: Web Part Error On WSS Home Page
    ... deleted and was the provider in a web part connection. ... Regards, ... >> My reading is that you are actually telling us the reason it didn't work ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: C# OLE DB sample?
    ... to do this because you need a provider for OLE DB to work with CSV files. ... Mark Rae ...
    (microsoft.public.dotnet.languages.csharp)
Loading