Re: EFS On Drive Works With >1 Computer?

From: Kerry Brown (kerry_at_kdbNOSPAMsys-tems.c*a*m)
Date: 08/09/05 

Date: Tue, 9 Aug 2005 12:14:00 -0700

"Mihir Kotwal" <MihirKotwal@discussions.microsoft.com> wrote in message
news:86499816-A33C-48F9-9470-E2567B0A982A@microsoft.com...
> So it isn't as easy as importing the certificate on the second computer
> and
> then being able to use the files as if it was on the first
> omputer? -Mihir
>

If you are using AD yes, If not, then no. It can be made to work out of a
domain but it is complicated, time consuming, and fraught with the
possibilty of data loss. If you use it make sure you test encrypting and
decrypting several times on several computers so you know how it works
inside out. Make sure you have copies of the certificates with keys stored
in a safe place, like on several floppies and/or CDROMs stored away
somewhere. It is best to have an image of the system used to encrypt the
files stored somewhere as well.

Kerry

> "Kerry Brown" wrote:
>
>> "Mihir Kotwal" <MihirKotwal@discussions.microsoft.com> wrote in message
>> news:A6A4339C-DF82-4084-A8D0-87764BC52B0F@microsoft.com...
>> > So if I export the certificate from Internet Explorer and save it on my
>> > slave
>> > drive, I should be able to see the files on an XP Pro computer after
>> > importing the certificate, right? -Mihir
>>
>> Probably if you are in a AD environment. If you are are not then a lot of
>> trial and error is usually involved in getting it working. If you are not
>> in
>> a domain I suggest you search for an alternate encryption method.
>>
>> Kerry
>>
>> >
>> > "Jupiter Jones [MVP]" wrote:
>> >
>> >> You need the keys which will probably be on the master drive.
>> >> If you format, lose or otherwise lose access to the primary, your data
>> >> is
>> >> as
>> >> good as gone and you should not expect to regain access EVER.
>> >> See the links near the bottom of this page for proper procedures to
>> >> help
>> >> you
>> >> protect your data:
>> >> http://www3.telus.net/dandemar/encrypt.htm
>> >>
>> >> --
>> >> Jupiter Jones [MVP]
>> >> http://www3.telus.net/dandemar
>> >> http://www.dts-l.org
>> >>
>> >>
>> >> "Mihir Kotwal" <MihirKotwal@discussions.microsoft.com> wrote in
>> >> message
>> >> news:FC3C23FE-7420-4266-8CAC-22AEC30ECE46@microsoft.com...
>> >> > If I encrypt my files with EFS on a slave drive and then remove the
>> >> > drive
>> >> > from the computer to use in another computer (ex. if the original
>> >> > computer
>> >> > breaks down), will I still be able to read them from the other
>> >> > computer
>> >> > or
>> >> > do
>> >> > I need the master drive? -Mihir
>> >>
>> >>
>> >>
>>
>>
>>

Relevant Pages

  • Re: Encryption Problem
    ... When I tried encrypting a message using a Public Cert for which I could not ... possibly access the private cert ... usually just go into Certificate Store through mmc and delete the private ...
    (microsoft.public.dotnet.framework.webservices.enhancements)
  • RE: .NET Form Client Connection to .Net Web Service via SSL
    ... > If you are using SSL with a 128-bit Server Certificate, ... > Anyway, if your URL is 'HTTPS', it is being encrypting, for sure. ...
    (microsoft.public.dotnet.framework.aspnet.webservices)
  • Re: Encrypted emails
    ... I don't pretend to know anything about Microsoft Active Directory, and don't know if this is even an available feature for MS Exchange. ... In my experience, this type of functionality requires an SSL certificate on your Internet-facing mail server, and of course you need to configure the mail server to talk both plain SMTP and encrypted SMTP. ... encrypting communication between mail servers using a common certificate. ...
    (Security-Basics)
  • Encrypted files -- would this work to get them back?
    ... After the format and new install of XP, I ran a recovery utility on my ... there is a Crypto folder and a "System Certificates" ... Including the system certificate and the key. ... "Encrypting file system" box is checked ...
    (microsoft.public.windowsxp.security_admin)
  • Unable to encrypt email with Entrust digital certificate
    ... I'm using Outlook 98 to send an encrypted email to a recipient, ... "Microsoft Outlook had problems encrypting ... Entrust digital certificate, which I imported its address with success ...
    (microsoft.public.outlook)
Quantcast