ARCHIVED: In Windows, what is the Encrypting File System, and how can I use it to protect sensitive data?
The Encrypting File System (EFS) is a component of the NTFS file system on Windows 2000, Windows XP Professional, and Windows Server 2003; it allows you to encrypt files stored on your local computer or on a Windows 2000 or 2003 server. The encryption and decryption process requires either a private key stored in your profile, or a master recovery key stored by a designated "recovery agent"; for more on the master recovery key, see ARCHIVED: At IU, how can I recover Windows encrypted files without a private key? The private key is protected with your passphrase; without access to the master recovery key, therefore, anyone who gains access to the EFS encrypted file would need to know your passphrase to turn the encrypted data into usable information.
Important: As of April 8, 2014, Microsoft no longer supports Windows XP with security updates. To ensure the highest security standards, the UITS Support Center no longer registers Windows XP devices to the IU network. UITS strongly recommends that you look into the options for replacing or upgrading your Windows XP computers for full compatibility with IU systems. See About end of life for Windows 8.0, 7, Vista, and XP.
To encrypt a file or folder:
- From the menu, select or , then , and then .
- Right-click the file or folder you want to encrypt, and then click .
- On the tab, click .
- Check
- If you have chosen to encrypt a single file, you can also
encrypt the folder that contains it. In the
Encryption Warning
window, select . All files created in the encrypted folder will now be automatically encrypted. - If you encrypt a folder instead of a single file, you can encrypt all the contents of the folder as well. Select .
.
- If you have chosen to encrypt a single file, you can also
encrypt the folder that contains it. In the
To decrypt a file or folder:
- From the menu, select or , then , and then .
- Right-click the file or folder you want to decrypt, and then click .
- On the tab, click .
- Clear the checkbox, and then click .
When you decrypt a folder, you must decide whether to decrypt the folder only or to decrypt the folder and all files and subfolders contained within it. If you choose to decrypt the folder only, the files and subfolders within the folder remain encrypted. However, when you add new files and subfolders to the folder, they will not be automatically encrypted.
This information was adapted from the Microsoft article Encrypt or decrypt a folder or file.
Related documents
This is document augh in the Knowledge Base.
Last modified on 2018-01-18 15:39:48.