EFS Encrypting File System

EFS encryption Profile

  • Public / private key generated
    using the EFS, will first generate a pair of public / private key (referred to as key); domain environment, the domain controller generates dependency; otherwise their machines.

  • Encryption
    EFS is a public key encryption. When encrypting a file, a pseudo-random number to Mr. FEK (file encryption key), and then further calculated using FEK encrypted file. Then using a public key encryption FEK, and the encrypted FEK is stored in the same encrypted file.

  • Decryption process
    using the current user's private key to decrypt FEK, and then decrypt the file FEK.

  • Key Backup
    certmgr.msc open the Certificate Manager, right-export the private key, pfx file, save.

  • Recovery key
    pfx file backup before finding, double-click to install.

Guess you like

Origin www.cnblogs.com/sec875/p/12236969.html