Certificat EFS formaté, comment récupérer ?

Entraîneur Patrick 1 Reputation point
2021-02-26T14:38:11.02+00:00

Hello, I formatted and reinstall Windows 10. Now I find myself with 2 files in .rar extension having a padlock icon and which can no longer be opened. It was encrypted to the owner's EFS attribute which I formatted. How to recover, I need help from an expert computer scientist with formatted EFS recovery.

Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,720 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Teemo Tang 11,351 Reputation points
    2021-03-01T07:44:15.343+00:00

    Without the private key and certificate associated with the original user (or possibly the Administrator account recovery agent key/cert) you will not be able to decrypt your files. Having a user with the same account name and password won't be enough since a specific EFS key pair is used for the encryption.

    If you don't have backups of the original Windows installation with user data then I'm afraid your files will remain inaccessible.

    -------------------------------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Entraîneur Patrick 1 Reputation point
    2021-03-02T15:33:58.147+00:00

    Windows 10 has a bug which sometimes causes people to catch this bug, where EFS encryption kicks in on old encryption disabled. So it is believed to be without EFS encryption, whereas Windows reactivated it after formatting.
    It is therefore impossible to find the private key, apart from having made a recovery agent. It should be taken to the professional EFS key recovery lab, so they will have to connect to the old saved session while recovering from a partition lost after formatting.
    They will also be able to find the private key in the system partitions lost from the old partition deletion before reinstallation.

    It should be understood that as long as the hard drive is not damaged, it still exists intact; then doctoral students and engineers can find everything to the extent of their skills.
    Also provided that the hard disk must not be used after reinstallation Windows, see little day. In order to best preserve the deleted and formatted and overwritten parts