1. Welcome Guest! In order to create a new topic or reply to an existing one, you must register first. It is easy and free. Click here to sign up now!.
    Dismiss Notice

No backup of Vista EFS certificate from system that won't boot -recovering file

Discussion in 'Windows Security' started by baby1212, Apr 30, 2009.

  1. baby1212

    baby1212 Guest

    Thank you in advance for any guidance! [​IMG]

    Vista Ultimate (32bit SP1) system is corrupted enough to not boot but
    accessing the HD from another system seems to have virtually
    everything intact. One single file was encrypted using EFS on the
    system. I'm wondering if there is a way to manually transfer over the
    certificate/s from the old hard drive into the new system.

    I am aware of ElcomSoft's Advanced EFS Data Recovery software but the
    problem is that the file that is encrypted is actually another file
    that is encrypted using another encrypted software (basically the file
    is encrypted twice, the outside container is Vista EFS and the inside
    container is TrueCrypt). So I can't see if ElcomSoft's Advanced EFS
    Data Recovery software will work in the demo/trial as I still have yet
    another step to proceed to decrypt the file in TrueCrypt.

    I've found manual recovery processes for XP (
    )but the registry structure is different enough in Vista that I can't
    find the same place in Vista.

    Does anyone know the comparable location in Vista for hklm\sam\sam
    \domains\account\users\%usernumbers% (which is XP)?

    Any other ideas?
     

Share This Page