How to use Win7 with self-encryption

Many people may not know that the Windows system has a file or folder encryption function, this feature can also protect some of the computer's privacy files or folders. The following small series to Win7 system as an example, to teach you how to use your own encryption tool, to Win7 folder encryption.

　Encrypt a file or folder

Step One: Open Windows Explorer or go to the computer (my Computer) to locate the folder you want to encrypt.

Step Two: Then right-click the file or folder that you want to encrypt, and then click Properties.

Encrypt folder design

Step three: On the General tab, click Advanced. Select the Encrypt content to protect data check box, and when you are done, click OK.

The following five points should also be noted in the encryption process:

1. Click start → programs → attachments, and then click Windows Explorer.

2. Only files and folders on NTFS-partitioned volumes can be encrypted, and files and folders on the FAT partition volume are not valid.

3. Compressed files or folders can also be encrypted. If you encrypt a compressed file or folder, the file or folder will be uncompressed.

4. Files marked as System properties cannot be encrypted, and files located in the systemroot directory structure cannot be encrypted.

5. When encrypting a folder, the system asks if you want to encrypt its subfolders at the same time. If selected, its subfolders will also be encrypted, and all files and subfolders added to the folder will be automatically encrypted when added.

Decrypting a file or folder

Step One: Open Windows Explorer.

Step Two: Right-click the encrypted file or folder, and then click Properties.

Post-encrypted special files

Step three: On the General tab, click Advanced.

Step four: Clear the Encrypt content to protect data check box.

In the same way, we should be aware of the following problems in using the decryption process:

1. Click start → programs → attachments to open Windows Explorer.

2. When decrypting a folder, the system asks if you want to decrypt all files and subfolders within the folder at the same time. If you choose to decrypt only the folder, the encrypted files and subfolders in the folder you want to decrypt remain encrypted. However, new files and folders that were created within the decrypted folder will not be automatically encrypted.

The above is the use of file addition, decryption Method! And in the use of the process we may encounter some of the following issues, here are the following instructions:

1. Advanced buttons cannot be used because Encrypting File System (EFS) can only process files and folders on NTFS file system volumes. If you try to encrypt a file or folder on a fat or FAT32 volume, the Advanced button does not appear in the file or folder's properties.

Solution:

Converts a volume to an NTFS volume with a conversion utility.

Open a command prompt.

Type: Convert [Drive]/fs:ntfs (drive is the drive letter of the destination drive)

2. When the encrypted file is opened, the reason for the "Access Denied" message is displayed: The Encrypting File System (EFS) encrypts the file using the Public key certificate, and the private key associated with the certificate is not available on this computer. Solution: Look for the private key of the appropriate certificate and use the Certificates snap-in to import the private key into the computer and use it on the machine.

3. User based on NTFS to encrypt files, reload the system after the encryption file can not be accessed by the solution (note: Before reloading win2000/xp must back up the encrypted user's certificate):

Step One: Encrypt the user to log on to the computer.

Step two: Click start → run, type mmc, and then click OK.

Step three: On the Console menu, click Add/Remove Snap-in, and then click Add.

Step four: Under separate snap-in, click Certificates, and then click Add.

Step Five: Click my user account, and then click Finish (Figure 2, if you encrypt the user is not the administrator will not appear this window, directly to the next step).

Step Six: Click Close, and then click OK.

Step Seven: Double-click the certificate-current user, double-click Personal, and then double-click Certificates.

Step Eight: Click the certificate that displays the word "Encrypted file" in the intended purpose column.

Step Nine: Right-click the certificate, point to All Tasks, and then click Export.

Step Ten: Export the certificate and associated private key in a PFX file format as instructed by the Certificate Export Wizard (Note: Exporting with the export private key is recommended) to ensure that the certificate is password protected against misappropriation by others. In addition, certificates can only be saved in a directory where you have read and write access.

4. Keep your certificate in mind and save the PFX file. After reloading the system later, no matter under which user double-click the certificate file, import the private certificate to access the folder that is encrypted by the original user of the certificate under the NTFS system (note: Encrypted folders on NTFS partitions backed up using the backup Restore feature cannot be restored to a non-NTFS partition).

Finally, the certificate can also achieve the following purposes:

(1) Give different users access to the encrypted folder.

Export my certificate as the export private key, and send the certificate to another user of the local computer that needs to access the folder. Then he logs in, imports the certificate, and realizes access to the folder.

(2) Restore access to the previous encrypted folder that was backed up with the backup recovery program on its WinXP machine.

Back up the encrypted folder with a backup recovery program, and then copy the generated backup.bkf along with this certificate to another WinXP machine and restore it with the backup recovery program (note: You can only revert to an NTFS partition). You can then import the certificate to access the recovered file.