Windows 8 EFS: How to tell windows to use “this” certificate for EFS encryption?

Question

On Windows 8, I turned on EFS and encrypted some files/folders. During this process, it created a self signed certificate and used that one for encryption. However, I have a specific certificate that I always use for my personal security/identification needs.

How can I tell Windows 8 "here, use THIS certificate instead to encrypt files"? The certificate I wish to use is provisioned for file encryption (among other security use cases).

Finally, if there is a way to also switch over previously encrypted files to the new certificate (not just files encrypted 'from now on'), that'll be a better answer.

Thanks Sid

Answer 1

First, decrypt everything. This way you don't have to worry about a mess of conflicting security certificates.

Second, log in as an administrator and perform these steps.

Open Certificate Manager by clicking the Start button , typing certmgr.msc into the Search box, and then pressing ENTER.‌ If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Click a folder, click the Action menu, point to All Tasks, and then click Import.

Click Next, and then follow the instructions.

Note

If you click Browse to search for a certificate when using the Certificate Import Wizard, be aware that the Open dialog box only displays X.509 certificates by default. If you want to import another type of certificate, select the certificate type you want to import in the Open dialog box.

As long as the certificates intended purposes includes Encrypting File System, you'll be able to use it.

After the new certificate is installed and you've tested it, delete the old self-signed security certificate.

Third, encrypt whatever you need encrypted.