Figure 1: Exporting the Encrypting File System key
Right-click the certificate that you want to export, point to All Tasks, and then click Export, as shown in Figure 1. The Certificate Export Wizard opens.
Read the explanatory text on the first page of the wizard, and then click Next.
On the next page of the wizard, under Do you want to export the private key with the certificate?, select Yes, export the private key. This is important, because the private key is what you want to back up and delete in this process. Click Next.
then should be able decrypt files once the .pfx or PKCS#12 file is created?
These steps above can only be accomplished from Windows? My inclination is to use another Windows machine to export keys, just on the off chance there's a problem with the OS itself. I was going to mount a clone of the hdd with encrypted data from a known working OS.
The certs are self signed, not associated with a domain. Previous attempts with
cipher.exe failed to decrypt, so starting over from step zero.
Rather than running
rekeywiz.exe I'd like to export from another, external, machine.