BitLocker and EFS - Huge Mess, Need Help

[vegoen]

I encrypted data across multiple drives using Bitlocker. Then I moved them to an external drive which I also encrypted. After that, I moved the external to a laptop with a different OS. Some files appear green, which means they were encrypted using EFS. I don't have the certificate for the EFS files but I have the password and bitlocker key. Any recommendations on what to do?

- Original Computer is not in the equation

- I have BitLocker Key and Password, however the EFS files do not allow me access.

I've heard of a cipher program but this will only help if I can restore the certificates.

Please help!

 

[MrChad]

If you didn't back up the EFS key I think you're screwed.

 

[vegoen]

Any decrypting software that can be recommended?

 

[ZeroRift]

Unfortunately, MrChad is right - Without the keys, no amount of cipher software will decrypt the files in less than the lifetime of the universe.

To answer the question: To handle EFS (and I think a couple other crypto functions), windows uses cipher.exe. I would use that tool via a command window to recover the files in your situation, but you have to have the original certificate keys to do so.

Did you check your volumes for any certificate files laying around? Although this would render EFS effectively useless, it is possible the keys were backed up to one of the original volumes.

 

[vegoen]

I dont have the original hard disks, all the files I transferred to the external drive and I dont think the EFS is on the external drive. Is there a way to search for them?

 

[imagoon]

He also posted here among 3-4 other forums:

http://forums.anandtech.com/showthread.php?t=2245843

The final answer is: "use your backup" or everything is gone.