How do I open an encrypted file if I am denied access?
If you get an access denied message when you try to open an encrypted file, the key that was used to encrypt the file is probably not on your computer. If you transferred the file from another computer, you need to get the key from that computer. If the file was encrypted by someone else, that person will need to add your certificate to the file before you can access it.
Show all
You need to first export the Encrypting File System (EFS) certificate and key on the computer where the files were encrypted, and then import them on the computer that you transferred the files to.
To export the EFS certificate and key
-
Open Certificate Manager by clicking the Start button 
, typing certmgr.msc into the search box, and then pressing Enter.
If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
-
In the left pane, double-click Personal, click Certificates, and then click the EFS certificate that you want to export.
-
Click the Action menu, point to All Tasks, and then click Export.
-
In the Certificate Export wizard, click Next.
-
Click Yes, export the private key, and then click Next.
-
Click Personal Information Exchange, and then click Next.
-
Type the password you want to use, confirm it, and then click Next.
-
The export process creates a file to store the certificate in. Type a name for the file and the location (include the whole path), or click Browse, navigate to a location, type a file name, and then click Save.
-
Click Next, and then click Finish.
To import the EFS certificate and key
-
Open Certificate Manager by clicking the Start button , typing certmgr.msc into the search box, and then pressing Enter.
If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
-
In the left pane, click Personal.
-
Click the Action menu, point to All Tasks, and click Import.
-
In the Certificate Import wizard, click Next.
-
Type the location of the file that contains the certificate, or click Browse, navigate to the file's location, and then click Next.
If you navigate to the right location, but don't see the certificate you are importing, then, in the list next to the File name box, click Personal Information Exchange.
-
Type the password, select the Mark this key as exportable check box, and then click Next.
Note
Do not select the Enable strong private key protection check box.
-
Click Place all certificates in the following store, choose Personal, and then click Next.
-
Click Finish.
To add your encryption certificate and key to a file, export your certificate and key by following the steps above and have the person that you received the file from import the certificate and key and then add it to the file by following these steps.
-
Right-click the encrypted file, and then click Properties.
-
Click the General tab, and then click Advanced.
-
In the Advanced Attributes dialog box, click Details.
-
In the dialog box that appears, click Add.
-
Click the certificate, and then click OK in each of the four open dialog boxes.
