Back up Encrypting File System (EFS) certificate

If you encrypt data on your computer, you need a way to recover that data in case something happens to the encryption key. If your encryption key is lost or damaged and you don't have a way to recover your data, the data is lost. You will also lose data if you store your encryption key on a smart card and the smart card is damaged or lost. To make sure you can always access your encrypted data, you should back up your encryption certificate and key. If more than one person uses your computer, or if you use a smart card to encrypt files, you should create a file recovery certificate. For more information, see Create a recovery certificate for encrypted files.

Note

These steps can't be completed on Windows 7 Starter, Windows 7 Home Basic, and Windows 7 Home Premium.

To back up your EFS certificate

1. Open Certificate Manager by clicking the Start button , typing certmgr.msc into the search box, and then pressing Enter.‌  If you're prompted for an administrator password or confirmation, type the password or provide confirmation.
2. In the left pane, double-click Personal.
3. Click Certificates.
4. In the main pane, click the certificate that lists Encrypting File System under Intended Purposes. (You might need to scroll to the right to see this.)
   If there is more than one EFS certificate, you should back up all of them.
5. Click the Action menu, point to All Tasks, and then click Export.
6. In the Certificate Export wizard, click Next, click Yes, export the private key, and then click Next.
7. Click Personal Information Exchange, and then click Next.
8. Type the password you want to use, confirm it, and then click Next. The export process will create a file to store the certificate.
9. Type a name for the file and the location (include the whole path) or click Browse, navigate to a location, type a file name, and then click Save.
10. Click Next, and then click Finish.

Note

Store the backup copy of your EFS certificate in a safe place.