One of the domain user (Domain:XYZ) has encrypted his data and we have recently moved to new Domain:ZYX. Now i am unable to decrypt the data of the user.

I have got the certificate like (49 b7 53 52 19 44 4f 87 fd a8 dd c0 67 5f 0c d0 7c 61 29 84) of the old user profile from the below path.

C:\%userprofile%\AppData\Roaming\Microsoft\SystemCertificates\My\Certificates

I tried to export the certificate to the new user profile and tried to encrypt the data but unable to decrypt the files. Can anyone help me in decrypting the folder/files.

Hi Venkata!

Have you seen the following question?
https://social.technet.microsoft.com/Forums/en-US/55246f97-d921-402e-ad42-cb4b680077ae/unable-to-decrypt-efs-file?forum=w7itprosecurity

What you need to do, is to import the certificate WITH the private key.

Best regards
Andreas Molin

Hi Venkata,

We should export the certificate and then import the certificate from the machine which hosted the encrypted files.

The certificate should be located in the "Personal" catalog of the "certmgr.msc".

Here is a link for reference of exporting and importing the certificates.

Import or export certificates and private keys

http://windows.microsoft.com/en-hk/windows/import-export-certificates-private-keys#1TC=windows-7

Best regards