Sunday 5 August 2012

Secure your data in Windows 7.

                                                   Encrypting data in Windows 7

What is  encryption?
In cryptography, encryption is the process of transforming information (referred to as plaintext) using an algorithm (called a cipher) to make it unreadable to anyone except those possessing special knowledge.

                             How to do Encryption in Windows 7


step-by-step guide for encryption. ( example )

Scenario:

There are two user accounts in a computer. One is Administrator account and the other is local user account. The administrator account is used by the MD of the company. He may be leave on next day, due to the reason, he wants to transfer the permission of opening an important file to a local user.

a) First of all he wants to create data recovery agent ( DRA ).
b) Secondly he wants to encrypt the file


steps:

1) Logon as the administrator ( in our case he is MD )
2) go to command prompt and type cipher /r:filename.txt  ( you need to provide a password for the file. This time  .cer and .pfx file will be created )
3) type secpol.msc ->Public Key Policies->Encrypting file System.
4) right click on it.->select Add Data Recovery Agent.option. Show the security certificate created    previously and choose next option till finish.
5) Encrypt the file by just right click and taking the properties option.


Remember that the .pfx file is personal file exchange. This file should be saved in a secure position, because those who get the .pfx file can decrept data.
6) Give the .pfx file to the local user. (Put the file on the desktop of the local user)
7) Logon as the local user. Install the .pfx file.Give the password given by the adminstrator.
8) Now the file is opened.


Note: the files encrypted before DRA will not be decrepted.

1 comment:

  1. Ok, I came across this when trying to solve several items. 20/20 hindsight says this was the exact solution:

    For a computer in a workgroup network the above command is used when the "Create Data Recovery Agent..." command doesn't exist. So you use the above cipher /r:filename.txt to create a .cer certificate to import.

    If you get an "Access is denied"....is this a UAC privileged escalation problem because you opened cmd without the "run as administrator" and to make your life easier you were trying to write that file to c:\filename.txt (DOH!)

    ReplyDelete