¿Puedes hacer una copia de un archivo cifrado?

Can you make a copy of an encrypted file?

Fortunately, Windows includes a file copy utility called RoboCopy (Robust File Copy) that includes parameters to copy encrypted files in RAW format that can be decrypted automatically on the original file system….How to copy Encrypted File System (EFS) files from a mounted disk image.

Here’s how to enable EFS.

1. Launch File Explorer from your Start menu, desktop, or taskbar.
2. Right-click a file or folder.
3. Click Properties.
4. Click Advanced.
5. Click the checkbox next to Encrypt contents to secure data.
6. Click OK.
7. Click Apply.

A well encrypted file (or data) looks like random data, there is no discernibly pattern. When you give an encrypted file to a decryption program (DCP) it tries to decrypt a small portion of the file.

“Are you sure you want to copy this file without its properties?” Copying or moving a file without some of its properties from an NTFS drive to a FAT drive will simply mean that the properties that can’t be transported will be lost, but the file itself will remain intact and functional.

If you move a file from an unencrypted folder to an encrypted folder, the file inherits encryption from the destination folder. If you copy an unencrypted file to an encrypted folder, the copied file is encrypted.

If you select the Enable EFS folder icons check box, the server will check each folder for encrypted contents before displaying the icon….Enable EFS Folder Icons

1. On the main menu, click Edit > Global Settings.
2. Select the Enable EFS folder icons check box.
3. Click OK. (To disable the feature, clear the check box.)

Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Encrypting File System. Right-click the certificate you want to export. Point to All Tasks , and then click Export . The Certificate Export Wizard starts. Click Next . Click Yes , export the private key, and then click Next .

The Encrypting File System (EFS) is the built-in encryption tool in Windows used to encrypt files and folders on NTFS drives to protect them from unwanted access. EFS enables transparent encryption and decryption of files for your user account by using advanced, standard cryptographic algorithms.

Log on to the Windows SBS 2008 server. Click Start > Administrative Tools > Group Policy Management . Right-click the GPO that contains the EFS policy, and then click Edit . Navigate to Computer Configuration > Policies > Windows Settings > Security Settings > Public Key Policies > Encrypting File System.

Here you have to select the domain (to which this certificate will be installed), and paste the Certificate: (CRT), Private Key (KEY) and Certificate Authority Bundle: (CABUNDLE) which already are created in the before steps. Check the below image where I have shown this thing: