Problem description

The user is unable to access an encrypted file that was encrypted using inSync Data Loss Prevention feature.

Validation

Create a new file and encrypt it.  Follow the steps:

1. Right click on the newly created file and go to Properties.

2. At the bottom right click Advanced.

3. Select Encrypt contents to secure data. 

4. Click Ok and Apply.

Once a test file is created follow the below steps on the newly created file and the one that does not open due to an Encryption error.

1. Right click on the file and go to Properties.

2. At the bottom right click Advanced.

3. On Advanced Attributes, click on Details.

4. You will see a Certificate Thumbprint.

5. Validate if the Certificate Thumbprint is the same or different for both the files.

If the Certificate Thumbprint is different, this may happen due to an EFS certificate update that can be caused due to many reasons, such as User’s Password Change, hostname change, re-imaged operating system.

Resolution

The issue can be resolved in two ways

1. Change the Default EFS Certificate:

• Open Control Panel -> User Accounts -> Manage your file encryption certificates and click Next.

• Click on Select certificates -> More options.

• Select the correct certificate and click OK.

Note: The above steps will only work if the selected certificate has a backup copy of your encryption key. If there is no backup of the encryption key, the encrypted file may be not accessible.

2. You can download these files from previous snapshots in inSync. 

See also

Encryption File System (EFS) FAQs | Enable data encryption