
Configure the directory for encryption.First check if the file system supports creating encrypted folders.Just like most things in Windows, there is an API to do it and If my case, I needed to enable a folder for encryption at the time ofĪpplication configuration. Store the exported key somewhere safe, maybe you could email it to youself. Choose the option 'Yes, export the private key'in the following screen.When importing this file into the Certificate Manager Enter the password for protecting this file.Right-click and select 'All Tasks -> Export'.Start the Certificate Manager by typing certmgr.msc in the Run box.If the encrypted file or folder contains important data, its a good idea to backup Key is stored in the Windows certificate Manager under 'PersonalĬertificates'. The user does not have a key already, Windows generates one for you when youĮnable a file or folder for encryption for the first time. The next question is - how does a user generate the key? Well, if Without any change to the application code. In the context of the correct user, it will be able to encrypt and decrypt the content Only has access to the key which is used for encrypting and decrypting theĬontent. The way it works is - the user account which enables a file or folder for encryption

Now, you may ask, if everything is transparent, where is the security?

NTFS also tranparently decrypts the encrypted contents of a file whenĪpplications access such encrypted content. NTFS has a feature by which the file system transparently encryptsĭata written to a particular file or files in a particular folder. How encrypted folders and files work on NTFSĪll most all Windows OS installations are configured to use NTFS as This blog post discusses the NTFS encryptedįile system functionality and a couple of related APIs for

Usually protected quite well these days (using HTTPS) but a lot us aren't tooĬareful about data-at-rest. A lot of times we need to hold dataįiles at a particular location for further processing. Windows Operating systems offer a lot of convenience not just to GUI users but toĭevelopers and system builders as well.
