You have a folder that is encrypted by the Encrypting File System (EFS) feature on a computer that is running Windows Vista. When you move the encrypted folder to a network share that is not encrypted, the folder and the files that are contained in the folder are moved successfully. However, an empty encrypted folder that has the same name as the encrypted folder remains on the source computer.

The Encrypting File System (EFS) smartcard certificate implementation in Windows Vista ignores the Enhanced Key Usage extension if the extension does not specify EFS. In this situation, a certificate may be selected that is not intended for data encryption. Therefore, data may be lost if a Disaster Recovery Agent (DRA) is not configured or if the noncompliant certificate that was previously selected is not retained after it expires.

Assume that you use the Encrypting File System (EFS) to encrypt files in Windows Vista or in Windows Server 2008. After the encryption process is complete, you can retrieve the EFS0.tmp temporary file by using a file restoration tool. This file is in clear text format and is not encrypted.

On a Windows Vista Service Pack 1 (SP1)-based or Windows Server 2008-based computer, you run the Encrypting File System (EFS) Wizard to create a self-signed certificate that is stored on a smart card. However, the EFS Wizard cannot read the self-signed certificate. Additionally, the EFS Wizard returns the following error message:

No valid certificates found

Note: The “More information” section provides more information about how to use the EFS Wizard.

On a Windows Vista based computer that runs Symantec AntiVirus 10.2 client, you enable EFS for documents on the Desktop or in the Documents folder. After you reboot the computer and log on again, the encrypted files cannot be decrypted.

The problem does not occur when folders are encrypted in other locations.

Also, when Symantec AntiVirus is uninstalled the problem goes away.

Consider the following scenario:

• A third-party cryptographic service provider (CSP) is installed on a computer that is running Windows Vista.
• You log on to the system by using a smart card that stores the user credentials and the Encrypting File System (EFS) certificate.
• You try to encrypt files or to decrypt files by using EFS.

In this scenario, you receive the following warning message:

Windows has encountered a critical problem and will restart automatically in one minute. Please save your work now.

Then, the system automatically restarts.

Consider the following scenario. In Windows Vista, you use Encrypting File System (EFS) to create an EFS-encrypted file. Or, you edit an EFS-encrypted file in Windows Vista. Then, you try to open the file in Microsoft Windows XP or in Microsoft Windows Server 2003. In this scenario, you receive an error message that resembles the following:

Access is denied

You cannot open an EFS-encrypted file in Windows XP or in Windows Server 2003 after the file has been opened in Windows Vista.

You use the Back up files option in the Backup and Restore Center in Windows Vista. However, files are not backed up that are encrypted by using the Encrypting File System (EFS).

Note: The Back up computer option in Windows Vista correctly backs up and restores EFS-encrypted files.