How to open an encrypted file if access is denied in Windows

Maybe you have faced this problem some time. You just forget to decrypt the file first and instead directly copied the file in its encrypted form to another Windows computer. Now when you try to open it on the other computer, you get a message saying that Access is denied. If you get Access is denied message when opening encrypted files, you may need to first export the Encrypting File System (EFS) certificate and key. This occurs because either you do not have permission to view the file or the key that was used to encrypt the file is probably not on the other computer.

If you right click its Properties > Security tab, and find that you do not have permission, you may have to contact your system administrator. But if the file is from another computer, you need to get the key from the computer where you encrypted the file. If the file was encrypted by someone else, that person will need to add the certificate to the file before you can access it.

Here is a step by step tutorial on how to do this:

Get an encryption key from another computer

You need to first export the Encrypting File System (EFS) certificate and key on the computer where the files were encrypted, and then import them on the computer that you transferred the files to.

Export the EFS certificate and key

1. Go to Control Panel and search for Certificate Manager and open it. 

2. In the left pane, double-click Personal, click Certificates, and then click the EFS certificate that you want to export.

3. Click the Action menu, point to All Tasks, and then click Export

4. In the Certificate Export wizard, click Next.

5. Click Yes, export the private key, and then click Next.

6. Click Personal Information Exchange, and then click Next.

7. Type the password you want to use, confirm it, and then click Next.

8. The export process creates a file to store the certificate in. Type a name for the file and the location (include the whole path), or click Browse, navigate to a location, type a file name, and then click Save.

9. Click Next, and then click Finish.

Import the EFS certificate and key

1. Go to Control Panel and search for Certificate Manager and open it.

2. In the left pane, click Personal.

3. Click the Action menu, point to All Tasks, and click Import

4. In the Certificate Import wizard, click Next

5. Type the location of the file that contains the certificate, or click Browse, navigate to the file’s location, and then click Next.

6. Type the password, select the Mark this key as exportable check box, and then click Next. (Do not select the Enable strong private key protection check box.)

7. Click Place all certificates in the following store, choose Personal, and then click Next.

8. Click Finish.

Add a certificate to an encrypted file

To add your encryption certificate and key to a file, export your certificate and key by following the steps above and have the person that you received the file from, import the certificate and key and then add it to the file by following these steps.

1. Right-click the encrypted file, and then click Properties.

2. Click the General tab, and then click Advanced.

3. In the Advanced Attributes dialog box, click Details

4. In the dialog box that appears, click Add.

5. Click the certificate, and then click OK in each of the four open dialog boxes.

Hope that helps!

Posted by on , in Category Windows with Tags
Nitin Agarwal is an MVP alumni and a Pro Blogger. He was awarded as Most Valuable Professional for 3 times by Microsoft in Windows Expert - Consumer category. He is immensely inspired by Bill Gates, Steve Jobs and APJ Abdul Kalam.


  1. r0lZ

    There is no Certificate Manager in Control Panel (Win7 X64 Ultimate SP1).

  2. Type “certmgr” in start search. You will find it.

  3. Type “certmgr” in start search. You will find it.

  4. Drevlan

    r0lZ, on your start menu type certmgr.msc to open the Certificate Manager. Another and possibly easier method is to open the User Accounts control panel applet and then on the left select “Manage your file encryption certificates”. Using this tool you can easily generate new self-signed or domain issued certificate as well as back them up.

  5. Gok

    i changed my os… now i dont have key… still is it possible to open? please let me know soon…

  6. Louis

    What happens when your certificate is marked not exportable? 🙁

  7. Akash Kashyap

    and what if that other os been formatted…?

  8. JB

    yes I am wondering this too.. Shit.

  9. arjun

    Hi, I al ready created encrypted file in another another account and then forgeten and delete the account after I can’t access rar file from main account plz any one help

  10. Mohammed Faisal

    Hey Hai Iam usinng Protected folder by Iobit version 1.2 in win 8.1
    I forgot password may I know how to recover my files please

Leave a Reply

Your email address will not be published. Required fields are marked *

8 + 1 =