Hello all, this morning I noted to have on my computer two EFS certificates, both self-signed, but now I am not sure which of them exactly is being used to encrypt files. How I can discover that? I am also curious on how the system chooses the certificate in such situation. Thanks much. rjbarlow

you may use cipher.exe utility with /C switch to determine which cert was used to encrypt the data. For additional info check cipher /?http://en-us.sysadmins.lv

I also found the registry key to check at this article... http://support.microsoft.com/kb/295680/en-us