Encrypting a File using Microsoft PKI Basic EFS template

Hi All;
I created a basic EFS template on my Lab issuing CA and configured it for auto-enrollment on the domain . After doing that I created a new domain user(Test) on the Active directory and logged in to my windows client machine which is windows 7
enterprise using that user (TEST). Now since the machine was set up for auto enrollment the EFS certificate gets issued to the user “TEST” as shown below
Now as per my understanding this Certificate is tied to the User “Test” for doing crypto operation.
So now I created a folder a folder named “Puneet” on the desktop of Windows 7 machine and created a file “secret.txt” inside and now I selected the properties of the file “ secret” and selected the advanced option in which I get the pop up “Advanced Attributes”
in that I selected “Encrypt contents to secure data” and now I believe my EFS certificate should come into picture and help me in encrypting the file .
But it fails with below error
I have looked into event log and it does not give much information .
Note: In home Lab setup KRA is up and running on my PKI setup.
Has any one of you encountered this error while doing crypto operation using PKI . Any pointers are welcomed
J

Hi,
Do you have any progress on this issue?
If not, please provide more specific details on the error message for further analyzing.
Best Regards,
Amy Wang

Similar Messages

Why does Firefox 7 freeze when I paste a filename when printing to a file using Microsoft XPS Document Writer?

This is more of a bug, and it doesn't seem to happen all the time.
I like printing web pages to Microsoft XPS Document Writer (.xps) format. FF7 seems to freeze often when I paste a filename (usually from copying something, like the title, from the web page itself) after trying to print to a file using Microsoft XPS Document Writer. I think it may be that I wind up copying some special formatting (or maybe a line break) and that causes FF to freeze (I then have to force-close it using Task Manager). Just a bug that I hope the developers will note and fix.
Another question, not quite related to the above, but is there a way to save an html web page to save only the text stuff? When I save to Text File in Firefox, I usually wind up with all the html crap in it too, when I just wanted the text content portion. TIA.

Can you undo the system restore?
Note that using System Restore can cause your Firefox installation to get corrupted because not all files are restored (only files in a white-list), so be cautious with using System Restore.
*You may lose data in the Firefox profile folder like .js and .ini files pr profiles.ini can be affected.
*You may need to (re)install software that was affected.
In case you need to reinstall Firefox then you need to delete the Firefox program folder before reinstalling to make sure that all files get replaced.
A possible cause is security software (firewall,anti-virus) that blocks or restricts Firefox or the plugin-container process without informing you, possibly after detecting changes (update) to the Firefox program.
Remove all rules for Firefox and the plugin-container from the permissions list in the firewall and let your firewall ask again for permission to get full unrestricted access to internet for Firefox and the plugin-container process and the updater process.
See:
*https://support.mozilla.org/kb/Server+not+found
*https://support.mozilla.org/kb/Firewalls

Encrypting a file using PGP

Hi All,
In my scenario i need to pick up a file,encrypt it using PGP and then send it destination folder.
As i am new to XI ,I don't have any idea how to encrypt the file using PGP.it would be helpful for me if anyone could help me.
Regards,
Hemanth.

I am trying to write a PI module that would allow us to encrypt data in memory before using the File/FTP adapter to either write the data to disk or send the data to an external system. We want to avoid writing unencrypted data to disk, even for a short time.
I've written a Java wrapper around the Bouncy Castle cryptographic library. Piece of cake. I can receive a String, encrypt it, and return the resulting String.
Now I'm trying to figure out what to do in the Module with the ModuleData. I don't have a good example to follow. I want to take the output data as a String, encrypt it to a new String, and put it back in the ModuleData in a way that the File/FTP adapter can save the data.
It looks like I'm going to get the XML representation of the data, though. What I want to encrypt is the text that would have been written out by the File/FTP adapter.
Any suggestions?
Thanks,
-Andy

Element not found when duplicating "Basic EFS" template

I've been trying to duplicate the Basic EFS template as either a Windows 2003 or 2008
template and everytime I use the new template via GPO to encrypt (EFS) any files/folder, I keep getting the "Element Not Found" error. I've looked all over event logs and can not find any errors that will point me in the right direction to
troubleshoot this issue. I noticed it will only work if I use the Basic EFS template. I've Google and have found several forum posts that states to duplicate the Basic EFS template as a Windows 2003 template to fix this problem, but I'm still getting
the same error. Any help is appreciated.
Thank you.

Does it also fail if you start from a fresh user profile (no previous attempts to encrypt or enrol for certificates using any template)? This is to rule out any effects of caching anything, such thumbprints of EFS certificates used before
in the registry.
I would in particular repeat a test with a fresh profile and a W2K3 template after AD replication and GPO refresh has been done - I still think the most likely explanation is still that the client actually tried to use a W2K8 template which
was still cached.
After you created the W2K3 template - did you make any changes to the CSP / cryptography after you had copied Basic EFS? Which provider do you use - I guess it should be Enhanced or Strong provider?
Otherwise, I would probably compare all Object Access events for Basic EFS and for the other templates, and look for things like failed attempts to access key files. If there is nothing promising there, rather use
Process Monitor (Sysinternals) to compare "good" and "bad" encryption.
I admit that these tools are quite overwhelming and require some practice but I think I have exhausted all other ideas.
Elke

How Encrypt a File Using Key?

Hi Guys,
Here is my problem. I have to create a bank's document encrypted to send to a legacy system. ( Using a KEY to validate the roll process)
I'm thinking to use two scenarios:
1 - Generate the file via ABAP and sent it to a folder in a server to be consuming - SAP ERP.
2 - Generate the file via ABAP, sent it to PI encrypt it via Java Mapping and sent it to a server.
ABAP
First question.
There is a way to generate this file using SHA1 using a Key as parameter?
(CALCULATE_HASH_FOR_CHAR)
Second one.
How can I decrypt this file to test?
Third.
There is others ways to encrypt a file via SAP ERP? UTF-8 and BASE32 are not encrypt codes. They are encoding code.
PI
First
There is a library or other way to encrypt a file without implement a Java Mapping?
Tnks.

> There is a way to generate this file using SHA1 using a Key as parameter?
Why don't you simple search the forum with "SHA1" term, you'd get the answer in an instant
> How can I decrypt this file to test?
> There is others ways to encrypt a file via SAP ERP? UTF-8 and BASE32 are not encrypt codes. They are encoding code.
What encryption do you need?
> But I would like to know if are these methods algorithms as DES, AES, RSA... or others ?
Couldn't you say it at the beginning!
By simply looking at CL_HARD_WIRED_ENCRYPTOR methods, we see that the encryption mechanism is very simple (I'm not expert so I can't tell what it is), I wouldn't rely on it...
I recommend you to read [Note 662340 - SSF Encryption Using the SAPCryptolib|http://service.sap.com/sap/support/notes/662340]. There are also some documentation, security guides on sap library and sap marketplace.
Edited by: Sandra Rossi on Jul 13, 2010 6:51 PM

Encrypt text file using PGP

Hi all,
I have a requirement to encrypt a file before sending as email attachment to another party. We have installed PGP to do the encryption. I am able to generate the text file and store in UNIX server. I created a directory in AL11 with the text file. I also created a command in SM69. When i execute the command in sm69, it is throwing me the following message:
3083:could not create output file
3090:operation failed, file not found
External program terminated with exit code 162
Any idea why?

Hello Aida ,
Could you please share ? how did you solve this issue ?
Thanks & Regards
Tisha

How to decrypt an encrypted text file using Algorithm SHA1withRSA .

I have one encrypted file instance_demo_Encryp.xml and encrypted format is
MIMVwmYGCSqGSIb3DQEHAqCDFcJWMIMVwlECAQExCzAJBgUrDgMCGgUAMIMVvzoG
CSqGSIb3DQEHAaCDFb8qBIMVvyU8P3htbCB2ZXJzaW9uPScxLjAnIGVuY29kaW5n
PSdVVEYtOCcgPz4NCjx4YnJsaTp4YnJsIHhtbG5zOnhicmxpPSdodHRwOi8vd3d3
Lnhicmwub3JnLzIwMDMvaW5zdGFuY2UnIHhtbG5zOmxpbms9J2h0dHA6Ly93d3cu
eGJybC5vcmcvMjAwMy9saW5rYmFzZScgeG1sbnM6eGxpbms9J2h0dHA6Ly93d3cu
dzMub3JnLzE5OTkveGxpbmsnIHhtbG5zOnJlZj0naHR0cDovL3d3dy54YnJsLm9y
Zy8yMDA0L3JlZicgeG1sbnM6eGJybGR0PSdodHRwOi8veGJybC5vcmcvMjAwNS94
I want to decrypt and convert into original xml file.I am using below code but some error occurred javax.crypto.BadPaddingException: Data must start with zero.Please help
import java.io.*;
import java.math.BigInteger;
import java.net.URLEncoder;
import java.util.*;
import java.security.AlgorithmParameters;
import java.security.Key;
import java.security.KeyFactory;
import java.security.KeyPairGenerator;
import java.security.KeyStore;
import java.security.GeneralSecurityException;
import java.security.MessageDigest;
import java.security.PrivateKey;
import java.security.PublicKey;
import java.security.Signature;
import java.security.cert.Certificate;
import java.security.cert.CertificateFactory;
import java.security.cert.X509Certificate;
import java.security.spec.RSAPublicKeySpec;
import java.security.spec.X509EncodedKeySpec;
import javax.crypto.Cipher;
import javax.crypto.CipherInputStream;
import oracle.security.xmlsec.util.Base64;
import sun.misc.*;
//import org.bouncycastle.jce.provider.BouncyCastleProvider;
//import org.bouncycastle.jce.*;
public class EsignWithBC {
     public static final String KEY_STORE_PASSWORD = "password";
     public static void main(String[] args) {
           BASE64Encoder base64Encoder = new BASE64Encoder();
           BASE64Decoder base64Decoder = new BASE64Decoder();
          String record = null;
          char[] passwd = KEY_STORE_PASSWORD.toCharArray();
          String inputFileName = "webroot/cerFiles/instance_demo_Encryp.xml";
          try {
               KeyStore keyStore = KeyStore.getInstance("PKCS12");
               FileInputStream fis = new FileInputStream(
                         "D:\\eclipse_program\\xRnd\\WebRoot\\cerFiles\\AlicePFX.pfx");
               keyStore.load(fis, passwd);
               fis.close();
               Enumeration aliases = keyStore.aliases();
               while (aliases.hasMoreElements()) {
                    System.out.println(aliases.nextElement());
               /*FileInputStream fin = new FileInputStream("D:\\eclipse_program\\xRnd\\WebRoot\\cerFiles\\Alice.cer");
                CertificateFactory cf = CertificateFactory.getInstance("X.509");
                Collection c = cf.generateCertificates(fin);
                Iterator i = c.iterator();
                while (i.hasNext()) {
                   Certificate cert = (Certificate)i.next();
                   System.out.println("***************************************************");
                   System.out.println(cert.getPublicKey());
                   System.out.println("***************************************************");
                String filename= "D:\\eclipse_program\\xRnd\\WebRoot\\cerFiles\\Alice.cer";
                FileInputStream fis1 = new FileInputStream(filename);
                DataInputStream dis = new DataInputStream(fis1);
                CertificateFactory cf1 = CertificateFactory.getInstance("X.509");
                byte[] bytes = new byte[dis.available()];
                dis.readFully(bytes);
                ByteArrayInputStream bais = new ByteArrayInputStream(bytes);
                Key key = null;
                while (bais.available() > 0) {
                   Certificate cert = cf1.generateCertificate(bais);
                   key = cert.getPublicKey();
                   System.out.println(cert.toString());
               // EsignWithBC obj = new EsignWithBC();
                //System.out.println(obj.createUrlFragment("alice's key","password","D:\\eclipse_program\\xRnd\\webroot\\cerFiles\\instance_demo_Encryp.xml"));
                FileReader fr = new FileReader(inputFileName);
                    BufferedReader br = new BufferedReader(fr);
                    byte text[] = null;
                     //System.out.println(text.toString());
               // Cipher cipher = Cipher.getInstance("SHA1withRSA");
                    KeyPairGenerator keyGen = KeyPairGenerator.getInstance("RSA");
                    Signature sig = Signature.getInstance("SHA1withRSA");
                    Cipher rsaCipher = Cipher.getInstance("RSA");
                    String str = null;
                     byte[] cleartext1 = null;
                    rsaCipher.init(Cipher.DECRYPT_MODE, key);
                    System.out.println("********************************");
                    while ( (record=br.readLine()) != null ) {
                          text = base64Decoder.decodeBuffer(record);
                          cleartext1 = rsaCipher.doFinal(text);
                          //str = new String(cleartext1);
                          System.out.println(rsaCipher.doFinal(text));
                    System.out.println("********************************");
          } catch (Exception e) {
               e.printStackTrace();
}

SHA1withRSA is a signature algorithm and not an encryption. If all you have is the signature then you can never get back the original document. The best you can do is to check that the signature is valid but for that you will need the original document and the public key of the person who signed the document.
The code you post is not coherent and though I think can see what you are trying to do I am not willing to make guesses at this stage since it sounds like you are trying to do the impossible.

Datamining PST Files using Microsoft.Office.Interop.Outlook

I was wondering how to datamine a pst file beyond it's primary folders to see if an empty folder has content in a subfolder and add it to an existing psobject?
Cheers,
B.
$results = New-Object System.Collections.ArrayList # Empty Array
$null = Add-type -assembly Microsoft.Office.Interop.Outlook
$outlook = new-object -comobject outlook.application
$namespace = $outlook.GetNameSpace('MAPI')
$pstpath = "d:\sample.pst"
$namespace.AddStore($pstpath)
$PST = $namespace.Stores | ? {$_.FilePath -eq $pstpath}
$PSTRoot = $PST.GetRootFolder()
$PSTName = $PST.Displayname
Foreach ($folders in $PSTRoot.Folders) {
$x = $folders.Name
$y = $folders.FolderPath
$z = $folders.Items.Count
$Object = New-Object PSObject
$Object | Add-Member -Name 'Name' -MemberType Noteproperty -Value $x
$Object | Add-Member -Name 'Path' -MemberType Noteproperty -Value $y
$Object | Add-Member -Name 'Items' -MemberType Noteproperty -Value $z
$results += $object
$results | Format-Table 'Name','Path','Items' -Wrap -AutoSize | Out-Default
$results = $NULL

Hi B,
If you want to test the access of the .pst file, please refer to the function below:
function Test-PSTFile {
param(
[Parameter(Position=1, ValueFromPipeline=$true, Mandatory=$true)]
$FilePath,
[Parameter(Position=2, Mandatory=$false)]
$ErrorLog
process {
#Create an instance of Outlook
$null = Add-type -assembly Microsoft.Office.Interop.Outlook
$olFolders = 'Microsoft.Office.Interop.Outlook.olDefaultFolders' -as [type]
$outlook = new-object -comobject outlook.application
#Open the MAPI profile
$namespace = $outlook.GetNameSpace('MAPI')
try {
#Try to add the PST file to the profile
$namespace.AddStore($FilePath)
#Try to read the root folder name
$PST = $namespace.Stores | ? {$_.FilePath -eq $FilePath}
$PSTRoot = $PST.GetRootFolder()
if($PSTRoot) {
New-Object PSObject -Property @{
FileName = $FilePath
Valid = $True
#Disconnect the PST
$PSTFolder = $namespace.Folders.Item($PSTRoot.Name)
$namespace.GetType().InvokeMember('RemoveStore',[System.Reflection.BindingFlags]::InvokeMethod,$null,$namespace,($PSTFolder))
catch {
#If logging is on, save the error to the log
if($ErrorLog) {
Add-Content -Path $ErrorLog -Value ("Ran into a problem with {0} at {1}. The error was {2}" -f $FilePath, (Get-Date).ToString(),$_.Exception.Message)
#Output a failure record
New-Object PSObject -Property @{
FileName = $FilePath
Valid = $False
Refer to:
How to Test Outlook (PST) Personal Folder File Access with PowerShell
If there is anything else regarding this issue, please feel free to post back.
Best Regards,
Anna Wang

How do i use directX in microsoft visual basic studio 2010 express ?

i am writing code to graph stock market prices using microsoft visual basic studio express
i want fast response (i do machine language) using directX
this is my problem
i have never used directX, and i have never used directX in visual basic studio
i followed a tutorial that went like this
Reference: Microsoft.DirectX
             Microsoft.DirectX.Direct3D
             Microsoft.DirectX.Direct3DX
    Imports: Microsoft.DirectX
             Microsoft.DirectX.Direct3D
             Microsoft.DirectX.Direct3DX
    Declare: Private D3Ddev As Device = Nothing
             Private D3Dpp As PresentParameters = Nothing
             Private DP As DisplayMode = Nothing
i found the reference dll's at C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0
when i imported microsoft.directX.direct3DX i got error #1
namespace or type specified in the imports 'microsoft.directX.direct3DX' doesn't contain any public member or cannot be found...
the same error occurs wether i use direct3DX \1.0.2911.0 or \1.0.2902.0
when i built and ran, i got error #2
microsoft visual basic 2010 express is waiting for an operation to complete ...
it hangs and i have to soft reset ctrl-alt-del
error #3
when i reference
Microsoft.DirectX
Microsoft.DirectX.Direct3D and
Microsoft.DirectX.Direct3DX
from C:\Windows\Microsoft.NET\DirectX for Managed Code\1.0.2902.0,
all my declares work:
        D3Dpp = New PresentParameters()                             'Initialize
some stuff for the Presentation parameters
        D3Dpp.BackBufferFormat = DP.Format
        D3Dpp.BackBufferWidth = DP.Width
        D3Dpp.BackBufferHeight = DP.Height
        D3Dpp.SwapEffect = SwapEffect.Discard                       'There's flip, copy, and discard. Flip and Discard
are used most often.
        D3Dpp.PresentationInterval = PresentInterval.Immediate      'Present the scene immediately
but when i start debugging (f5), i get this error message:
mixed mode assembly is built against version 'v1.1.4322' of the runtime and cannot be loaded in the 4.0 runtime without additional configuration information
i dont fully understand the visual studio process, but i think 'mixed mode' means run and debug. two seperate app's
i know this is a long question, but the forums don't answer it properly
i want it answered concisly. i am running windows 7 basic, and this is my question
can somebody give me a dozen lines of directX code that will work with my system, so that i can at least draw a line using directX 2D and 3D ?
thanks everybody :)

Hi,
Thank you for your post.
I am afraid that the issue is out of support range of VS General Question forum which mainly discusses
WPF & SL designer, Visual Studio Guidance Automation Toolkit, Developer Documentation and Help System
and Visual Studio Editor.
Since your issue is related to DirectX, I suggest you consult on DirectX forum:
http://xboxforums.create.msdn.com/forums/ for better response.
Thanks,
We are trying to better understand customer views on social support experience, so your participation in this interview project would be greatly appreciated if you have time. Thanks for helping make community forums a great place.
Click
HERE to participate the survey.

Encrypt a text file using certificates

Hello,
I am trying to encrypt a file using the certificate uploaded through STRUST. But while encrypting I am getting an error, "SSF_API_UNKNOWN_SECTK_ERROR".
I am using the program SSF01.
Request your assistance to resolve this issue.
Also attaching the input screen and output screen screenshots.
Thanks and Regards,
Debanjan Das

Have you properly setup SAP Cryptographic Library on the Application Server? How was the certificate created which you imported into STRUST? See SAP note 662340 for setting up SSF encryption. SAP note 800240 might help you troubleshoot the problems you are having.
https://service.sap.com/sap/support/notes/662340
https://service.sap.com/sap/support/notes/800240

Encrypt file using SSF ABAP

Hi Everyone,
I want to encrypt the file using SSF ABAP. Actually system is not yet installed with SAPCRYPTO software.For this insatllation basis people is required or ABAP people is required?
for that how to do the necessary setting in STRUST in following way :
1. Create Certificate request
2. Send it to Service.sap.com to get Request response
3. Import the Certificate request response to PSE
4. Export the certificate from receiver's PSE
5. Import that certificate to sender's PSE
6. how to test this connections
7. how to get Public & private key
8. how to start with this to encode the file?
Very new to SSF.
Your help will be appriciated.

To install the SapCrypto library, a basis is needed (the library need to be downloaded and pasted to a system directory, then update the system profile settings with sapcrypto's library path)
For informations, take a look to this help:
http://help.sap.com/saphelp_nw2004s/helpdata/en/4d/bf6f77a2c5446a86e0152f1b309db6/frameset.htm

Getting error message when i am trying to update the excel file using script task in ssis package

Hi Guys,
I am getting error message when I am trying to update the excel. Please find the error messages as below
Error at Update File [Update File]: Failed to compiled scripts contained in the package. Open the package in SSIS Designer and resolve the compilation errors.
Error at Update File [Update File]: BC30002 - Type 'Microsoft.Office.Interop.Excel.Application' is not defined., ScriptMain.vb, 32, 32
Error at Update File [Update File]: BC30002 - Type 'Microsoft.Office.Interop.Excel.Workbook' is not defined., ScriptMain.vb, 33, 25
Error at Update File [Update File]: The binary code for the script is not found. Please open the script in the designer by clicking Edit Script button and make sure it builds successfully.
Warning at Update File [Update File]: Found SQL Server Integration Services 2008 Script Task "ST_050fcae972904039b4f0fe59b7528ece" that requires migration!
and the code that   I am using is
Dell - Internal Use - Confidential
' Microsoft SQL Server Integration Services Script Task
' Write scripts using Microsoft Visual Basic
' The ScriptMain class is the entry point of the Script Task.
Imports System
Imports System.Data
Imports System.Math
Imports Microsoft.SqlServer.Dts.Runtime
Imports Microsoft.Office.Interop.Excel
<System.AddIn.AddIn("ScriptMain", Version:="1.0", Publisher:="",
Description:="")> _
<System.CLSCompliantAttribute(False)> _
Partial
Public Class ScriptMain
Inherits Microsoft.SqlServer.Dts.Tasks.ScriptTask.VSTARTScriptObjectModelBase
Enum ScriptResults
            Success = Microsoft.SqlServer.Dts.Runtime.DTSExecResult.Success
Failure = Microsoft.SqlServer.Dts.Runtime.DTSExecResult.Failure
End Enum
Public Sub Main()
        Dts.TaskResult = ScriptResults.Success
'Dim proc As System.Diagnostics.Process
'kill all instances of excel
'For Each proc In System.Diagnostics.Process.GetProcessesByName("EXCEL")
' proc.Kill()
'Next
Dim excelnacomm As
New Microsoft.Office.Interop.Excel.Application
Dim wbnacomm As Microsoft.Office.Interop.Excel.Workbook
        wbnacomm = excelnacomm.Workbooks.Open("http://test.xlsx")(renamed
the excel)
        wbnacomm.RefreshAll()
        wbnacomm.Save()
        wbnacomm.Close()
        excelnacomm.Quit()
        Runtime.InteropServices.Marshal.ReleaseComObject(excelnacomm)
End Sub
End
Class
Please let me know what could be the reason
Smash126

Download:
Microsoft Office 2010: Primary Interop Assemblies Redistributable
How to: Add or Remove References By Using the Add Reference Dialog Box / How to:
Add and Remove References in Visual Studio (C#)
Olaf Helper
[ Blog] [ Xing] [ MVP]

Need To Open An Encrypted PDF File That I Created. No Password.

I have Acrobat 8. I created a document and then tried to put security on it. Now I cannot even open the document. It gives me the message: "You do not have access rights to the encrypted document." I never entered a password or anything. I need to get this document reopened. Also, I pasted some JPEG signatures into the document. My reason for security measures was to make sure nobody could edit the document and right click and save as the signature JPEG. First thing first- getting the document opened. Then let me know how to just make it so that someone can only read and print the document and not be able to edit any typewriter insertions. PLEASE HELP!!!!

Hi Dom,
Let's start with Certificate Security is not the same as Password Security. If you had encrypted the PDF file using Password Security, then whatever password you used to lock the document you would use to unlock the document. It's pretty straight forward, and in the cryptography world it would be know as symmetrical security in that you use the same key (password) to lock and unlock the file. Think of it as using a key to lock your front door to your house when you leave and the exact same key to unlock the door when you return, that's what symmetrical security is.
Certificate security is a totally different beast. Certificate Security uses asymmetrical encryption meaning there are two different keys involved, a public key and its corresponding private key. When these keys are generated there is a voodoo that goes on that gives these two keys a symbiotic relationship in that (and this is the basic tenet of asymmetrical encryption) what one key locks only its corresponding other key can unlock. Either key can lock (really encrypt) something and only its corresponding other key can unlock (decrypt) it once it's been locked. Of these two seemingly magical keys one is designated as a private key that only the key owner has access to, and the other is designated as a public key that the whole world has access to. If you lock something with your private key then only its corresponding public key can unlock it, and yes that means that not even the private key can unlock it. You can also lock something using the public key in which case only the corresponding private key can successfully unlock it.
When you encrypt (think of that as "lock") a PDF file using Certificate Security you are encrypting the file using one or more public keys. That is, you encrypt the file for a list of recipients where each recipient has provided you with their public key and they in turn will decrypt the document using their private key. The number of recipients is theoretically limitless, but practically there is a limit in that each recipient you include will cause the file size to grow a little and at some point you'd make the file size too large for the computer to handle, but for the sake of our discussion think unlimited number of recipients. When you encrypted the file you were asked to select a recipient. If you don't also select yourself as a recipient then you end up locking yourself out of the file, and that's exactly what happened in your case. I see from above that you are using version 8, but I believe it was version 9 where we added the warning to make sure to add yourself as a recipient so as to not lock yourself out of the file (I can't remember if it was version 8 or 9, but since you didn't mention that warning I'll assume that we didn't add the warning until 9).
Unless you added yourself at the time you encrypted the file there is no going back to add yourself later because if you can't open the file you can't edit the file. You are locked out forever. You could ask the person that you included as a recipient to see if they can open the file and remove security, but you would have had to make them a document owner when you encrypted the file. If you restricted their editing capabilities then they won't be able to remove security, but at least you could see the contents of the file.
I know this has all been a bit geeky, and I haven't gone into how to procure a public/private key pair, but I don't want to dump too much data on you in one post. If you need more information let me know and I'll be glad to provide it.
Steve

Sending a 3DES encrypted zip file as one fields in the SOAP request xml.

Dear All,
We have a requirement to
- to create a text file, after mapping and content converisons, out of an IDoc xml file,
- zip this file
- encrypt this file using 3DES
- send this encrypted file as one of the tags of an xml request file to a webservice
Could one of you please help me with any pointers to how we can do this, mainly on how to send the encrypted zip file as one of the tags of an xml file?
Please write back to me if you need more details/clarity on my query.
Kind Regards,
Thomas.

Hi Udo,
Thank you for the response.
Please let me try this option and get back to you with my findings.
Kind Regards,
Thomas.

Encrypt target file with GPG

Hi,
I need to encrypt a target ftp file with GPG and i think that calling an os script (remote) could serve.
But i dont know if that's the best solution.
There is any other way to do that?
Thanks in advance,
Carme

Hi Carme,
If you are looking for a tool for PGP ,you can have a look at the links below
http://www.aedaptive.com/index.php/solutions
http://www.aedaptive.com/index.php/solutions/pgp-for-sap-netweaver
If you are planning to develop adapter module or want to evaluate which one is better ,please refer following posts .
/people/dijesh.tanna/blog/2008/09/15/sap-pi-integrating-macafee-e-business-server-with-sap-pi-70-for-pgp-encryptiondecryption
Encrypting a file using PGP
Thanks,

Encrypting a File using Microsoft PKI Basic EFS template

Similar Messages

Maybe you are looking for