EFS-Encrypted Files Are At Risk for Data Loss – Decrypt by January 12, 2009
NASA HQ users who may have used EFS in the past
January 7, 2009

The Encrypting File System (EFS) is a file system driver that provides filesystem-level encryption in Microsoft Windows (2000 and later) operating systems. If you have used EFS to encrypt files, you must make sure those files are decrypted (unencrypted) by January 12 in order to prevent data loss.

In mid-January, NASA Headquarters will begin migrating all users to NASA’s Consolidated Active Directory (NCAD). EFS‑encrypted files will be permanently deleted from computers at the time a computer is migrated to NCAD. If you have files encrypted with EFS, the following user actions must be taken:

• Decrypt and resave any files previously encrypted with EFS as soon as possible, but no later than January 12, 2009 using the “Decrypting EFS Files” instructions. If you no longer remember your EFS credentials, please contact the Enterprise Service Desk (ESD) for assistance.
• If you do not currently have Entrust PKI installed and activated, consider applying for this encryption solution today. The first step to obtain Entrust PKI is to complete and sign NHQ Form 261 , "Application for Digital Certificate" and deliver it to Room 4A35.

If you have any concerns regarding the security or proper handling of your documents, please contact the Enterprise Service Desk (ESD) or your IT Point-of-Contact.

Should you need assistance, please call the Enterprise Service Desk (ESD) at 358-HELP (4357) or 1-866-4NASAHQ (462-7247) or send an e-mail.