USMT 5 ScanState in Offline Mode and /efs:copyraw is not migrating the EFS certificate RRS feed

  • Question

  • Hi, I am trying to get USMT 5 Scanstate to work in offline mode from WinPE for an XP to Win7 migration. Most everything is working except for the /efs:copyraw command. This is supposed to migrate any encrypted files along with their encryption certificate.

    On the XP machine before scanstate, I can check certmgr.msc>Personal>Certificates and I can see the user's certificate with the Intended Purpose = Encrypting File System.

    So then scanstate /efs:copyraw is backing up the encrypted files from WinXP, and loadstate is restoring them still encrypted to Win7. But if I go "Manage file encryption certificate" after the Loadstate, I see the following message: "Your Computer does not currently have a file encryption certificate".

    Any ideas what I am missing here? Thanks in advance!

    • Edited by ChrisFitz Wednesday, April 2, 2014 8:36 PM added more info
    Wednesday, April 2, 2014 8:20 PM


  • After further testing, it appears the /efs:copyraw option does not migrate the EFS certificates when scanstate is run in /offline mode. If I use the option when running scanstate in online mode, the EFS certs are migrated OK.

    Too bad this is not documented by Microsoft anywhere I could find.

    • Marked as answer by ChrisFitz Tuesday, April 8, 2014 1:55 PM
    Tuesday, April 8, 2014 1:55 PM