cipher.exe
Associated Error Codes
Below lists error codes and symbolic names found for this module.
| Code | Found in | Description |
|---|---|---|
| 0x1 | 78.11011 | [OK] |
| 0x2 | 78.11011 | [ERR] |
| 0x6 | 78.11011 | Listing %1 New files added to this directory will be encrypted. |
| 0x7 | 78.11011 | Listing %1 New files added to this directory will not be encrypted. |
| 0x8 | 78.11011 | Of %1 file(s) within %2 directorie(s) %3 are encrypted and %4 are not encrypted. |
| 0x9 | 78.11011 | Setting the directory %1 to encrypt new files |
| 0xa | 78.11011 | Encrypting files in %1 |
| 0xb | 78.11011 | Encrypting files in %1 |
| 0xe | 78.11011 | %1 file(s) [or directorie(s)] within %2 directorie(s) were encrypted. |
| 0xf | 78.11011 | Setting the directory %1 not to encrypt new files |
| 0x10 | 78.11011 | Decrypting files in %1 |
| 0x11 | 78.11011 | Decrypting files in %1 |
| 0x14 | 78.11011 | %1 file(s) [or directorie(s)] within %2 directorie(s) were decrypted. |
| 0x15 | 78.11011 | Out of memory. |
| 0x16 | 78.11011 | [Skipping %1] |
| 0x17 | 78.11011 | %1!-*s! |
| 0x18 | 78.11011 | %1 |
| 0x19 | 78.11011 | %1: The file system does not support encryption. |
| 0x1a | 78.11011 | to 1 |
| 0x1b | 78.11011 | Invalid drive specification: %1 |
| 0x1c | 78.11011 | Error finding user certificate in Active Directory Domain Services |
| 0x1e | 78.11011 | Invalid Parameter: %1 |
| 0x1f | 8.11011 | EFS certificate thumbprint for computer %1: %2 |
| 0x20 | 78.11011 | Encrypted File(s) on your system: |
| 0x21 | 78.11011 | %1: Encryption updated. |
| 0x22 | 78.11011 | Converting files from plaintext to ciphertext may leave sections of old plaintext on the disk volume(s). It is recommended to use command CIPHER /W:directory to clean up the disk after all converting is done. |
| 0x23 | 78.11011 | Please type in the password to protect your .PFX file: |
| 0x24 | 78.11011 | Please retype the password to confirm: |
| 0x25 | 78.11011 | Passwords do not match. No certificate is generated. |
| 0x26 | 78.11011 | Overwrite %1? (Yes/No): |
| 0x27 | 78.11011 | YN |
| 0x28 | 78.11011 | Your .CER file was created successfully. |
| 0x29 | 78.11011 | Your .PFX file was created successfully. |
| 0x2a | 78.11011 | Writing %1 |
| 0x2b | 78.11011 | To remove as much data as possible, please close all other applications while running CIPHER /W. |
| 0x2c | 78.11011 | 0x00 |
| 0x2d | 78.11011 | 0xFF |
| 0x2e | 78.11011 | Random Numbers |
| 0x2f | 78.11011 | There is no local EFS certificate that is used to encrypt this file. No local EFS certificate is backed up. |
| 0x30 | 78.11011 | There is no local current EFS certificate to be backed up. |
| 0x31 | 78.11011 | Your certificate(s) and the corresponding key(s) are being backed up. If you didn't start the process, press CANCEL. Press OK to confirm. |
| 0x32 | 78.11011 | EFS certificate(s) is(are) backed up successfully. |
| 0x33 | 78.11011 | EFS certificate backup failed. |
| 0x34 | 78.11011 | EFS certificate and key backup. |
| 0x35 | 78.11011 | Please type the backup PFX file name. |
| 0x36 | 78.11011 | Output PFX file path too long. Make it shorter and try again. |
| 0x37 | 78.11011 | Users who can decrypt: |
| 0x38 | 78.11011 | %1 |
| 0x39 | 78.11011 | No User found. |
| 0x3a | 78.11011 | Unknown |
| 0x3b | 78.11011 | Certificate thumbprint: %1 |
| 0x3c | 78.11011 | Recovery Certificates: |
| 0x3d | 78.11011 | No recovery certificate found. |
| 0x3e | 78.11011 | Key information cannot be retrieved. |
| 0x3f | 78.11011 | Key Information: Algorithm: %1 Key Length: %2!d! Key Entropy: %3!d! |
| 0x40 | 78.11011 | Compatibility Level: |
| 0x41 | 78.11011 | Windows 2000 |
| 0x42 | 78.11011 | Windows XP/Server 2003 |
| 0x43 | 78.11011 | Windows Vista/Server 2008 |
| 0x44 | 78.11011 | Windows 7 |
| 0x45 | 78.11011 | Unknown Version |
| 0x46 | 78.11011 | Adding user to files in encrypted folder %1 |
| 0x47 | 78.11011 | Adding user to encrypted folder %1 |
| 0x48 | 78.11011 | Adding user to files in folder %1 |
| 0x49 | 78.11011 | User was added to %1 file(s) [or directorie(s)] within %2 directorie(s). |
| 0x4a | 8.11011 | Enterprise Protected |
| 0x4b | 8.11011 | Enterprise protected by: |
| 0x4c | 1011 | Enterprise key has been revoked. |
| 0x4d | 1011 | Application Protected |
| 0x50 | 78.11011 | Removing user from files in encrypted folder %1 |
| 0x51 | 78.11011 | Removing user from encrypted folder %1 |
| 0x52 | 78.11011 | Removing user from files in folder %1 |
| 0x53 | 78.11011 | User was removed from %1 file(s) [or directorie(s)] within %2 directorie(s). |
| 0x54 | 78.11011 | U %1 |
| 0x55 | 78.11011 | E %1 |
| 0x56 | 78.11011 | Updating EFS KEY from files in encrypted folder %1 |
| 0x57 | 78.11011 | Updating EFS KEY from encrypted folder %1 |
| 0x58 | 78.11011 | Updating EFS KEY from files in folder %1 |
| 0x59 | 78.11011 | EFS KEY was updated on %1 file(s) [or directorie(s)] within %2 directorie(s). |
| 0x5a | 1011 | Displays or alters the encryption of directories [files] on NTFS partitions. CIPHER [/E | /D | /C] [/S:directory] [/B] [/H] [pathname [...]] CIPHER /K [/ECC:256|384|521] CIPHER /R:filename [/SMARTCARD] [/ECC:256|384|521] CIPHER /P:filename.cer CIPHER /U [/N] CIPHER /W:directory CIPHER /X[:efsfile] [filename] CIPHER /Y CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:filename | /USER:username] [/S:directory] [/B] [/H] [pathname [...]] CIPHER /FLUSHCACHE [/SERVER:servername] CIPHER /REMOVEUSER /CERTHASH:hash [/S:directory] [/B] [/H] [pathname [...]] CIPHER /REKEY [pathname [...]] /B Abort if an error is encountered. By default, CIPHER continues executing even if errors are encountered. /C Displays information on the encrypted file. /D Decrypts the specified files or directories. /E Encrypts the specified files or directories. Directories will be marked so that files added afterward will be encrypted. The encrypted file could become decrypted when it is modified if the parent directory is not encrypted. It is recommended that you encrypt the file and the parent directory. /H Displays files with the hidden or system attributes. These files are omitted by default. /K Creates a new certificate and key for use with EFS. If this option is chosen, all the other options will be ignored. Note: By default, /K creates a certificate and key that conform to current group policy. If ECC is specified, a self-signed certificate will be created with the supplied key size. /N This option only works with /U. This will prevent keys being updated. This is used to find all the encrypted files on the local drives. /R Generates an EFS recovery key and certificate, then writes them to a .PFX file (containing certificate and private key) and a .CER file (containing only the certificate). An administrator may add the contents of the .CER to the EFS recovery policy to create the recovery key for users, and import the .PFX to recover individual files. If SMARTCARD is specified, then writes the recovery key and certificate to a smart card. A .CER file is generated (containing only the certificate). No .PFX file is generated. Note: By default, /R creates an 2048-bit RSA recovery key and certificate. If ECC is specified, it must be followed by a key size of 256, 384, or 521. /P Creates a base64-encoded recovery-policy blob from the passed-in certificate. This blob can be used to set DRA policy for MDM deployments. /S Performs the specified operation on the given directory and all files and subdirectories within it. /U Tries to touch all the encrypted files on local drives. This will update user's file encryption key or recovery keys to the current ones if they are changed. This option does not work with other options except /N. /W Removes data from available unused disk space on the entire volume. If this option is chosen, all other options are ignored. The directory specified can be anywhere in a local volume. If it is a mount point or points to a directory in another volume, the data on that volume will be removed. /X Backup EFS certificate and keys into file filename. If efsfile is provided, the current user's certificate(s) used to encrypt the file will be backed up. Otherwise, the user's current EFS certificate and keys will be backed up. /Y Displays your current EFS certificate thumbprint on the local PC. /ADDUSER Adds a user to the specified encrypted file(s). If CERTHASH is provided, cipher will search for a certificate with this SHA1 hash. If CERTFILE is provided, cipher will extract the certificate from the file. If USER is provided, cipher will try to locate the user's certificate in Active Directory Domain Services. /FLUSHCACHE Clears the calling user's EFS key cache on the specified server. If servername is not provided, cipher clears the user's key cache on the local machine. /REKEY Updates the specified encrypted file(s) to use the configured EFS current key. /REMOVEUSER Removes a user from the specified file(s). CERTHASH must be the SHA1 hash of the certificate to remove. directory A directory path. filename A filename without extensions. pathname Specifies a pattern, file or directory. efsfile An encrypted file path. Used without parameters, CIPHER displays the encryption state of the current directory and any files it contains. You may use multiple directory names and wildcards. You must put spaces between multiple parameters. |
| 0x5b | 1011 | Enterprise Protected (Roamable) |
| 0x5c | 11 | Personal Data Encryption |
| 0x5d | 11 | File availability: |
| 0x5e | 11 | Any time after sign in |
| 0x5f | 11 | While device is unlocked |
| 0x60 | 11 | Protection status |
| 0x61 | 11 | Personal Data Encryption is On |
| 0x62 | 11 | Personal Data Encryption is Off |
| 0x1f | 7 | EFS certificate thumbprint for computer %1: %2 |
| 0x5a | 7 | Displays or alters the encryption of directories [files] on NTFS partitions. CIPHER [/E | /D | /C] [/S:directory] [/B] [/H] [pathname [...]] CIPHER /K [/ECC:256|384|521] CIPHER /R:filename [/SMARTCARD] [/ECC:256|384|521] CIPHER /U [/N] CIPHER /W:directory CIPHER /X[:efsfile] [filename] CIPHER /Y CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:filename | /USER:username] [/S:directory] [/B] [/H] [pathname [...]] CIPHER /FLUSHCACHE [/SERVER:servername] CIPHER /REMOVEUSER /CERTHASH:hash [/S:directory] [/B] [/H] [pathname [...]] CIPHER /REKEY [pathname [...]] /B Abort if an error is encountered. By default, CIPHER continues executing even if errors are encountered. /C Displays information on the encrypted file. /D Decrypts the specified files or directories. /E Encrypts the specified files or directories. Directories will be marked so that files added afterward will be encrypted. The encrypted file could become decrypted when it is modified if the parent directory is not encrypted. It is recommended that you encrypt the file and the parent directory. /H Displays files with the hidden or system attributes. These files are omitted by default. /K Creates a new certificate and key for use with EFS. If this option is chosen, all the other options will be ignored. Note: By default, /K creates a certificate and key that conform to current group policy. If ECC is specified, a self-signed certificate will be created with the supplied key size. /N This option only works with /U. This will prevent keys being updated. This is used to find all the encrypted files on the local drives. /R Generates an EFS recovery key and certificate, then writes them to a .PFX file (containing certificate and private key) and a .CER file (containing only the certificate). An administrator may add the contents of the .CER to the EFS recovery policy to create the recovery key for users, and import the .PFX to recover individual files. If SMARTCARD is specified, then writes the recovery key and certificate to a smart card. A .CER file is generated (containing only the certificate). No .PFX file is generated. Note: By default, /R creates an 2048-bit RSA recovery key and certificate. If ECC is specified, it must be followed by a key size of 256, 384, or 521. /S Performs the specified operation on the given directory and all files and subdirectories within it. /U Tries to touch all the encrypted files on local drives. This will update user's file encryption key or recovery keys to the current ones if they are changed. This option does not work with other options except /N. /W Removes data from available unused disk space on the entire volume. If this option is chosen, all other options are ignored. The directory specified can be anywhere in a local volume. If it is a mount point or points to a directory in another volume, the data on that volume will be removed. /X Backup EFS certificate and keys into file filename. If efsfile is provided, the current user's certificate(s) used to encrypt the file will be backed up. Otherwise, the user's current EFS certificate and keys will be backed up. /Y Displays your current EFS certificate thumbnail on the local PC. /ADDUSER Adds a user to the specified encrypted file(s). If CERTHASH is provided, cipher will search for a certificate with this SHA1 hash. If CERTFILE is provided, cipher will extract the certificate from the file. If USER is provided, cipher will try to locate the user's certificate in Active Directory Domain Services. /FLUSHCACHE Clears the calling user's EFS key cache on the specified server. If servername is not provided, cipher clears the user's key cache on the local machine. /REKEY Updates the specified encrypted file(s) to use the configured EFS current key. /REMOVEUSER Removes a user from the specified file(s). CERTHASH must be the SHA1 hash of the certificate to remove. directory A directory path. filename A filename without extensions. pathname Specifies a pattern, file or directory. efsfile An encrypted file path. Used without parameters, CIPHER displays the encryption state of the current directory and any files it contains. You may use multiple directory names and wildcards. You must put spaces between multiple parameters. |
| 0x5a | 8.1 | Displays or alters the encryption of directories [files] on NTFS partitions. CIPHER [/E | /D | /C] [/S:directory] [/B] [/H] [pathname [...]] CIPHER /K [/ECC:256|384|521] CIPHER /R:filename [/SMARTCARD] [/ECC:256|384|521] CIPHER /U [/N] CIPHER /W:directory CIPHER /X[:efsfile] [filename] CIPHER /Y CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:filename | /USER:username] [/S:directory] [/B] [/H] [pathname [...]] CIPHER /FLUSHCACHE [/SERVER:servername] CIPHER /REMOVEUSER /CERTHASH:hash [/S:directory] [/B] [/H] [pathname [...]] CIPHER /REKEY [pathname [...]] /B Abort if an error is encountered. By default, CIPHER continues executing even if errors are encountered. /C Displays information on the encrypted file. /D Decrypts the specified files or directories. /E Encrypts the specified files or directories. Directories will be marked so that files added afterward will be encrypted. The encrypted file could become decrypted when it is modified if the parent directory is not encrypted. It is recommended that you encrypt the file and the parent directory. /H Displays files with the hidden or system attributes. These files are omitted by default. /K Creates a new certificate and key for use with EFS. If this option is chosen, all the other options will be ignored. Note: By default, /K creates a certificate and key that conform to current group policy. If ECC is specified, a self-signed certificate will be created with the supplied key size. /N This option only works with /U. This will prevent keys being updated. This is used to find all the encrypted files on the local drives. /R Generates an EFS recovery key and certificate, then writes them to a .PFX file (containing certificate and private key) and a .CER file (containing only the certificate). An administrator may add the contents of the .CER to the EFS recovery policy to create the recovery key for users, and import the .PFX to recover individual files. If SMARTCARD is specified, then writes the recovery key and certificate to a smart card. A .CER file is generated (containing only the certificate). No .PFX file is generated. Note: By default, /R creates an 2048-bit RSA recovery key and certificate. If ECC is specified, it must be followed by a key size of 256, 384, or 521. /S Performs the specified operation on the given directory and all files and subdirectories within it. /U Tries to touch all the encrypted files on local drives. This will update user's file encryption key or recovery keys to the current ones if they are changed. This option does not work with other options except /N. /W Removes data from available unused disk space on the entire volume. If this option is chosen, all other options are ignored. The directory specified can be anywhere in a local volume. If it is a mount point or points to a directory in another volume, the data on that volume will be removed. /X Backup EFS certificate and keys into file filename. If efsfile is provided, the current user's certificate(s) used to encrypt the file will be backed up. Otherwise, the user's current EFS certificate and keys will be backed up. /Y Displays your current EFS certificate thumbprint on the local PC. /ADDUSER Adds a user to the specified encrypted file(s). If CERTHASH is provided, cipher will search for a certificate with this SHA1 hash. If CERTFILE is provided, cipher will extract the certificate from the file. If USER is provided, cipher will try to locate the user's certificate in Active Directory Domain Services. /FLUSHCACHE Clears the calling user's EFS key cache on the specified server. If servername is not provided, cipher clears the user's key cache on the local machine. /REKEY Updates the specified encrypted file(s) to use the configured EFS current key. /REMOVEUSER Removes a user from the specified file(s). CERTHASH must be the SHA1 hash of the certificate to remove. directory A directory path. filename A filename without extensions. pathname Specifies a pattern, file or directory. efsfile An encrypted file path. Used without parameters, CIPHER displays the encryption state of the current directory and any files it contains. You may use multiple directory names and wildcards. You must put spaces between multiple parameters. |
| 91 entries | ||