| Previous | Next |
| ERROR_FILE_NOT_ENCRYPTED | ERROR_FILE_READ_ONLY |
ERROR_NOT_EXPORT_FORMAT
Ordinary file bytes are not a valid raw EFS import stream
The raw EFS APIs are designed for backup programs that must preserve encrypted files without possessing decryption keys. ReadEncryptedFileRaw supplies an opaque export stream containing encrypted file data and EFS information; WriteEncryptedFileRaw expects that stream during a context opened for import.
A plaintext copy, a normal backup stream, a partially reconstructed $EFS attribute, or reordered callback chunks are not interchangeable with the raw export format. Diagnose this as a backup-pipeline integrity problem before investigating user certificates.
What to inspect
- Whether the source was opened with
OpenEncryptedFileRawfor export. - Exact callback byte order, lengths, truncation, compression, and storage transformations.
- Whether the restore context used
CREATE_FOR_IMPORTand invokedWriteEncryptedFileRawonce as documented. - Preservation of the EFS metadata alongside encrypted content.
References
- Microsoft: Encrypted-file backup and restore
- Microsoft: OpenEncryptedFileRawW
- Microsoft: ReadEncryptedFileRaw
- Microsoft: WriteEncryptedFileRaw
- NTFS-3G: preserving EFS data with efs_raw
Looking for a different code? Search another status or error code.