I'm trying to combine EFS encryption with VeryCrypt, system encryption.
With EFS I can choose specific files/folders instead doing a whole drive encryption, so that is the reason I use it.
I haven't deleted my certificate because I don't want to enter the password each time I log in for my encrypted folders/files. Besides I wish to encrypt files in
%appdata% so they need to be decrypted by Windows once I log in.
I use VeraCrypt system encryption, so there is a password to be able to proceed with the boot. This is a security measure I combine, as Windows login password is crackable.
My question: Since my certificate is on the drive and in
%APPDATA%\Microsoft\SystemCertificates (not encrypted so Windows can decrypt password less at login. And since I haven't deleted my certificate, it's stored there. My cert is backed up on a USB.), if my drive gets out of the hand, can someone extract
%APPDATA%\Microsoft\SystemCertificates to use it on a different system mount my c: Windows drive, and be able to view all my encrypted files I have from EFS? Or will it ask for the certificate password during this procedure?