Jordan swore. He needed to disable root validation—temporarily. A registry key: HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\EFS\IgnoreRootTrust . It didn’t exist by default. He created it as a DWORD, set value to 1.
A very specific request!
Error: “The certificate does not chain to a trusted root.” efsui.exe efs installdra