cipher (顯示或更改NTFS分區(qū)上的目錄)

舞夕之發(fā)表于 2020-06-29 14:58

瀏覽次數(shù)：

命令行 MSDOS命令 cipher

在手機上閱讀

釋放雙眼，帶上耳機，聽聽看~！

00:00

Cipher命令顯示或更改NTFS分區(qū)上的目錄[files]的加密。

查看英文版

1 cipher 運行系統(tǒng)環(huán)境

2 cipher 語法

3 cipher 示例

cipher 運行系統(tǒng)環(huán)境

Windows xp

Windows vista

Windows 2000

Windows 7

Windows 8

Windows 10

cipher 語法

Windows Vista和更高版本的語法

CIPHER [/E | /D | /C] [/S:directory] [/B] [/H] [pathname [...]]
CIPHER /K [/ECC:256|384|521]
CIPHER /R:file name [/SMARTCARD] [/ECC:256|384|521]
CIPHER /U [/N]
CIPHER /W:directory
CIPHER /X[:efsfile] [file name]
CIPHER /Y
CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:file name | /USER:username] [/S:directory] [/B] [/H] [pathname [...]]
CIPHER /FLUSHCACHE [/SERVER:servername]
CIPHER /REMOVEUSER /CERTHASH:hash [/S:directory] [/B] [/H] [pathname [...]]
CIPHER /REKEY [pathname [...]]


/B	如果遇到錯誤，則中止。默認(rèn)情況下，即使遇到錯誤，CIPHER也會繼續(xù)執(zhí)行。
/C	顯示有關(guān)加密文件的信息。
/D	解密指定的目錄。目錄將被標(biāo)記，以便以后添加的文件不被加密。
/E	/ E加密指定的文件或目錄。目錄將被標(biāo)記，以便以后添加的文件被加密。如果父目錄未加密，則修改后的加密文件可能會被解密。建議您對文件和父目錄進行加密。
/H	顯示具有隱藏或系統(tǒng)屬性的文件。這些文件默認(rèn)情況下被忽略。
/K	為運行CIPHER的用戶創(chuàng)建新的文件加密密鑰。如果選擇此選項，則忽略所有其他選項。注意：默認(rèn)情況下，/ K創(chuàng)建符合當(dāng)前組策略的證書和密鑰。如果指定了ECC，將使用提供的密鑰大小創(chuàng)建自簽名證書。
/N	此選項僅與/ U一起使用，并防止更新密鑰。使用此選項可在本地驅(qū)動器上找到所有加密文件。
/R	/ R生成EFS恢復(fù)密鑰和證書，然后將它們寫入.PFX文件（包含證書和私鑰）和.CER文件（僅包含證書）。管理員可以將.CER的內(nèi)容添加到EFS恢復(fù)策略中，以為用戶創(chuàng)建恢復(fù)密鑰，然后導(dǎo)入.PFX以恢復(fù)單個文件。如果指定了SMARTCARD，則將恢復(fù)密鑰和證書寫入智能卡。生成一個.CER文件（僅包含證書）。沒有生成.PFX文件。注意：默認(rèn)情況下，/ R創(chuàng)建一個2048位RSA恢復(fù)密鑰和證書。如果指定了ECC，則必須緊隨其后的是256、384或521的密鑰大小。
/S	在給定目錄和所有子目錄中的目錄上執(zhí)行指定的操作。
/U	嘗試觸摸本地驅(qū)動器上的所有加密文件。/ U開關(guān)將用戶的文件加密密鑰或恢復(fù)密鑰更新為當(dāng)前的密鑰。該選項不適用于/ N以外的其他選項。
/W	從整個卷上的可用未使用磁盤空間中刪除數(shù)據(jù)。如果選擇此選項，則將忽略所有其他選項。指定的目錄可以在本地卷中的任何位置。如果它是安裝點或指向另一個卷中的目錄，則該卷上的數(shù)據(jù)將被刪除。
/X	備份EFS證書并鍵入文件名。如果提供了efsfile，則將備份用于加密文件的當(dāng)前用戶證書。否則，將備份用戶當(dāng)前的EFS證書和密鑰。
/Y	在本地PC上顯示當(dāng)前的EFS證書指紋。
/ADDUSER	將用戶添加到指定的加密文件。如果提供了CERTHASH，則密碼將使用此SHA1哈希搜索證書。如果提供了CERTFILE，cipher將從文件中提取證書。如果提供了USER，密碼將嘗試在Active Directory域服務(wù)中找到用戶的證書。
/ FLUSHCACHE	清除指定服務(wù)器上主叫用戶的EFS密鑰緩存。如果未提供服務(wù)器名，密碼將清除本地計算機上的用戶密鑰緩存。
/REKEY	更新指定的加密文件以使用配置的EFS當(dāng)前密鑰。
/REMOVEUSER	從指定的文件中刪除用戶。CERTHASH必須是要刪除的證書的SHA1哈希。
directory	目錄路徑。
file name	沒有擴展名的文件名。
pathname	指定模式，文件或目錄。
efsfile	加密的文件路徑。

不帶參數(shù)使用時，CIPHER顯示當(dāng)前目錄及其包含的任何文件的加密狀態(tài)。您可以使用多個目錄名稱和通配符。您必須在多個參數(shù)之間放置空格。

Windows XP和更早的語法

顯示或更改NTFS分區(qū)上目錄[files]的加密。

CIPHER [/E | /D] [/S:dir] [/A] [/I] [/F] [/Q] [/H] [/K] [pathname [...]]
CIPHER /W:directory
CIPHER /X[:efsfile] [file name]


/E	加密指定的目錄。目錄將被標(biāo)記，以便以后添加的文件被加密。
/D	解密指定的目錄。目錄將被標(biāo)記，以便以后添加的文件不被加密。
/S	在給定目錄和所有子目錄中的目錄上執(zhí)行指定的操作。
/A	文件和目錄的操作。如果父目錄未加密，則修改后的加密文件可能會被解密。建議您對文件和父目錄進行加密。
/I	即使發(fā)生錯誤，也繼續(xù)執(zhí)行指定的操作。默認(rèn)情況下，CIPHER在遇到錯誤時停止。
/F	對所有指定的對象（即使是已加密的對象）強制執(zhí)行加密操作。默認(rèn)情況下會跳過已加密的對象。
/Q	僅報告最基本的信息。
/H	顯示具有隱藏或系統(tǒng)屬性的文件。這些文件默認(rèn)情況下被忽略。
/K	為運行CIPHER的用戶創(chuàng)建新的文件加密密鑰。如果選擇此選項，則忽略所有其他選項。
/W	從整個卷上的可用未使用磁盤空間中刪除數(shù)據(jù)。如果選擇此選項，則將忽略所有其他選項。指定的目錄可以在本地卷中的任何位置。如果它是安裝點或指向另一個卷中的目錄，則該卷上的數(shù)據(jù)將被刪除。
/X	備份EFS證書和密鑰到文件名中。如果提供了efsfile，則將備份用于加密文件的當(dāng)前用戶證書。否則，將備份用戶當(dāng)前的EFS證書和密鑰。
dir	目錄路徑。
pathname	指定模式，文件或目錄。
efsfile	加密的文件路徑。

Windows Vista and later syntax

CIPHER [/E | /D | /C] [/S:directory] [/B] [/H] [pathname [...]]
CIPHER /K [/ECC:256|384|521]
CIPHER /R:file name [/SMARTCARD] [/ECC:256|384|521]
CIPHER /U [/N]
CIPHER /W:directory
CIPHER /X[:efsfile] [file name]
CIPHER /Y
CIPHER /ADDUSER [/CERTHASH:hash | /CERTFILE:file name | /USER:username] [/S:directory] [/B] [/H] [pathname [...]]
CIPHER /FLUSHCACHE [/SERVER:servername]
CIPHER /REMOVEUSER /CERTHASH:hash [/S:directory] [/B] [/H] [pathname [...]]
CIPHER /REKEY [pathname [...]]

/B	Abort if an error is encountered. By default, CIPHER continues executing even if errors are encountered.
/C	Displays information on the encrypted file.
/D	Decrypts the specified directories. Directories will be marked so that files added afterward are not encrypted.
/E	/E encrypts the specified files or directories. Directories will be marked so that files added afterward will be encrypted. The encrypted file could become decrypted when it is modified if the parent directory is not encrypted. It is recommended you encrypt the file and the parent directory.
/H	Displays files with the hidden or system attributes. These files are omitted by default.
/K	Create new file encryption key for the user running CIPHER. If this option is chosen, all the other options are ignored. Note: By default, /K creates a certificate and key that conform to current group policy. If ECC is specified, a self-signed certificate will be created with the supplied key size.
/N	This option only works with /U and prevents keys being updated. Using this option finds all the encrypted files on the local drives.
/R	/R generates an EFS recovery key and certificate, then writes them to a .PFX file (containing certificate and private key) and a .CER file (containing only the certificate). An administrator may add the contents of the .CER to the EFS recovery policy to create the recovery key for users, and import the .PFX to recover individual files. If SMARTCARD is specified, then writes the recovery key and certificate to a smart card. A .CER file is generated (containing only the certificate). No .PFX file is generated. Note: By default, /R creates a 2048-bit RSA recovery key and certificate. If ECC is specified, it must be followed by a key size of 256, 384, or 521.
/S	Performs the specified operation on directories in the given directory and all subdirectories.
/U	Tries to touch all the encrypted files on local drives. The /U switch update user's file encryption key or recovery keys to the current ones if they are changed. This option does not work with other options except /N.
/W	Removes data from available unused disk space on the entire volume. If this option is chosen, all other options are ignored. The directory specified can be anywhere in a local volume. If it is a mount point or points to a directory in another volume, the data on that volume will be removed.
/X	Backup EFS certificate and keys into the file name. If efsfile is provided, the current user's certificate(s) used to encrypt the file will be backed up. Otherwise, the user's current EFS certificate and keys will be backed up.
/Y	Displays your current EFS certificate thumbprint on the local PC.
/ADDUSER	Adds a user to the specified encrypted file(s). If CERTHASH is provided, cipher searches for a certificate with this SHA1 hash. If CERTFILE is provided, cipher will extract the certificate from the file. If USER is provided, cipher will try to locate the user's certificate in Active Directory Domain Services.
/FLUSHCACHE	Clears the calling user's EFS key cache on the specified server. If a servername is not provided, cipher clears the user's key cache on the local machine.
/REKEY	Updates the specified encrypted file(s) to use the configured EFS current key.
/REMOVEUSER	Removes a user from the specified file(s). CERTHASH must be the SHA1 hash of the certificate to remove.
directory	A directory path.
file name	A file name without extensions.
pathname	Specifies a pattern, file or directory.
efsfile	An encrypted file path.

Used without parameters, CIPHER displays the encryption state of the current directory and any files it contains. You may use multiple directory names and wildcards. You must put spaces between multiple parameters.

Windows XP and earlier syntax

Displays or alters the encryption of directories [files] on NTFS partitions.

CIPHER [/E | /D] [/S:dir] [/A] [/I] [/F] [/Q] [/H] [/K] [pathname [...]]
CIPHER /W:directory
CIPHER /X[:efsfile] [file name]

/E	Encrypts the specified directories. Directories will be marked so that files added afterward will be encrypted.
/D	Decrypts the specified directories. Directories will be marked so that files added afterward are not encrypted.
/S	Performs the specified operation on directories in the given directory and all subdirectories.
/A	Operation for files as well as directories. The encrypted file could become decrypted when it is modified if the parent directory is not encrypted. It is recommended you encrypt the file and the parent directory.
/I	Continues performing the specified operation even after errors have occurred. By default, CIPHER stops when an error is encountered.
/F	Forces the encryption operation on all specified objects, even those that are already encrypted. Already-encrypted objects are skipped by default.
/Q	Reports only the most essential information.
/H	Displays files with the hidden or system attributes. These files are omitted by default.
/K	Create new file encryption key for the user running CIPHER. If this option is chosen, all the other options are ignored.
/W	Removes data from available unused disk space on the entire volume. If this option is chosen, all other options are ignored. The directory specified can be anywhere in a local volume. If it is a mount point or points to a directory in another volume, the data on that volume will be removed.
/X	Backup EFS certificate and keys into file name. If efsfile is provided, the current user's certificate(s) used to encrypt the file will be backed up. Otherwise, the user's current EFS certificate and keys will be backed up.
dir	A directory path.
pathname	Specifies a pattern, file or directory.
efsfile	An encrypted file path.

查看英文版

cipher 示例

顯示當(dāng)前目錄中每個文件的狀態(tài)。

cipher

例如，運行上面的命令可能會顯示類似以下示例的內(nèi)容。

C:\DOCUME~1\ADMINI~1\Desktop>cipher

Listing C:\DOCUME~1\ADMINI~1\Desktop\

New files added to this directory are not encrypted.

U 308374_harddisk_3.jpg
U cipher.txt
U FileZilla.lnk
U hope.txt
U inc
U l-gloss.pdf
U logos.gif
U Main_Page.htm
U Main_Page_files
U move

接下來，如果我們要在目錄上啟用加密，請鍵入類似于以下命令的命令。在下面的示例中，HOPE目錄將被加密，一旦啟用，任何添加到該目錄中的文件也將被加密。

cipher /e hope

加密中的目錄 C:\DOCUME~1\ADMINI~1\Desktop\

test [OK]

Display the status of each of the files in the current directory.

cipher

For example, running the command above may display something similar to the example below.

C:\DOCUME~1\ADMINI~1\Desktop>cipher

Listing C:\DOCUME~1\ADMINI~1\Desktop\

New files added to this directory are not encrypted.

U 308374_harddisk_3.jpg
U cipher.txt
U FileZilla.lnk
U hope.txt
U inc
U l-gloss.pdf
U logos.gif
U Main_Page.htm
U Main_Page_files
U move

Next, if we wanted to enable encryption on a directory, type a command similar to the following command. In the following example, the hope directory is being encrypted and any file added into that directory once enabled is also encrypted.

cipher /e hope

Encrypting directories in C:\DOCUME~1\ADMINI~1\Desktop\

test [OK]

1 directory within 1 directory were encrypted.

查看英文版

其他命令行

如此好文，分享給朋友