The EFS (Encrypted File System) subsystem runs one RPC service, efsrpc, used to communicate with the service that implement cryptographic operations on the local system.
Table 4.83. efsrpc operations
| Interface | Operation number | Operation name |
|---|---|---|
| c681d488-d850-11d0-8c52-00c04fd90f7e v1.0: efsrpc | ||
| 0x00 | EfsRpcOpenFileRaw | |
| 0x01 | EfsRpcReadFileRaw | |
| 0x02 | EfsRpcWriteFileRaw | |
| 0x03 | EfsRpcCloseRaw | |
| 0x04 | EfsRpcEncryptFileSrv | |
| 0x05 | EfsRpcDecryptFileSrv | |
| 0x06 | EfsRpcQueryUserOnFile | |
| 0x07 | EfsRpcQueryRecoveryAgents | |
| 0x08 | EfsRpcRemoveUsersFromFile | |
| 0x09 | EfsRpcAddUsersToFile | |
| 0x0a | EfsRpcSetFileEncryptionKey | |
| 0x0b | EfsRpcNotSupported | |
| > Windows XP and Windows Server 2003 | 0x0c | EfsRpcFileKeyInfo |
| 0x0d | EfsRpcDuplicateEncryptionInfoFile | |
| > Windows Vista | 0x0e | EfsUsePinForEncryptedFiles |
| 0x0f | EfsRpcEncryptFileCse | |
| 0x10 | EfsRpcDecryptFileSrvEx | |
| 0x11 | EfsRpcRemoveUsersFromFileEx | |
| 0x12 | EfsRpcAddUsersToFileEx | |
| 0x13 | EfsRpcDuplicateEncryptionInfoFileEx | |
| 0x14 | EfsRpcFileKeyInfoEx | |
| 0x15 | EfsRpcGenerateEfsStream | |
| 0x16 | EfsRpcGetEncryptedFileMetadata | |
| 0x17 | EfsRpcSetEncryptedFileMetadata | |
| 0x18 | EfsRpcFlushEfsCache |