Question: where are efs certificates stored?
Answer: Basically, the way it works is that when a user requests that a file or folder be encrypted, an EFS certificate is generated for the user and its private key is stored in the user's profile. The public key is stored with the files created by that user, and only that user can decrypt the file.