Using the efsui.exe /efs /installdra command is often a "better" approach than manual certificate importing because it integrates directly with the Windows shell to:
The /installdra flag stands for .
: It ensures the certificate you are installing is compatible with the Encrypting File System . efsuiexe efs installdra better