thank you for your hint, i did not use the -c option yet.
yes, i' m also able to encrypt and un-encrypt files on the command-line, i've used it in different contexts....
my problem is to un-encrypt the mydata.tgz.bfe that was encrypted by the protected mode, in the automatic backup.
i read the /usr/bin/filetool.sh and i see that it should work, but perhaps there is a difference to use the same command in the script or as the user tc:staff on the command line!?
thank you for every new hint.