So you will want to cd / first, or use the option -C /. I think you want a dash before those options (tar -xIf); also I like to throw in the p option too...
no additional command line parameters are nescessary, O.K. 'p' is always a good idea but afaik not nescessary and the dash is also redundant.
If the backup was copied to '/' it would make sense to cd to '/' before running the tar command - give it a shot :-)
[ QUOTE ] From the online help
:: Encrypt Backup File ::
For enhanced security, the firewall can send the backup file in encrypted form. When activating that function, you must enter and save a passphrase. Backups created with encryption enabled will require that you enter the passphrase when you restore them. When the entered passphrase has less than 8 characters, DES will be used for encryption, otherwise Triple DES will be used.