GPO For Outlook Certificates Used For Encryption and Digital Signatures?

How can we configure a group policy to distribute certificates to Outlook 2010 users so they can digitally sign and encrypt messages without requiring much effort on their end?
The users will become confused and make mistakes if we ask them to follow instructions on how to download and import certificates into Outlook 2010 manually.  Can we automate this with Group Policy?

Would a certificate "autoenrollment" GPO work for these types of certificates?
Yes. Here's a good guide. The user will still need to choose to sign, or encrypt, unless you want to enforce that in some way. If you are sending signed or encrypted email outside of your AD, you will need to solve how the recipients will get your root cert,
etc.
http://davidmtechblog.blogspot.com.au/2013/06/exchange-2010-security-smime-part-1.html
http://davidmtechblog.blogspot.com.au/2013/07/exchange-2010-security-smime-part-2.html
http://davidmtechblog.blogspot.com.au/2013/07/exchange-2010-security-smime-part-3.html
Don
(Please take a moment to "Vote as Helpful" and/or "Mark as Answer", where applicable.
This helps the community, keeps the forums tidy, and recognises useful contributions. Thanks!)

Similar Messages

  • Encryption and Digital signature in SAP

    Hi,
    We have a requirement to encrypt the payment data before it is sent to a Bank using SAP XI.We are planning to have a ABAP proxy which will do the encryption and hopefully attach a digital signature.We are working in SAPR/3 Enterprise edition.Does SAP supports doing  Encryption and digital signature in  ABAP.
    Thanks,
    Leo

    Hi Leo,
    have a look here:
    https://www.sdn.sap.com/irj/servlet/prt/portal/prtroot/com.sap.km.cm.docs/library/icc/secure store and forwarddigital signatures user guide.pdf
    regards Andreas

  • Outlook 2010 "forgets" Encryption and Digital Signature preferences

    We have several users in our enterprise environment who's Encryption and Signature preferences are not being retained in Outlook. They, seemingly randomly, lose the selected Sign and Encrypt all mail options throughout the day. We are using smart card certificates,
    Outlook 2010 and Exchange 2010...
    Has anyone seen this or do you have suggestions on what to look at?

    Hi,
    How did you use the smart card in your environment? Did you use a reader that is attached to your computer or it is inserted to the USB interface of your computer?
    Does those users who have the problem use the smart card in a different behavior comparing to those don’t have the problem?
    We should keep the smart card inserted when you want to digitally sign or encrypt your messages. When the smart card is removed, the certificate is no longer available.
    If I’ve misunderstood something, please feel free to let me know.
    Regards,
    Steve Fan
    Forum Support
    Come back and mark the replies as answers if they help and unmark them if they provide no help.
    If you have any feedback on our support, please click
    here

  • Files encrypted and digital signed with cFolders

    Dear all,
    Currently I'm involved on a PPS project with cFolders. This project has legal requirements that consist in implementing encryption and digital signature in files which will be uploaded to cFolders. I've been searching on SAP Help, SDN and Service Marketplace about APIs to work with cFolders with encryption and digital signatures, but I didn't find related documents. It seems there is no documentation regarding such scenarios...
    Anyone has experience in cFolders with files encrypted and digital signed?
    Thanks in advance & regards,
    Ricardo.

    Hi Federico
    If I understood your solution you are signing your documents in a Webservice provided from a CA. For that youu2019ve created an RFC dest type G over ssl (https) and used the class CL_HTTP_CLIENT. So your requirement is only to sign documents, right?
    Well my scenario seems a little bit different as Iu2019ve to encrypt the file and also sign it. The signature is done on useru2019s laptop trough a smartcard (hardware device connected via USB that reads the chip the certificate assigned to our identity card) and cannot be signed from other entity than the user itself.
    Did you explore the PGP alternative? cFolders supports this kind of files (*.pgp). The PGP (Pretty Good Privacy) is a popular program used to encrypt and decrypt files, e-mails, etc.
    Today I installed a trial version of a PGP tool. I tested the encryption/signature with files on my desktop and it works fine. I tested a Public Key scenario where the owner publishes his PK in cFolders and the requester gets this PK in cFolders as well. The requester now can encrypt documents and upload them to cFolders with the public key provided by the owner; the owner itself has the private key to open the encrypted file (extension .pgp) after upload. But over the encrypted file the requester must sign it with his private key (another certificate) provided by a CA and here starts the second challenge...
    In cFolders after the file upload the system should gets the requester digital signature and sends it to CA for validation, only after that we know if the requester is a trusted partner or not. To do this we are thinking to use a Webservice provided by the CA, however I don't know how to extract/get the signature in the file encrypted/signed from PGP and uploaded to cFolders.
    Do you have any idea?
    Thanks & regards,
    Ricardo.

  • Renewing public key certificate used for Seeburger AS2

    My general question is when a public key certificate, used for Seeburger AS2 payload decryption and digital signatures, needs to be renewed, how carefully do the certificate renewal steps need to be coordinated for a seamless transition?  More specifically...
    1. Once we import the CSR response from the CA, will the public key currently used by our partner become invalid, or will it continue to work until its expiration date? 
    2. Will our partner be able to validate our signature after the new CSR has been imported, but prior to them applying the new public key certificate in their system? 
    3. Or can we renew the certificate, import the CSR request, provide our partner with the renewed certificate, and let them apply the certificate at their own volition, provided they do it prior to the original certificate expiration?

    Hi Kurt
    In my experience, the renewal/replacement of AS2 certificates for encryption/decryption & signing/authentication requires coordinated effort on both sides.
    This is because AS2 uses asymmetrical encryption, so both parties need to use the same pair of certificates at the same time, i.e. you encrypt on your private key, and partner decrypt on the public key matching your private key. If the keys used do not belong to the same pair, then decryption will not work.
    I'm not sure what AS2 software your partner uses and if it has the feature of automatic rollover of certificate, but PI/Seeburger does not. The approach in PI/Seeburger can either be one of the following:-
    i) import new cert replacing original cert of the same name
    ii) import new cert into new name, manually update sender/receiver agreements
    Due to the manual nature of the tasks, normally it requires coordinated effort during a cutover window.
    Rgds
    Eng Swee

  • Can Numbs app for iPad be used for iPhone and iMac?

    Can Numbs app for iPad be used for iPhone and iMac?

    I assume that you mean Numbers, in which case the iPad version can be used on the iPhone (if you've got the current version of Numbers then you will need iOS 5 on your iPhone). It can't be used on your iMac as that is a different operating system, you will need the Mac OS X version for that - but you can use spreadsheets created in Numbers on the iPad in Numbers on the Mac and vice versa.

  • Outlook Pro 2013 Crashes On Send After Checking ENCRYPTION and DIGITAL SIGNING

    I bought and imported a Digital ID today. After doing so I went in and checked the boxes in TRUST CENTER to allow for ENCRYPTION and DIGITAL SIGNING. After doing so, every time I hit SEND on my emails, it sits, spins, sits, and never recovers. The application
    hang error is below. Please note that the SOFTWARE PROTECTION SERVICE seems to stop working in EVENT VIEWER as well before each app hang.
    If I go in, UNCHECK those security settings, and reopen OUTLOOK, all is well.
    OUTLOOK EVENT LOG
    Log Name:      Application
    Source:        Application Hang
    Date:          6/10/2013 1:05:22 PM
    Event ID:      1002
    Task Category: (101)
    Level:         Error
    Keywords:      Classic
    User:          N/A
    Computer:      MS-Home
    Description:
    The program OUTLOOK.EXE version 15.0.4505.1002 stopped interacting with Windows and was closed. To see if more information about the problem is available, check the problem history in the Action Center control panel.
     Process ID: 2138
     Start Time: 01ce65fb8d98576a
     Termination Time: 16
     Application Path: C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE
     Report Id: e9ecd5fa-d1ef-11e2-be85-6045bdde9c2f
     Faulting package full name:
     Faulting package-relative application ID:
    Event Xml:
      <System>
        <Provider Name="Application Hang" />
        <EventID Qualifiers="0">1002</EventID>
        <Level>2</Level>
        <Task>101</Task>
        <Keywords>0x80000000000000</Keywords>
        <TimeCreated SystemTime="2013-06-10T17:05:22.000000000Z" />
        <EventRecordID>8066</EventRecordID>
        <Channel>Application</Channel>
        <Computer>MS-Home</Computer>
        <Security />
      </System>
      <EventData>
        <Data>OUTLOOK.EXE</Data>
        <Data>15.0.4505.1002</Data>
        <Data>2138</Data>
        <Data>01ce65fb8d98576a</Data>
        <Data>16</Data>
        <Data>C:\Program Files\Microsoft Office\Office15\OUTLOOK.EXE</Data>
        <Data>e9ecd5fa-d1ef-11e2-be85-6045bdde9c2f</Data>
        <Data>
        </Data>
        <Data>
        </Data>
        <Binary>430072006F00730073002D00700072006F00630065007300730000000000</Binary>
      </EventData>
    </Event>

    Run Outlook with safe mode to check the result. ("Outlook.exe /safe")
    Create a new Outlook profile to test that.
    How to use ADPlus.vbs to troubleshoot "hangs" and "crashes"
    http://support.microsoft.com/kb/286350
    Tony Chen
    TechNet Community Support

  • Hi, I planned to purchase a laptop for me to use for graphic design ..could let me know which laptop would be the best for me to use ? Thank you!

    Hi, I planned to purchase a laptop for me to use for graphic design ..could let me know which laptop would be the best for me to use ? Thank you! Pro or Air

    Someday - and no one knows when that day will come - maybe all applications will be able to take advantage of the Retina display. But for the present, not many do: including all Adobe applications. There was a demo of Photoshop at the Apple World Wide Developers Conference of Photoshop running at native Retina resolutions but no one at Adobe in marketing is saying when, if or how the upgrade may be coming. It could be a week, it could be a year, it could be 2-3 years. No one knows. And only Apple app's (for the main part) are really utilizing the native Retina display.
    I've seen some demos of some applications (Apple's) that take advantage of the Retina display and they're awesome. But in actually working in the here-and-now I've heard quite a few gripes, particularly on the Photoshop forum, of menus looking pixelated and/or 'blurry' so I'm not quite ready to jump into the Retina display boat just now. Don't get me wrong - others have ad are very, very pleased with their selection. But until Retina displays are available on larger monitors, the maximum work area that you're going to be able to use is 15" - and that's simply not enough room for full-blown graphic design. Then there's the cost factor - for the $4,000+ you spend for a completely full-blown Retina kit, you can get a standard MacBook Pro, 16 GB of RAM, a fast SSD and even the Apple Thunderbolt Display for the same amount.
    The standard MacBook Pro isn't better than the Retina display: it's just different. And I think (and this is only my opinion - other graphic designers should feel free to jump in here) that it's the best computer that you can get for your specific purposes. And, towards that goal, I have to recommend a very good external monitor (there's nothing more annoying than having to use InDesign in a single-page mode rather than side-by-side because your monitor isn't big enough).
    Remember that this is only my opinion and that others might jump in with their own. But I was in the electronic pre-press business for more years than I care to admit and we always - always - worked with at least 19" monitors (and that's back when dinosaurs actually ruled the world).
    I hope that others will jump in with their comments. I'm going to follow this thread and see!
    Good luck,
    Clinton

  • Today. 06/05/2012.  I went to iStudio at Siam paragon  bangkok Thailand About  14.54 (thailand) , I told the sell officer , " I want to buy Av cable for I pad2  use for every type of  TV "  .First  I decide to buy Av cable  but he suggest me to buy  Av co

    Today. 06/05/2012.  I went to iStudio at Siam paragon  bangkok Thailand About  14.54 (thailand) , I told the sell officer , " I want to buy Av cable for I pad2  use for every type of  TV "  .First  I decide to buy Av cable  but he suggest me to buy  Av component  and told me it's  better than  the av  cable  and av component is suitable for  IPad 2 &amp;TV.  
    Because of I believe  and trust I studio ., then i paid 1, 890 Bht for it.
     Now. I open your product Av component.  And read manual instruction  and  follow  step by step  , Oh my God , I found that the adapter  is 5v. .1 A.   It cannot use with IPad 2 .
    What can I do?  Because. I read the receipt (bill) " no exchange or refund" 
           Can I Still  Trust  " I studio " at Siam Paragon  or another branch in thailand? 

    Because of the  assistance  by Lisa ,iTunes Store Customer
    I was going to visit the retail store where I made this purchase. Siam Paragon Bangkok Thailand.
    I can change the new product that compatible for my IPad 2
    Thank You .

  • Why does the iCloud Control Panel say "Install Outlook to use Mail, Contacts, and Calendars?"

    I've just successfully installed the iCloud Control Panel on my PC (runs with Vista). Why does the iCloud Control Panel say "Install Outlook to use Mail, Contacts, and Calendars?" The Bookmarks (with Safari) and Photo Stream options are active, but the Mail (with Outlook), Contacts (with Outlook),and Calendars and Tasks (with Outlook) are not. I'm using Office Outlook 2007. I used to be able to synch my iPhone with my PC's Outlook through iTunes without any problems. Any help would be appreciated.

    I meant to say when in the control panel!

  • What is the difference between Outlook features using exchage server and using 3rd party mail server ?

    Hi~ I'd like to know what the difference is between Outlook features using exchage server and using 3rd party mail server.
    If I use 3rd party mail server with Outlook, Outlook features are the same as Exchange Server ?
    I want to use all Outlook features..

    The basic features (and many advanced features) are identical in all accounts. With pop3, your mail, calendar, contacts, tasks, notes are stored in a pst and are only on the computer. IMAP accounts only sync email back to the server, not calendar,
    contacts, and tasks. Outlook.com EAS accounts (aka Hotmail) syncs calendar and contacts back to the server. Exchange mailboxes stores everything on the server - mail, calendar, contacts, custom views, rules - and if you open the mailbox in outlook on
    any other computer, the mailbox is identical. Because everything is on the server, you'll have much better syncing with smartphones and tablets with Exchange mailboxes.
    Calendar sharing, open other users folder, and retention policies are Exchange-only. Mail Tips and apps (linked under the reading pane header in Outlook 2013) are Exchange-only.
    Diane Poremsky [MVP - Outlook]
    Outlook & Exchange Solutions Center
    Outlook Tips
    Subscribe to Exchange Messaging Outlook weekly newsletter

  • Mail missing Encrypt and Digitally Sign buttons

    I don't have the option of encrypting or digitally signing any e-mails I compose in Mail. I have a valid security certificate in my Keychain Access, as well as valid certificates for my contacts. I can't find an option to show/add the encrypt and digitally sign buttons either.
    When composing a new message, the drop down box next to the subject line only gives the following options:
    CC field
    BCC field
    Reply-to address field
    Priority field
    Customize...
    I know where these two buttons should be and what they look like, but they're just not there. Any ideas or suggestions?

    I finally have a solution to this problem. I had been trying to use a .cer security certificate issued by Comodo, it had worked just fine on Windows but my Mac didn't seem to like it. I also tried creating my own certificate through OSX, but even after I created it I still couldn't see the buttons.
    I had someone direct me to this webpage which ultimately helped me fix the problem:
    http://allforces.com/2007/03/02/email-security/
    I ended up using Thawte to issue me another security certificate (this time it was an x.509 file), the security certificate automatically opened in Keychain Access and downloaded to the Certificates and My Certificates folder. Once I shutdown Mail and restarted it I had the buttons for both encryption and digitally signed. Of course the encryption button is still greyed out because it is a new certificate and I need to make sure my Address Book contacts have a copy of it before I can encrypt.

  • How do I use the counter and digital signals of the 6071E while it is connected to SCXI modules?

    I am contemplating using a PCI 6071E with SCXI. We have the boards (6071E), we would need the cable (I suppose SH1006868) and the SCXI system. I would like to know how would you access the counter and digital line capabilities of the board. I will be using a SCXI-1314 with a SCXI-1520 Module for strain measurements but will need to use the counter and digital lines of the board as well. Can this be done? If so, how and/or what else do I need?

    I think this KnowledgeBase will answer the question for you.
    Accessing DAQ Board Counter Pins with an SCXI System
    Otis
    Training and Certification
    Product Support Engineer
    National Instruments

  • Outlook 2013 won't auto-save emails if encryption or digital signature is enabled.

    In Outlook 2013, I recently noticed that although I have Autosave enabled, I never get drafts autosaved. The option is located in File > Options > Mail > "Save Messages" section > "[ ] Automatically save items that have not been
    sent after this many minutes [3]."
    Experimenting with why I have lost 2 long emails after system crashes, I discovered that Outlook 2013 will
    only automatically save emails if the Encrypt and Sign buttons are turned off. By default, I enable both in our corporate environment. So I never benefit from auto-save. I've changed the Autosave location and tested various other settings to
    no avail. But Autosave always works fine if there's no digital signature or encryption enabled.
    Has anyone else encountered this? Is this a bug?

    Hi,
    I just tested on my Outlook 2013 and experienced exactly the same.
    This is pretty much by design, actually you may find you are even unable to manually save these emails as drafts if encryption or digital signature is enabled.  I can also confirm some email service providers don't allow saving Encrypted Emails
    as drafts either, so this is not a bug but how it works in Outlook.
    Regards,
    Melon Chen
    TechNet Community Support

  • Use of 3rd party Digital Signatures in SAP enviornments

    Hi all,
    I wanted to inquire about 3rd party digital certificates usability within the SAP environment. for e.g can Verisign digital certificates be used within the SAP environment. Any directions/links on related reading material would be highly appreciated. How certs can help in compliance etc.
    ARK.

    Hi Lanij,
      Check URL http://help.sap.com/saphelp_nw2004s/helpdata/en/37/504b8cbc2848a494facfdc09a359b1/frameset.htm
      This gives details on Adobe functions and digital signatures
    Also SDN has extensive documentation on Adobe Interactive forms and digital signatures available at
    https://www.sdn.sap.com/irj/sdn/adobe
    Regards

Maybe you are looking for