Exchange/Outlook - Encryption S/MIME Certificate

[AvaFX]

Hi all,

 

I was wondering if someone could please advise me on setting up S/MIME encryption within Outlook?

 

Does every user need their own certificate in order to decrypt and/or sign an email, or would a site-wide certificate work? From what I can tell, it looks like every use needs their own but I'm not 100% sure!

 

Thank you!

[HPlum78]

Yep every users needs their own cert, and they would need to manage that as well... Its very user intensive....

[mavhc]

https://docs.microsoft.com/en-us/Exchange/policy-and-compliance/smime?redirectedfrom=MSDN&view=exchserver-2019

[AvaFX]

Yep every users needs their own cert, and they would need to manage that as well... Its very user intensive....

 

Thanks for confirming! S/MIME is now dead in the water .

[mavhc]

I mean you generate the certs for them in your local CA, so it's not the worst, but it's complicated

[chaplic]

Thanks for confirming! S/MIME is now dead in the water .

 

It's a pain to setup, but once setup works 'hands free' and credential roaming means they travel from machine-to-machine. If you have specific requirements you may consider two certs, one to sign emails and one to encrypt emails, the signing one being non exportable