As more and more organizations move to Outlook 2010 they will have many discussions surrounding how to secure their email. They are probably already using certificates to secure their email communications with digital signatures. Setting up secure email can be a complex task and involve multiple decisions. Sometimes, it is almost better to remind users to simply put only content into their emails that would not cause them to lose any sleep at night should those contents be posted on the internet somewhere. Continue reading List of Cryptography Policies for Outlook

Certificates and encryption utilizing them play a critical role in modern systems and network security. Even if none of your email users has a client certificate in their email application, and they’re not using PKI for a VPN connection, they’re using certificates in more than a couple of places on a Windows network with Active Directory and Microsoft Exchange. You say, “Clemmer, I know all this, so what?”

Certificate Import Wizard

As I discovered recently, the need to renew certificates only once every year, two years, or more, can make for some hair-pulling troubleshooting with turnover with IT departments often shorter than that time period and likely sparse internal documentation for the many “set it and forget it” configuration components of the CA infrastructure.

Continue reading Microsoft Certification Authority, Certificates, Your AD forest, and More