"Encrypt Message" icon not displayed

[Paolo]

Hi,

I'm trying to set up the ability to exchange encrypted messages with another
person using Outlook 2007.

I installed a certificate and created a signed message to send my private
key to my counterpart.

He saved my contact on Outlook Contacts from the signed message I sent him,
so he has my public key registered (these steps are described in the help on
line).

What is happening is that when he creates a new message to send me, the
"Encrypt Message" icon in the option section of the ribbon is not displayed.

Why the icon is not displayed? What should my counterpart do on his computer
in order to be able to encrypt messages sent to me?

 

[VanguardLH]

Hi,

I'm trying to set up the ability to exchange encrypted messages with another
person using Outlook 2007.

I installed a certificate and created a signed message to send my private
key to my counterpart.

You never send the private key. You only send the public key that they
can use to encrypt their message that they send to you. You then use
your private key to decrypt that message.

He saved my contact on Outlook Contacts from the signed message I sent him,
so he has my public key registered (these steps are described in the help on
line).

What is happening is that when he creates a new message to send me, the
"Encrypt Message" icon in the option section of the ribbon is not displayed.

Is this sender using the contact he saved of you, or is he using the
nickname cache copy of your e-mail address? Make sure he selects the
contact record he created for you (because that is where the cert is
recorded).

Also, in that contact record, have the sender check if any certificates
were stored in that contact record.

Why the icon is not displayed? What should my counterpart do on his computer
in order to be able to encrypt messages sent to me?

According to OL2007's own help:

1. In the message, on the "Message" tab, in the "Options" group on the
ribbon, click the "Encrypt Message Contents and Attachments" button.

Note: If you don't see this button, click the Options Dialog Box
Launcher in the lower right corner of the group to open the Message
Options dialog box. Click the Security Settings button and in the
Security Properties dialog box, select Encrypt message contents and
attachments. Click OK and then close the Message Options dialog box.

2. Compose your message and send it.

So I'm thinking the button isn't displayed because the contact record
doesn't show a cert was saved or it is invalid. They can't encrypt
because they don't have a usable public cert for you.

 

[Paolo]

--
Plo

You never send the private key. You only send the public key that they
can use to encrypt their message that they send to you. You then use
your private key to decrypt that message.

Correct. I made a mistake in typing.

Is this sender using the contact he saved of you, or is he using the
nickname cache copy of your e-mail address? Make sure he selects the
contact record he created for you (because that is where the cert is
recorded).

Also, in that contact record, have the sender check if any certificates
were stored in that contact record.


According to OL2007's own help:

1. In the message, on the "Message" tab, in the "Options" group on the
ribbon, click the "Encrypt Message Contents and Attachments" button.

Note: If you don't see this button, click the Options Dialog Box
Launcher in the lower right corner of the group to open the Message
Options dialog box. Click the Security Settings button and in the
Security Properties dialog box, select Encrypt message contents and
attachments. Click OK and then close the Message Options dialog box.

2. Compose your message and send it.

So I'm thinking the button isn't displayed because the contact record
doesn't show a cert was saved or it is invalid. They can't encrypt
because they don't have a usable public cert for you.
.

I already read that part. Unfortunately that's not all. I found another
part of Microsoft Help where is clearly stated that both sender and recipient
must have a digital ID in order to exchange encrypted messages.

Microsoft should work better to this part of help on line because is
ambiguous and let us understand that only the recipient should have a digital
ID.

 

[Brian Tillman [MVP - Outlook]]

I already read that part. Unfortunately that's not all. I found another
part of Microsoft Help where is clearly stated that both sender and
recipient
must have a digital ID in order to exchange encrypted messages.

To exchange messages, sure. But you should be able to send an encrypted
message even if you yourself don't have a certificate. Unfortunately, Outlook
doesn't seem to allow it. It requires the sender to have one as well even if
it's not used for sending.