I have an application that will be sending encrypted emails to my
client who is using the Outlook email client. My question, being new
at this, is how do they install the private key needed for decrypting
the emails?
If you have the cert file on disk, right-clcik it and choose Install. Most
or all the prompts should use the default, but be sure you mark the private
key as exportable in case you need to export from within your browser later.
Then, in Outlook, click Tools>Options>Security>Settings. In the lower part
are two Choose buttons. Click each in turn, select your cert, and click OK.
Verify that the Security Settings Name drop-down atr the top shows "My
S/MIME Settings (your mail address)", if your certificate uses S/MIME. Make
sure the bottom "Send these certificates with signed messages" box is
checked. Click OK, then OK. The cert should be available for decrypting
now.
To exchange encrypted messages, first exchange a signed message with your
intended recipient. When you receive his or her signed message, open it,
right click the sender address, and choose Add to Contacts. This will store
the sender's public key in your crypto store and make it available for
encrypting when sending. The other person should do the same with your
message. After that, you'll be able to exchange encrypted messages.