Outlook certificates

[marcin.pilarczyk]

Hello,

I have an AD network with MS Certificate Services integrated.
Certificates issued through Windows PKI work well with AD logon on all
client computers. There is proper e-mail address in each certificate
subject. I can setup mail client and sign my mail with my certificate.
However when I get signed mail I can't add sender's certificate to my
Outlook contact list. I can add sender to Contacts but the certificate
won't appear on the Certificates tab.
It happens on XP with Outlook 2003 and Vista 64 with Outlook 2007.

Is there something wrong with my PKI?

Thanks in advance

mp

 

[Brian Tillman [MVP - Outlook]]

I have an AD network with MS Certificate Services integrated.
Certificates issued through Windows PKI work well with AD logon on all
client computers. There is proper e-mail address in each certificate
subject. I can setup mail client and sign my mail with my certificate.
However when I get signed mail I can't add sender's certificate to my
Outlook contact list. I can add sender to Contacts but the certificate
won't appear on the Certificates tab.
It happens on XP with Outlook 2003 and Vista 64 with Outlook 2007.

Can you add the certificate explicitly to the crypto store by saving the cert
to a file and then installing it?

 

[marcin.pilarczyk]

Can you add the certificate explicitly to the crypto store by saving the cert
to a file and then installing it?

Yes. I can import certificate to the default OS store, I can also
import it "by hand" to the Outlook contact.
But, as far as I know it should be added automatically when adding
sender of signed message to Contacts. And it's not working for me.

Regards

mp

 

[Brian Tillman [MVP - Outlook]]

But, as far as I know it should be added automatically when adding
sender of signed message to Contacts. And it's not working for me.

Yes, it should, and I've been a PKI administrator where I work for a long
time. When it works properly, it works, but when it doesn't work properly,
Outlook's interaction with the crypto subsystem is inscrutable