Exchange Server Cookbook

10.6. Setting Up S/MIME in Outlook

Problem

You want to enroll a user so she can use S/MIME with Exchange Server 2003.

Solution

Using a graphical user interface to set up S/MIME in Outlook

1. Install or gain access to a certificate authority (CA) that can issue certificates to your users. Chapter 6 of the Exchange Server 2003 Message Security Guide covers this process in detail, as does the Windows Certificate Services documentation included with both Windows 2000 and Windows Server 2003.

2. Log on to the computer on which you want to enroll in advanced security.

3. Launch Outlook using the profile that you want to request a certificate.

4. Request a certificate from your CA. For Windows Certificate Services installations:

   1. Open a browser window and go to http://<CAServerName>/certsrv.

   2. Click Request a certificate.

   3. Click User certificate.

   4. Click Submit.

   5. If Internet Explorer prompts you to confirm your request, click Yes.

   6. Depending on how the CA is configured, your request may be automatically approved, or an administrator may have to approve it. If the request is automatically approved, you'll see a link labeled Install this certificate. Click it.

   7. If Internet Explorer prompts you to confirm that you want to add this certificate to the local computer, click Yes.

5. Switch to Outlook. From the menu, select Tools→ Options. The Options dialog will appear.

6. Click the Security tab and click the Settings button. The Change Security Settings dialog will appear as shown in Figure 10-2.

7. Use the Choose buttons in the Certificates ...