Microsoft Exchange Server 2016 PowerShell Cookbook - Fourth Edition

How to do it...

1. To verify the current configuration, we can easily run the following cmdlet:

    Get-SMIMEConfig  

2. In this example, I've configured my environment to give the user the option to select the user certificate themselves. For the encryption algorithm, I've used the option of RC2 with 128-bit encryption. These options are configured using the following cmdlet:

    Set-SmimeConfig -OWAAllowUserChoiceOfSigningCertificate $True '
    -OWAEncryptionAlgorithms 6602:128

3. Once this configuration is in place, the root certificate of the internal PKI solution needs to be exported and configured as a S/MIME, issuing CA. You do this by configuring a virtual certificate collection, set up as a certificate store file type with an SST extension, that ...