Security on Outlook and Exchange

T

tshad

How secure is the mail and attachments on Outlook?

We need to make sure that the attachments we send are secure. Where do we
look and how do we set it so it is encrypted? We would be sending excel
sheets that we need to make sure no one can read.

Thanks,

Tom.
 
T

tshad

neo said:
Outlook/Exchange doesn't to this out of the box, it requires another piece
to be in play. The path that you want to investigate if interested in
secure mail is S/MIME (signing a message with a certificate), Pretty Good
Privacy (PGP), or Microsofts Rights Management
(http://www.microsoft.com/technet/prodtechnol/office/office2003/operate/of03irm.mspx).
Click to expand...

How do I set these?

OK, I read the some of the articles on security and they talk about what it
is and a little on how
to set it up.

My question is how to do it.

One part says that if you are using Exchange Server, you don't need to
exchange certificates (which is what we are using).

" If your system administrator has set up security for your network using
Microsoft Exchange Server, it is not necessary to swap certificates. "

I also want to be able to send emails that are secure to anyone I send mail
to.

I assume this is the S/MIME or PGP.

So how do I set it up?

I went to the tools/options/security tab and all the "Secure e-mail" options
are greyed out. I want to be able to "Encrypt Contents and Attachments for
outgoing messages". I am not concerned with adding digital signatures to my
messages.

All of the options are unselected and it won't let me select any of them.
And I don't see any options for S/MIME or PGP. I am running Outlook 2000.

Thanks,

Tom
 
N

neo [mvp outlook]

You could setup your own internal Certificate Authority (comes as a
component of Windows 2000/2003 server). However you need to keep something
in mind, when you encrypt a message, you need to have the public key of the
person you are sending the message to. The reason for this is that you seal
with their public key and the recipient is the only one that can decrypt
because no one should have their private key except them.
 
Top