Set up key decryption

To set up key decryption, complete the following two procedures:

• Configure the Encryption options in the System menu. Show me

  1. Import PGP and S/MIME Secure Multipurpose Internet Mail Extensions (S/MIME) is a specification for secure email messages that uses the X.509 format for digital certificates and uses various encryption algorithms such as 3DES. certificates into the Corporate area of the certificate A digital means of proving your identity. When you send a digitally-signed message, you are sending your certificate and public key. Certificates are issued by a certification authority and can expire or be revoked. store.

  2. Configure the default decryption settings that you want to use.

  3. Enable logging to monitor decryption activity. Show me

     1. Navigate to System > Encryption and click Encryption/Decryption Defaults.
     2. In the Encryption/Decryption Logging area, click Click here to change these settings.
     3. In the list, select a logging level and click Save.
  4. Optionally, define mail encryption endpoints to re-encrypt email messages after content checking.
  5. Apply the configuration.
• Configure the Policy Definition options in the Policy menu. Show me

  1. Create a new policy route or edit an existing policy route.

  2. Enable decryption on the policy route.

  3. Optionally, enable extracting PGP and S/MIME keys from email messages.

  4. Optionally, modify the Encryption or decryption fails content rule to define the disposal action for the Gateway to take if an email message cannot be encrypted.

  5. Apply the configuration.

If you change any configuration or policy settings, you must Apply Configuration for the new settings to take effect. You can do this either from the Changes Made panel, or System > Configuration > Apply Configuration. See Apply new configuration for more information. If you use Peer Gateways (i.e. when multiple Gateways are peered), any configuration changes from a local Gateway can then be applied to all the peers at the same time. See Configure Peer Gateways for more information.

See also...

• Required S/MIME and PGP certificates
• Certificate Store
• Mail Encryption Endpoints

How do I...

• Import and export key certificates
• Encryption/Decryption Defaults
• Create, edit or delete a policy route
• Extract PGP and S/MIME keys from email messages
• Enable encryption or decryption on a policy route
• Disposal Actions