Define endpoints

You can define a mail encryption endpoint A profile of encryption settings for the Email Gateway to use for recipients that match the endpoint.:

• using password encryption
• using PGP or S/MIME Secure Multipurpose Internet Mail Extensions (S/MIME) is a specification for secure email messages that uses the X.509 format for digital certificates and uses various encryption algorithms such as 3DES. encryption
• without specifying the PGP or S/MIME certificate A digital means of proving your identity. When you send a digitally-signed message, you are sending your certificate and public key. Certificates are issued by a certification authority and can expire or be revoked. that contains the sender's private key The secret key kept on the sender's computer that the sender uses to digitally sign messages to recipients and to decrypt messages from recipients. Private keys should be password protected. by searching for the correct key certificate automatically.
• without selecting the encryption certificate by searching for the correct encryption certificate automatically.

The initial steps for defining a mail encryption endpoint are the same regardless of the specific definition model you choose.

1. Navigate to System > Encryption > Mail Encryption Endpoints.

2. Do one of the following:

   • In the Encryption Endpoints panel, click New.
   • In the Task panel, click New encryption endpoint.

   Secure Email Gateway creates a new encryption endpoint, and then displays the Modify Mail Encryption Endpoint page.

3. For each group of settings, click Click here to change these settings, and then follow the instructions on screen.

   • You will find extra information about some of the settings later in this topic.

4. In the For Mail Sent panel, click New.
   The Add Route Selector dialog appears.

5. Configure the mail route to which encryption is applied.

   Extra information

   Setting	Description
   From	Mail received from the selected address lists is encrypted. Select Anyone if you want encryption to be applied to mail sent from any endpoint.
   To	Mail sent to the selected address lists is encrypted. Select Anyone if you want encryption to be applied to mail received by any endpoint.

6. In the Encryption and Signing Options panel, click Click here to change these settings.

Continue configuration using specific instructions to define:

• An automatic mail signing endpoint
• An automatic mail encryption endpoint
• A password encrypted endpoint
• A PGP encrypted endpoint
• An S/MIME encrypted endpoint