Mark the default S/MIME decryption keys

When using S/MIMEClosed Secure Multipurpose Internet Mail Extensions (S/MIME) is a specification for secure email messages that uses the X.509 format for digital certificates and uses various encryption algorithms such as 3DES. encryption, a number of default decryption keys can be specified. An organization that has multiple domains is likely to have one default key per domain, but may also issue default decryption keys on a partner-by-partner basis as well.

There is no limit on the number of certificateClosed A digital means of proving your identity. When you send a digitally-signed message, you are sending your certificate and public key. Certificates are issued by a certification authority and can expire or be revoked./key pairs that can be marked, but there will be a gradual effect on performance depending on the number of keys that need to be tried before a message can be decrypted.

  Only corporate S/MIME certificates that have a private keyClosed The secret key kept on the sender's computer that the sender uses to digitally sign messages to recipients and to decrypt messages from recipients. Private keys should be password protected. component can be marked as being default decryption keys.

To specify the corporate key that, by default, should be used to try to decrypt an S/MIME message:

  1. Navigate to System > Encryption and click Certificate Store.
  2. Click the Corporate tab.
  3. In the list of certificates in the information panel, click an S/MIME certificate.
  4. In the task panel,click Use as default decryption key.

  5. Apply the configuration.

See also...