Set up key encryption

To set up key encryption and signing, complete the following two procedures:

• Configure the Encryption options in the System menu. Show me

  1. Import PGP and S/MIME Secure Multipurpose Internet Mail Extensions (S/MIME) is a specification for secure email messages that uses the X.509 format for digital certificates and uses various encryption algorithms such as 3DES. certificates into the Partners area of the certificate A digital means of proving your identity. When you send a digitally-signed message, you are sending your certificate and public key. Certificates are issued by a certification authority and can expire or be revoked. store.

  2. Configure the default global encryption settings that you want to use.

     You can use your mail encryption endpoints to specify the encryption methods and keys that you need for your policy routes and content rules.

  3. Enable logging to monitor encryption activity. Show me

     1. Navigate to System > Encryption and click Encryption/Decryption Defaults.
     2. In the Encryption/Decryption Logging area, click Click here to change these settings.
     3. In the list, select a logging level and click Save.
  4. Define mail encryption endpoints to specify the encryption and/or signing methods that you need for your policy routes and content rules.
  5. Apply the configuration.
• Configure the Policy Definition options in the Policy menu. Show me

  1. Create a new policy route or edit an existing policy route.

  2. Enable encryption on the policy route.

  3. Optionally, override the policy route setting with a content rule.
  4. Optionally, modify the Encryption or decryption fails content rule to define the disposal action for the Gateway to take if an email message cannot be encrypted.
  5. Apply the configuration.

If you change any configuration or policy settings, you must Apply Configuration for the new settings to take effect. You can do this either from the Changes Made panel, or System > Configuration > Apply Configuration. See Apply new configuration for more information. If you use Peer Gateways (i.e. when multiple Gateways are peered), any configuration changes from a local Gateway can then be applied to all the peers at the same time. See Configure Peer Gateways for more information.

Tell me about...

• Required S/MIME and PGP certificates
• Mail Encryption Endpoints

How do I...

• Encryption/Decryption Defaults
• Create, edit or delete a policy route
• Enable encryption or decryption on a policy route
• Disposal Actions