To use S/MIME
Secure Multipurpose Internet Mail Extensions (S/MIME) is a specification for secure email messages that uses the X.509 format for digital certificates and uses various encryption algorithms such as 3DES. or PGP, you must have the correct keys in the appropriate certificate A digital means of proving your identity. When you send a digitally-signed message, you are sending your certificate and public key. Certificates are issued by a certification authority and can expire or be revoked. store area of the encrypting or decrypting
Keys are contained within certificates. You can either import existing certificates, or create new certificates using the certificate/key generator or automatic certificate generation using a Trust Center.
Tell me about...
-
Keys used for encryption/decryption
The following table displays the keys that are used for encryption/decryption and the area of the certificate store that they must be kept in.
Technology Direction Recipient's key Certificate store area S/MIME Outgoing email Encrypting Public Partners Incoming email Decrypting Private Corporate Must be marked as a default decryption key
PGP Outgoing email Encrypting Public Partners Incoming email Decrypting Private Corporate -
Keys used for signing/verification
The following table displays the keys that are used for signing/verification and the area of the certificate store that they must be kept in.
Technology Direction Sender's key Certificate store area S/MIME Outgoing email Signing Private Corporate Incoming email Verification CA certificate for sender's public key
The key a sender gives to a recipient so that the recipient can verify the sender's signature and confirm that the message was not altered. Recipients also use the public key to encrypt email messages to the sender.--or--
Self-signed CA
Partners PGP Outgoing email Signing Private Corporate Incoming email Verification Public Partners