File Share Encryption

 View Only
  • 1.  Choosing S/MIME over PGP/MIME

    Posted Sep 12, 2012 07:24 AM

    Hello,

    I currently run PGP Universal server 3.0 and until recently it was configured to use 'automatic' as the signing format for outbound emails which would subsequently default to PGP/MIME even though users had X.509 certs available. What I'm trying to do is configure Universal server to send signed and encrypted emails using S/MIME, and where it cannot find a suitable X.509 recipient key, fall back to using PGP/MIME. 

    I can change the encoding format for signed emails under the send (encrpyt/signed) action to S/MIME, but am looking for a way to ensure the message is also encrypted with the X.509 key when available, else try PGP/MIME, else go clear.

    Hope this makes sense.

    Grateful for any assistance.

    Regards,

    Adaminski



  • 2.  RE: Choosing S/MIME over PGP/MIME

    Posted Sep 12, 2012 07:59 AM

    This will all be part of the outbound mail policy chain

    Take a look at http://www.symantec.com/docs/TECH173291

    So selecting preferred encoding format to S/MIME will search the users key for an x.509 cert, and if not itll look at the recipients key for the preferred encoding format, and encode that way.

    So it's entirely possible to do it the way you requested, you will just need to plan out the mail policy chain carefully to get it right.

    I assume you have added an Organsation Key?



  • 3.  RE: Choosing S/MIME over PGP/MIME

    Posted Sep 13, 2012 07:31 AM

    Thanks for the post weevil, it encouraging to know it can actually be done. Getting the Org key sorted will be part of the rebuild/new config.

     

    Thanks again.