UNCLASSIFIED

1
UNCLASSIFIED
UNCLASSIFIED
Public Key Infrastructure (PKI)
Configuring Outlook
UNCLASSIFIED
UNCLASSIFIED
2
Configuring Outlook Settings

• Open MS Outlook
• Select Tools
• Select Options

3
Configuring Outlook Settings
4
Configuring Outlook Settings

• Select Security tab
• Click Settings

5
Configuring Outlook Settings
6
Configuring Outlook Settings

• Click New

7
Configuring Outlook Settings

• Enter desired Security Settings Name
• Check all boxes listed
• Default Security Setting for this Secure Message
  Format
• Default Security Setting for all secure messages
  check boxes
• Send these certificates with signed messages

8
Configuring Outlook Settings
9
Digital Signature Certificate

• Select Choose for appropriate E-Mail Signature
  Certificate

10
Digital Signature Certificate
11
Digital Signature Certificate

• Select E-Mail Signature Certificate
• Expand the Issued By column to see complete
  name
• Click OK

12
Digital Signature Certificate
13
Digital Signature Certificate

• Make sure the Hash Algorithm is SHA1

14
Digital Signature Certificate
15
Encryption Certificate

• Click Choose for E-Mail Encryption Certificate

16
Encryption Certificate
17
Encryption Certificate

• Select appropriate E-Mail Encryption Certificate
  Expand the Issued By column to see complete
  name
• Click OK

18
Encryption Certificate
19
Encryption Certificate

• Make sure the Encryption Algorthim is 3DES
• Click OK

20
Encryption Certificate
21
Configuring Outlook Settings

• Window will close and go back to the Options
  window
• In the Secure Email section check the following
• Add digital signature to outgoing messages
• Check Send clear text message when sending signed
  messages
• Select Apply
• Select OK

22
Configuring Outlook Settings
23
Set Outlook Contacts as Default

• To send and receive DoD PKI messages, Contacts
  must be set as the first location referenced in
  address book.
• Select Tools
• Select Services

24
Set Outlook Contacts as Default
25
Set Outlook Contacts as Default

• In Services windows opens click on the Addressing
  Tab
• Scroll to the bottom in the Show this address
  list first drop down box of the list and select
  Contacts
• Keep setting for Keep personal addresses in
  Contacts setting.
• Click Apply

26
Set Outlook Contacts as Default
27
Add Digital Signature Button

• Open a new mail message
• Select Tools
• Choose Customize

28
Add Digital Signature Button
29
Add Digital Signature Button

• Customize window will open
• Click on the Commands tab

30
Add Digital Signature Button

• Scroll down the Categories until you find
  Standard
• Click once Standard to highlight it

31
Add Digital Signature Button
32
Add Digital Signature Button

• Move the scroll bar to the bottom on the right
  hand Commands column
• Drag and drop Digitally Sign Message icon to the
  Standard toolbar
• Hold your cursor over the wording and click your
  left mouse button and hold it down
• The icon appears is a small box under the cursor
  with a plus sign on the bottom

33
Add Digital Signature Button
34
Add Digital Signature Button

• While holding the left mouse button down drag the
  Digitally Sign Message icon to your Standard
  toolbar
• You will see a line where the icon will be placed
• Move the icon to a desired position and release
  the left mouse button
• The icon will then stay in place on your toolbar

35
Add Digital Signature Button
36
Add Encryption Button

• Repeat this process with the Encrypt Message
  Contents icon

37
Add Encryption Button

• Drop the Encrypt icon next to the Digitally Sign
  Message icon

38
Add Encryption Button

• When finished both icons should be in color on
  your standard toolbar
• The icon with the red medallion is used to
  digitally sign email messages

39
Add Encryption Button

• The icon with the blue medallion is used to
  encrypt email messages

40
Send Digitally Signed Encrypted Email Messages

• Click New Mail Message button in MS Outlook
• Click TO

41
Send Digitally Signed Encrypted Email Messages

• Select the desired individual from the Contacts
  Address Book
• Click TO
• When finished click OK

42
Send Digitally Signed Encrypted Email Messages
43
Send Digitally Signed Encrypted Email Messages

• Check the appropriate icon blocks to sign and/or
  encrypt
• Complete message
• Click Send

44
Send Digitally Signed Encrypted Email Messages
45
Send Digitally Signed Encrypted Email Messages

• If digitally signing the message enter password
  for the PKI certificate
• If only encrypting email message there is no need
  to enter your password

46
Send Digitally Signed Encrypted Email Messages

• Click OK

47
Send Digitally Signed Encrypted Email Messages

• Message is sent