So we're setting up encrypted e-mail for our client running SBS with Exchange 2010 and Outlook 2010 on about a dozen machines (one running Outlook 2003, we're trying to talk them into upgrading it). It's new territory for me and my associate is only familiar with 3rd party encryption solutions.
My research suggests that Outlook natively supports encryption, all we have to do is get a certificate and load it into Outlook and we're ready to go.
3 questions:
- Is my conclusion correct or is more configuration required?
- Can a single certificate be used for all workstations and be pushed out via GPO?
- For remote users not on the domain, is there an easy way to script/automate the certificate import process for Outlook? Something to make it super easy for a non-technical end user.
One of many sources I've found about encryption in Outlook, all directed towards single user cases: http://voices.yahoo.com/how-configure-outlook-2010-send-signed-or-11403564.html?cat=15
:edit: Copied from my comment below for clarity.
Well, I suppose part of it being new territory for me is my lack of appropriate vocabulary :)
At this point, I don't know which security scenario is best. Our client, a title company, was asked by one of the other companies they work with to implement secure e-mail. Yes, it was left that vague. As I was doing my research, I found that encrypting e-mail messages from the Outlook client was the most common result of my searches, so I focused on that and that is what I'm asking about.
However, if there's a better solution that I can implement in Exchange, I'm all ears!