SafeScrypt Digital ID: installation and use with

Adobe Document Signer

Lotus

Netscape 4.X

Outlook 98

Outlook 2000

Outlook 2002

Outlook Express 5.X

Outlook Express 4.0

lotus

you can import Internet certificates into your Notes User ID. You can also export Internet certificates from your Notes User ID. Importing Internet certificates allows you to use them for SSL client authentication, and for encrypted and signed S/MIME messages. For example, if you are using a Netscape browser that is compliant with Public Key Cryptographic Standard #12 (PKCS #12), and have Internet certificates and keys (in compliance with PKCS #12) accessible from your local machine, you can import them into your Notes User ID file. On the same note, if you have Internet certificates and keys (in compliance with PKCS #12) in your Notes User ID file, you can export them to a file on your local machine and then import them to use with a Netscape browser.

to import Internet certificates into your User ID file

1.choose File - Tools - User ID.
2. enter your Notes password.
3. click "More Options" and click "Import Internet Certificates."
4. select the file that contains the certificates in the "Specify PKCS12 File Containing the Internet Certificates" dialog box and then click Open.
5. if the file is password protected, enter the password when prompted.
6. (optional) Select each certificate and click Details to view the following:
Issuer Name: the Certificate Authority that issued the certificate.
subject: who the certificate belongs to.
fingerprint: the unique identifier for the certificate.
effective date: when the certificate was created.
expiration date: when the certificate expires.
whether or not there is a private key which corresponds to the certificate.

7. click "Accept All" in the "Accept Internet Certificates" dialog box to accept the certificates and any private keys in the file.
8. enter your Notes password.

note to check that your certificates were imported into your ID file, choose File - Tools - User ID and click Certificates. You cannot import invalid certificates, or incomplete certificate chains.

to export Internet certificates from your User ID file

1.choose File - tools -user ID.
2. enter your Notes password.
3. click "More Options" and click "Export Internet Certificates."
4. Select an eligible certificate to be exported from your User ID file in the "Export Internet Certificates" dialog box. To see more information about the certificate and certificate chain, click Details.
5. (optional) Customize the "friendly name" in the "Suggested friendly name" field. Friendly names allow you to distinguish between certificates. For example, if you export a certificate, and later import it into your Netscape browser, Netscape will identify the certificate with the friendly name that you supplied when you exported the certificate.
6. select whether you would like to export the private key along with the Internet certificate. If you do not see an option to export a private key, it means the User ID file does not contain the private key attached to the certificate.
7. click Export.
8. enter a password for the export file, and confirm the password in the// "Password for Export File Containing Internet Certificates" dialog box. Then click OK. Click "No Password" if you do not want to specify a password for the export file.
9. specify a (*.p12) name for the export file, and a file location in the "Specify Export File for the Internet Certificates" dialog box. Click OK.

notes :
you can only export one Internet certificate at a time. The selected Internet certificate is exported along with its certificate chain.
the Internet certificate you are exporting is a saved copy.

Microsoft Outlook 98

to get a digital ID for sending secure messages and installing it in Outlook 98

after successful enrolment and validation(as applicable), SafeScrypt will send you an E-mail message, to the address you specified, containing information on how to pick up your Digital ID. In the E-mail, you will find a URL to the SafeScrypt Digital ID pickup page and your unique PIN number. Go to the URL included in the E-mail and copy (CTRL +C) your PIN number, from the E-mail, and paste (CTRL+V) it into the field on pickup page. click the 'Submit' button to proceed. see Figure 1.1 below. Note: since you will be installing your Digital ID in Outlook 98, you must go to the pickup page using Microsoft Internet Explorer. this causes the Digital ID to be installed in your browser, in turn, allowing Outlook 98 to locate it.


figure 1.1

the next screen you will see is the option to install the certificate in the browser/email client you want to use. in this case Microsoft Outlook 98. Click the 'Install' button.

digitally signing your E-Mail with Outlook 98

the first step to securing your E-mail messages is to sign them using your Digital ID. Your digital signature enables recipients to verify you sent the message and that it was not altered during transmission. With Microsoft Outlook 98 you can easily sign your outgoing E-mail messages.

signing a message does not affect the contents of the message in any way or protect the message from being intercepted and read by someone other than the intended recipient. To ensure that only the intended recipient can read the message, you must also encrypt the message. If a recipient of a signed message does not use an S/MIME-enabled E-mail package, that person can still read the message - your digital signature simply shows up as an attachment.

the signed icon indicates a message has been signed. You can sign individual messages or configure your E-mail security options to automatically sign all of the E-mail messages you send.

signing individual messages

to sign an outgoing message:

1.in the New Message window click on the Options... button. Clicking the Options... button will open a window which allows to you sign and encrypt your message.





2. in the window which appears select whether you want to sign or sign and encrypt your message.

automatically signing all outgoing messages

to configure Outlook 98 to sign all messages:

1.select the Tools menu and scroll to Options.



2. click the Security tab.

3. enable the "Add digital signature to outgoing messages" checkbox.

encrypting your E-Mail with Outlook 98

the second step to securing your E-mail is to encrypt the messages you send. Encrypting messages with Outlook 98 is as easy as signing them.

to encrypt a message, you need the intended recipient's Digital ID. When you receive a signed message, you can store the sender's Digital ID in your address book. You can also retrieve correspondents' Digital IDs from online directories. For more information about storing and maintaining Digital IDs in your address book, see Managing Correspondents' Digital IDs (LINK).

the Encrypt Message icon indicates a message has been encrypted. You can encrypt individual messages or configure your E-mail security options to automatically encrypt all E-mail messages to recipients whose Digital IDs are stored in your address book.

encrypting individual messages

to encrypt an outgoing message:

1. in the New Message window click on the Options... button. Clicking the Options... button will open a window which allows to you sign and encrypt your message (see below).





2. in the window which appears, select both the sign and encrypt message options.

automatically encrypting outgoing messages

to configure your E-mail preferences to automatically encrypt outgoing messages to recipients whose digital IDs are stored in your address book:

a. select the Tools menu and scroll down to Options.
b. click on the Security tab.
c.enable the "Encrypt contents and attachments for outgoing messages"checkbox.

receiving Encrypted or Signed E-Mail

the signed icon indicates a message has been signed. When you sign a message, this icon is displayed in the lower right corner of the address pane. When you receive a signed message, the signed icon is displayed when you view the message in Outlook 98.

when you receive an encrypted or signed message, Outlook 98 automatically decrypts the message and displays the encrypted and/or signed icons as the message is viewed.



note the encrypted and signed icons indicating this message was both signed and encrypted upon receipt in Outlook 98.

managing contacts' digital IDs with Outlook 98

to send an encrypted message, you must have the recipient's Digital ID in your address book. Outlook 98 enables you to view Digital IDs stored in your address book as well as easily add and remove contacts' Digital IDs.

storing a Digital ID from a Signed Message

follow these instructions to add another person's Digital ID to your address book. Once a Digital ID is stored in your address book, you can use it to send that person encrypted messages.

1. Open the signed message from Outlook '98.



2.right mouse-click on the Sender's name in the address field.



3. select "Add to Contacts".

4. if the Sender is not yet in your Contacts address book, a Contact window will appear. Enter any information you want to include, then click on the "Save and close" button. This automatically adds the Sender's Digital ID to your Contact address book.



5. if the Sender is already in your Contacts address book, you will get another dialog box where "Update this Contact" is selected. Click on OK, which will then bring up the Contact window. Just click on "Save and close", and this will add your contact's Digital ID to your address book.

to import a downloaded digital ID into your address book:

a. Open "Contacts" from Outlook '98 (Click on the Contacts icon).
b. If this is an existing contact, double click on your contact's name from the existing list. If this is a new contact, select New, then Contact from the File menu in your toolbar and enter your contact information in the Contact window.
c. Select the Certificates tab in the Contact window.
d. Click on the "Import" button.
e. Locate the Digital ID you just downloaded and click the Open button.
f. Click on "Save and close".

setting up your toolbar for secure E-mail

to make signing and encrypting messages easier, you may also add the Sign and Encrypt icons to your browser's tool bar. When finished, you will be able to sign and encrypt messages with the click of a button.

1. Open a new mail message.



2. In the message window, go to View, Toolbars, Customize



3. Select the "Commands" tab and click on "Standard" under categories.



4. Scroll down the list under Commands and drag and drop the "Encrypt Message Contents" and "Digitally Sign Message" icons into the toolbar. (Note: Drop the icons anywhere to the left of the office assistant icon).



5. Click the "Close" button. Once complete, your toolbar will contain both the sign and encrypt icons.



Microsoft Outlook 2000

summary

Microsoft Outlook 2000 includes security features that allow you to send and receive secure E-mail messages over the Internet. To accomplish this, Outlook incorporates support for the Secure Multi-Purpose Internet Messaging Extensions (S/MIME) protocol. Using this standard enables you to send and receive signed or sealed (encrypted) Internet mail.

this artical describe hoe to:

Get a Digital ID for sending secure messages
Backup or copy a Digital ID
Move a Digital ID to another computer
Send a signed message
Add a Digital ID to your Contacts list
Send an encrypted (sealed) message
Sign or encrypt all messages you send

more information

You can sign your messages with a digital ID, also called a certificate, so the intended recipient can be sure that the message actually came from you and no one has tampered with it. You can seal your messages, also known as encrypting, using a special mathematical formula so that only the intended recipient can read your message and attachments.

To send secure messages you need a digital ID. A digital ID provides a means for proving your identity on the Internet. You can obtain a digital ID from as SafeScrypt. With some types of E-mail servers, your network administrator can also issue a digital ID.

A digital ID has two parts, a private key and a public key. The irreplaceable private key is usually stored on your computer. You can export and import this private key to other computers in order to move your E-mail security settings from one computer to another. You can also make a backup copy of your private key. The other component of your digital ID is a public key. You send this key to people from whom you want to receive encrypted messages as well as those you want to be able to verify your signed messages.

To Get a Digital ID for Sending Secure Messages and Installing it in Outlook 2000 choose the Personal Certificate you wish to use for this. After successful enrolment and validation(as applicable), SafeScrypt will send you an E-mail message, to the address you specified, containing information on how to pick up your Digital ID

SafeScrypt will send you an E-mail message, to the address you specified, containing information on how to pick up your Digital ID. In the E-mail, you will find a URL to the SafeScrypt Digital ID pickup page and your unique PIN number. Go to the URL included in the E-mail and copy (CTRL +C) your PIN number, from the E-mail, and paste (CTRL+V) it into the field on pickup page. Click the 'Submit' button to proceed. See Figure 1.1 below. Note: since you will be installing your Digital ID in Outlook 2000, you must go to the pickup page using Microsoft Internet Explorer. This causes the Digital ID to be installed in your browser, in turn, allowing Outlook 2000 to locate it.


Figure 1.1

The next screen you will see is the option to install the certificate in the browser/email client you want to use. In this case Microsoft Outlook 2000. Click the 'Install' button.

1. Next open Outlook 2000 and select the 'Tools' menu.
2. Select 'Options' and click on the 'Security' tab.
3. Click on the 'Change Settings' button



Figure 1.2

4. Notice under the "Certificates and Algorithms", there are two "Choose" buttons. (Figure 1.3) The first allows you to select the Digital ID that you will use to sign your E-mails with and the second allows you to choose the Digital ID that you can use to encrypt your E-mail messages with. Click on the "Choose" Buttons and select your Digital ID. This is the ID that you installed into your browser. Click OK and that's all there is to it.



Figure 1.3

to backup or copy a digital ID

1. On the Tools menu, click Options, and then click the Security tab.
2. Click "Import/Export Digital ID."
3. Click to select "Export your Digital ID to a file" and then click Select.
4. Click to select the certificate you want to back up, and then click OK.
5. To remove the digital ID from this computer, click to select the "Delete Security Information Digital ID from system" check box.
6. In the Password box, type the password for this certificate.
7. Type or browse to the path and file name for your digital ID and then click OK.
8. Outlook saves your digital ID as a .pfx file.

To Move a Digital ID to Another Computer

1. Copy the .pfx file you created to the new computer.
2. On the new computer in Outlook, on the Tools menu, click Options and then click the Security tab.
3. Click Import/Export Digital ID.
4. Click to select "Import existing Digital ID from a file."
5. Type or browse to the .pfx file created above and type the password.
6. In the Password box, type the digital ID password.
7. In the Digital ID Name box, type your ID Name and then click OK.
8. The digital ID is now available on the new computer.

To Send a Signed Message

1. Open a new message.
2. On the View menu, click Options.
3. Click to select the "Add digital signature to outgoing message" check box, and then click Close.
4. Complete and send the message.

The message received is marked with a certificate icon in the lower-right corner of the header. The recipient can click this icon to see validation information about your digital signature.

To Add a Digital ID to Your Contacts List

To send someone an encrypted message, you need a copy of that person's digital ID. Have the person send you a digitally signed message; when you receive the message, follow these steps:

1. Open the digitally signed message.
2. Right-click the name in the From field, and on the shortcut menu click Add To Contacts.
3. If you have an entry for this person on your contacts list, click Update This Address.
4. The digital ID is stored with your contact entry for this person. You can now send encrypted E-mail messages to this person. To view the certificates for a contact, double-click the person's name, and then click the Certificates tab.

To Send an Encrypted (Sealed) Message

1. Open a new message.
2. On the View menu, click Options.
3. Click to select the "Encrypt message contents and attachments" check box, and then click Close.
4. Complete and send the message.

The message received is marked by a Lock icon in the lower-right corner of the header. The recipient can click this icon to see validation information about the encryption certificate.

note: When sending an encrypted message you may receive the following "Non- Secure Recipients" message: None of the recipients can process an encrypted message. You can either proceed with an unencrypted message or cancel the operation.

This is because you addressed the message using the Global Address List or other non-contact address source. You must use the contact record containing the recipient's digital ID to address the message.

To Sign or Encrypt All Messages You Send

1. On the Tools menu, click Options.
2. On the Security tab, click to select "Encrypt contents and attachments for outgoing messages" or "Add digital signature to outgoing messages" and then click OK.

note: To specify that recipients whose E-mail clients do not support S/MIME signatures are allowed to read the message without verification of the digital signature, click to select "Send clear text signed message."

Last Reviewed: October 25, 2000 © 2000 Microsoft Corporation. All rights reserved. Terms of Use.

Provided by: Microsoft Product Support Services Article ID: Q195477

Microsoft Outlook 2002

how to send a signed message

Open a new message.
On the View menu, click Options.
Click to select the Add digital signature to outgoing message check box, and then click Close.
Complete and send the message.
The message received is marked with a certificate icon in the lower-right corner of the header. The recipient can click this icon to see the validation information about your digital signature.
How to Send an Encrypted (Sealed) Message
Open a new message.
On the View menu, click Options.
Click to select the Encrypt message contents and attachments check box, and then click Close.
Complete and send the message.

The message received is marked by a Lock icon in the lower-right corner of the header. The recipient can click this icon to see the validation information about the encryption certificate.

note: When you send an encrypted message, you may receive the following "Non-Secure Recipients" message:

None of the recipients can process an encrypted message. You can either proceed with an unencrypted message or cancel the operation.

This is because you addressed the message by using the Global Address List or other non-contact address source. You must use the contact record that contains the recipient's digital ID to address the message.

How to Sign or Encrypt All Messages That You Send
On the Tools menu, click Options.
On the Security tab, click to select Encrypt contents and attachments for outgoing messages or Add digital signature to outgoing messages, and then click OK.

note: To specify that recipients whose E-mail clients do not support S/MIME signatures are allowed to read the message without verification of the digital signature, click to select Send clear text signed message.

How to Add a Digital ID to Your Contacts List

To send someone an encrypted message, you need a copy of that person's digital ID. Have the person send you a digitally signed message, and then use the following steps when you receive the message:

Open the digitally signed message.
Right-click the name in the From field, and then click Add To Contacts on the shortcut menu.
If you have an entry for this person on your contacts list, click Update This Address.

The digital ID is stored with your contact entry for this person. You can now send encrypted messages to this person. To view the certificates for a contact, double-click the person's name, and then click the Certificates tab.

How to Back up or Copy a Digital ID

On the Tools menu, click Options, and then click the Security tab.
Click Import/Export Digital ID.
Click to select Export your Digital ID to a file, and then click Select.
Click to select the certificate that you want to back up, and then click OK.

To remove the digital ID from this computer, click to select the Delete Security Information Digital ID from system check box.

In the Password box, type the password for this certificate.

Type or browse to the path and file name for your digital ID, and then click OK. Outlook saves your digital ID as a .pfx file.

How to Move a Digital ID to Another Computer

Copy the .pfx file that you created to the new computer.

On the new computer in Outlook, on the Tools menu, click Options, and then click the Security tab.

Click Import/Export Digital ID.

Click to select Import existing Digital ID from a file.

Type or browse to the .pfx file that you created, and then type the password.

In the Password box, type the digital ID password.

In the Digital ID Name box, type your ID Name, and then click OK. The digital ID is now available on the new computer.

Microsoft Outlook Express 5.X

To Get a Digital ID for Sending Secure Messages and Installing it in Outlook Express 5.X choose the Personal Certificate you wish to use for this. After successful enrolment and validation(as applicable), SafeScrypt will send you an E-mail message, to the address you specified, containing information on how to pick up your Digital ID

In the E-mail, you will find a URL to the SafeScrypt Digital ID pickup page and your unique PIN number. Go to the URL included in the E-mail and copy (CTRL +C) your PIN number, from the E-mail, and paste (CTRL+V) it into the field on pickup page. Click the 'Submit' button to proceed. See Figure 1.1 below. Note: since you will be installing your Digital ID in Outlook Express 5.X, you must go to the pickup page using Microsoft Internet Explorer. This causes the Digital ID to be installed in your browser, in turn, allowing Outlook Express 5.X to locate it.


Figure 1.1

The next screen you will see is the option to install the certificate in the browser/email client you want to use. In this case Microsoft Outlook Express 5.X. Click the 'Install' button.

1. In Outlook Express, go to Tools > Accounts
2. Click on the 'Mail' tab then click on Properties
3. Under 'User Information', you should see your name & email address. Click on the 'Security' tab. Here you should see the following:

Signing Certificate
Select the signing certificate below. This will determine the digital ID used when signing messages with this account

4. You'll than see a box called "Certificate". If empty, click on the box called "Select". Then choose your certificate by highlighting it and then click on O.K
5. Do the same thing under "Encryption Preferences" and the box called Certificate.
6. Make sure the "Box" next to "Algorithm" states 3DES
7. When done, hit O.k.

Now, to send a "signed" email, simply compose a new email and from your "tools" menu from within the email message itself, go to TOOLS > and choose "Digitally Sign". When done, send email.

To add your digital certificate to ALL OUTGOING emails, follow these steps:

From Outlook Express, go to TOOLS > OPTIONS > SECURITY >

Under SECURE EMAIL you'll see the options to:

A: Encrypt contents and attachments to all out going messages
B. Digitally sign all outgoing messages.

Put a "check mark" next to ONLY (if you want to) Encrypt contents and attachments to all out going messages AND NOT next to Digitally Sign.

Microsoft Outlook Express 4.0

To Get a Digital ID for Sending Secure Messages and Installing it in Outlook Express 4.0 choose the Personal Certificate you wish to use for this. After successful enrolment and validation(as applicable), SafeScrypt will send you an E-mail message, to the address you specified, containing information on how to pick up your Digital ID.

In the E-mail, you will find a URL to the SafeScrypt Digital ID pickup page and your unique PIN number. Go to the URL included in the E-mail and copy (CTRL +C) your PIN number, from the E-mail, and paste (CTRL+V) it into the field on pickup page. Click the 'Submit' button to proceed. See Figure 1.1 below. Note: since you will be installing your Digital ID in Outlook Express 4.0, you must go to the pickup page using Microsoft Internet Explorer. This causes the Digital ID to be installed in your browser, in turn, allowing Outlook Express 4.0 to locate it.


Figure 1.1

The next screen you will see is the option to install the certificate in the browser/email client you want to use. In this case Microsoft Outlook Express 5.X. Click the 'Install' button.

On the Tools menu, click Accounts.

Click the Mail tab, click the mail account in which you want to use a digital ID, and then click Properties.

On the Security tab, click the "Use a digital ID when sending secure messages from <E-mail address>" check box to select it, and then click Digital ID.

Click the appropriate certificate, click OK, click OK, and then click Close.

On the Tools menu, click Options.

On the Security tab, click Advanced Settings.

If you want to send your certificate (public key) with all messages, click the "Include my certificate with signed messages" check box to select it. This allows the recipients of your messages to easily verify your message with your public key. For more information, see the "Adding a Certificate to the Address Book" section in this article.

If you want to specify an encryption algorithm other than RC4 40-bit, click the appropriate option.

Click OK.

If you want to automatically digitally sign all outgoing messages, click the "Add digital signature to all outgoing messages" check box to select it.

If you want to automatically encrypt all outgoing messages, click the "Encrypt contents and attachments for all outgoing messages" check box to select it.

Click OK, and then click OK again.

Digitally Signing a Message

To digitally sign a message, you can use either of the following methods:

Have Outlook Express automatically sign all messages each time you compose, reply to, or forward a message (see step 7 in the section titled "Configuring Security Features in Outlook Express").

Click the Digitally Sign Message button. This button displays an envelope with a red ribbon. You can also click Digitally Sign on the Tools menu.

When a message is digitally signed, a red ribbon appears to the right of the Subject line. When you click send, Outlook Express signs the message using your private key and sends the message.

If you do not have your private key installed on your computer, Outlook Express displays the following message:

The message could not be sent. You cannot send digitally signed messages because you do not have any certificates. (OK)

The recipient must have your public key to verify that the digital signature on your message is trustworthy. Others cannot use your public key to send messages with your digital signature.

You can include your public key with the message (see step 4 in the section titled "Configuring Security Features in Outlook Express") or you can send your certificate files as an attachment. If the recipient's E-mail client is not S/MIME aware, the public key certificate appears as a file attachment with a .p7s extension. If the E-mail client is S/MIME aware, there is no visible enclosure.

Verifying a Digitally Signed Message

The recipient must have your public key to verify that the digital signature on your message is trustworthy. Others cannot use your public key to send messages with your digital signature.

When you view a digitally signed message and you have the sender's certificate (public key) imported into your address book and marked as Trusted By Me, the message can be viewed as expected.

If you do not have the sender's certificate (public key) imported into your address book, Outlook Express displays the following security warning message:

The certificate used to sign this message is either not listed in your Address Book or marked as not trusted by you. Continue to open this message?

If you have the sender's public key imported into your address book and the certificate is marked as Not Trusted By Me, Outlook Express displays the following security warning message:

You do not trust the certificate used to sign this message. Continue to open this message?

Adding a Certificate to the Address Book

To be able to verify a sender's digital signature or to send encrypted mail, you must obtain the other person's certificate (public key) and import it into your address book.

There are two ways to obtain a public key:

Look up the other person's public key by visiting SafeScrypt's Web site.
You receive a digitally signed message that includes the sender's certificate (public key).

This article does not describe how to obtain and install a public key from SafeScrypt (method 1). For information about this method, visit SafeScrypt's digital ID Web page.

To add a person's certificate to your address book from a signed message you receive (method 2), follow these steps:

Click the message to select it.
On the File menu, click Properties, and then click the Security tab.
Click "Add the certificate to the address book."
Click OK

The default trust relationship for new certificates is Not Trust. To use the certificate, change the trust relationship by following these steps:

On the Tools menu, click Address Book.
Click the person's entry to select it, and then click Properties.
Click the Certificates tab.
Click the certificate, and then click Properties.
On the General tab, click Trusted By Me in the Trusted box.
Click OK, click OK, and then click Close on the File menu to close the Address Book.

Encrypting a Message

To encrypt a message so that only the recipient can decrypt the message, you need the recipient's certificate (public key) in your address book and the trust relationship set to Trusted By Me. See the section titled "Adding a Certificate to the Address Book" for information about these items.

One way to encrypt a message is to have Outlook Express automatically encrypt all messages each time you compose, reply to, or forward a message (see step 8 in the section titled "Configuring Security Features in Outlook Express").

Another way is to click the Encrypt Message button on the toolbar. This button displays an envelope with a padlock. You can also click Encrypt on the Tools menu.

When a message is encrypted, a round gray icon with a white padlock appears to the right of the Subject line. When you click send, Outlook Express encrypts the message using a secret key, encrypts that key with the recipient's public key, and sends the message.

Errors Received When Sending Encrypted Messages

If you send an encrypted message and you do not have the public key for one or many of the recipients (including yourself, the sender), Outlook Express displays the following security warning message:

You do not have a certificate. If you send this message, it will be sent properly, but you will not be able to read it in your sent items folder. Send anyway? (Yes/No)

If you try to read a message when you do not have the private key for one of the recipients (including yourself, the sender), Outlook Express displays the following message:

Your certificate is not listed among those that can decrypt this message. You cannot read it.

When you click OK, Outlook Express displays one of the following messages:

This message failed to display correctly in the Preview Pane.
- or -
One or more of the messages could not be opened.

If you do not have the recipient's public key in your address book, Outlook Express displays the following message:

You do not have valid certificates in the Address Book for the following recipients:
<list of recipients>

You must resolve the certificate problems listed above before you can send this message (Try Again).

Additional Notes

Each time you view a message that has been altered since it was sent, you receive a warning notification. The option to not notify you again applies to the current message only.

Some mail servers rewrite messages before sending them out. These messages are displayed as altered when received; it does not mean that someone has maliciously altered the message. If you receive many altered messages, check with your mail administrator to see if your mail server is causing the problem.

Last Reviewed: April 12, 2000 © 2000 Microsoft Corporation. All rights reserved. Terms of Use.

Provided by: Microsoft Product Support Services Article ID: Q168726

Netscape 4.X

To Get a Digital ID for Sending Secure Messages and Installing it in Netscape 4.X choose the Personal Certificate you wish to use for this.

After clicking the 'Accept' button on the enrollment page, you will be asked to confirm that the E-mail address you entered (the E-mail address that you will be using your digital ID with) is correct. Verify this and click 'ok'.

You will then be prompted to generate a private key, as seen in figure 1.1.


Figure 1.1

If you have recently installed Netscape on your system or have never used any of Netscape's security features, you may be asked to create and setup a Netscape Communicator password (figure 1.2). SafeScrypt highly recommends taking this action. By doing so, you effectively prevent any individual, other than yourself, from managing, importing or exporting digital certificates on your machine. This password also restricts other individuals from sitting down at your machine and signing E-mail messages with your digital ID. If you choose not to use a password, leave the password fields blank and click 'ok'.

Note: Be sure to remember your Communicator password. This is a Netscape function, included with Communicator for your security. If you forget your password, you will not have access to manage, deploy or use your digital ID. There is nothing SafeScrypt or Netscape can do in the event that this happens and ANY digital certificates you may have will be rendered useless.

After you complete the enrollment process explained in the above steps, SafeScrypt will send you an E-mail message, to the address you specified, containing information on how to pick up your Digital ID. In the E-mail, you will find a URL to the SafeScrypt Digital ID pickup page and your unique PIN number. Go to the URL included in the E-mail and copy (CTRL +C) your PIN number, from the E-mail, and paste (CTRL+V) it into the field on pickup page. Click the 'Submit' button to proceed. See Figure 1.3 below. Note: since you will be installing your Digital ID in Netscape, you must go to the pickup page using Netscape Communicator. This causes the Digital ID to be installed in your browser, in turn, allowing the Netscape mail client to locate it.


Figure 1.3

Verify that your Digital ID pickup has been successful

1. To verify that your Digital ID has been installed in Netscape, open Netscape Communicator and click on the 'Security' button at the top of the browser window.
2. Under 'Certificates', click on "Yours". (Figure 1.4) You should see your digital ID

Figure 1.4

Sending Signed/Encrypted Mail

1. Click on 'Messenger'. (Figure 1.5)
2. Be sure that "Encrypt mail messages, when it is possible" and "Sign mail messages, when it is possible", are checked.
3. In the field "Certificate for your Signed and Encrypted Messages", select your Digital ID.

Figure 1.5