{"id":25,"date":"2009-02-08T01:34:10","date_gmt":"2009-02-08T07:34:10","guid":{"rendered":"http:\/\/www.digitallachance.com\/blog\/?p=25"},"modified":"2009-02-08T01:34:10","modified_gmt":"2009-02-08T07:34:10","slug":"how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook","status":"publish","type":"post","link":"http:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/","title":{"rendered":"How to use a Smart Card to digitally sign your e-mails in Outlook"},"content":{"rendered":"

Where I currently work, we are using smart cards in order to secure Active Directory accounts with elevated privileges.\u00a0 That’s great way to do two-factor authentication because smart cards are integrated in AD natively.\u00a0 In order to force an account to use a smart card, you only have to click on a checkbox on the user account<\/a>.<\/p>\n

In order to be able to digitally sign and encrypt your e-mails, you have to first take the following steps:<\/p>\n

    \n
  1. Import the certificate on your smart card into the IE Store<\/li>\n
  2. Configure Outlook to use the certificate<\/li>\n
  3. Start signing\/encrypting your e-mail<\/li>\n<\/ol>\n

    Sounds simple enough.\u00a0 Let’s get into the details of how we do all of that.<\/p>\n

    The first step is to import the digital certificate that is on the smart card into what is sometimes called the IE store.\u00a0 Since I use Gemalto<\/a>‘s GemSafe drivers, it is fairly easy.<\/p>\n

      \n
    1. I first go to the Certificates section of the Toolbox and click on my certificate.<\/li>\n
    2. This enables the Export…<\/em> button.\u00a0 Click on it to go to the export screen.<\/li>\n
    3. Select Export to IE store<\/em> and make sure that you select Personal<\/em> as the certificate store.<\/li>\n
    4. Click the Export button.<\/li>\n<\/ol>\n

      This puts a copy of the certificate (private and public keys) into your personal store for your use.\u00a0 You can verify that the certificate was imported properly by opening up Internet Explorer, click on Tools<\/em> | Internet Options<\/em> | Content<\/em> | Certificates<\/em>.\u00a0 Your certificate should be listed in the Personal tab.\u00a0 Click on the certificate.\u00a0 This will fill the Certificate intended purposes<\/em> section at the bottom of the dialog box.\u00a0 If Secure Email<\/strong> is not one of the intended purposes, then you will not be able to use this certificate to sign your e-mails.<\/p>\n

      Now the last thing to do is to configure Outlook to use that certificate.<\/p>\n

        \n
      1. In Outlook (I’m using Outlook 2003), click on Tools<\/em> | Options…<\/em> | Security<\/em> tab| Settings…<\/em> button in the Encrypted e-mail<\/em> section.<\/li>\n
      2. Here we need to choose our signing certificate and encryption certificate.\u00a0 Click on the Choose…<\/em> button and select the same certificate in both cases.<\/li>\n
      3. Your Hash Algorithm<\/em> should be SHA1<\/a> <\/strong>because it is stronger than the old MD5<\/strong><\/a>.<\/li>\n
      4. Your Encryption Algorithm<\/em> is probably defaulted to 3DES<\/strong><\/a>, which is the strongest algorithm available.<\/li>\n
      5. Make sure that the checkbox for the Send these certificates with signed messages<\/em> option is checked.\u00a0 This will then allow your recipient to import your certificate (with your public key only) into their store.\u00a0 This way they will be able to encrypt e-mails to you and only you will be able to decrypt them.<\/li>\n<\/ol>\n

        And there you go.\u00a0 The next time you write an e-mail, simply click on the Options…<\/em> button and then the Security Settings…<\/em> button to open the dialog box that will allow you to digitally sign and encrypt your e-mail.\u00a0 Make sure that your smart card is inserted.\u00a0 When you click on the Send<\/em> button, you will be asked to enter your PIN before your e-mail is signed and encrypted in order to confirm your identity.<\/p>\n

        I hope this was helpful to you.\u00a0 Let me know if you have any questions.<\/p>\n\n","protected":false},"excerpt":{"rendered":"

        If you are using smart card in your network only for authentication, you are missing out on the other things you can do to secure your communication with others. This post will show you how to enable your smart card to be used to digitally sign or encrypt your e-mails in Outlook 2003.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[4],"tags":[19,20,24,37,45,48,51],"yoast_head":"\nHow to use a Smart Card to digitally sign your e-mails in Outlook - IT A Digital Life<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\">\n\t<meta name=\"twitter:data1\" content=\"3 minutes\">\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebSite\",\"@id\":\"https:\/\/digitallachance.com\/blog\/#website\",\"url\":\"https:\/\/digitallachance.com\/blog\/\",\"name\":\"IT A Digital Life\",\"description\":\"All things digital\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":\"https:\/\/digitallachance.com\/blog\/?s={search_term_string}\",\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/#webpage\",\"url\":\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/\",\"name\":\"How to use a Smart Card to digitally sign your e-mails in Outlook - IT A Digital Life\",\"isPartOf\":{\"@id\":\"https:\/\/digitallachance.com\/blog\/#website\"},\"datePublished\":\"2009-02-08T07:34:10+00:00\",\"dateModified\":\"2009-02-08T07:34:10+00:00\",\"author\":{\"@id\":\"https:\/\/digitallachance.com\/blog\/#\/schema\/person\/8a2f0b2a18af80d71541deadfac4d02f\"},\"breadcrumb\":{\"@id\":\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"item\":{\"@type\":\"WebPage\",\"@id\":\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/\",\"url\":\"https:\/\/digitallachance.com\/blog\/2009\/02\/how-to-use-a-smart-card-to-digitally-sign-your-e-mails-in-outlook\/\",\"name\":\"How to use a Smart Card to digitally sign your e-mails in Outlook\"}}]},{\"@type\":\"Person\",\"@id\":\"https:\/\/digitallachance.com\/blog\/#\/schema\/person\/8a2f0b2a18af80d71541deadfac4d02f\",\"name\":\"Francois\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\/\/digitallachance.com\/blog\/#personlogo\",\"inLanguage\":\"en-US\",\"url\":\"http:\/\/0.gravatar.com\/avatar\/ce2ee0649f3fb6a643ffff9a9f1e63e4?s=96&d=mm&r=g\",\"caption\":\"Francois\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","_links":{"self":[{"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/posts\/25"}],"collection":[{"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/comments?post=25"}],"version-history":[{"count":0,"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/posts\/25\/revisions"}],"wp:attachment":[{"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/media?parent=25"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/categories?post=25"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/digitallachance.com\/blog\/wp-json\/wp\/v2\/tags?post=25"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}