How to Manage S/ MIME for Outlook Web Access

[Pakhi]

I am trying to manage the MIME for Outlook Web Access. I have tried to do lot of things but I am not succeeding. So thought that you members must having some idea about it. Please tell me how to Manage S/ MIME for Outlook Web Access? Since I am not knowing much about it, I am requesting that please explain me in details. Any other information related to the topic would be grateful.

[Saura]

For managing the S/ MIME for Outlook Web Access, you should know about the S/ MIME Control Settings. You can amend the registry on an Exchange 2007 server that has the Client Access server role installed to manage the performance of S / MIME in Outlook Web Access. These modifications are made per server. If you have more than one Client Access server and require the same S / MIME performance on all Client Access servers, you must make the identical changes on each server. Changes to the S / MIME settings in the registry take effect instantaneously and will affect Outlook Web Access users the next time that they take any action that uses the S / MIME control. You do not have to force users to log off or to restart any services.

[Radames]

The subsequent tables list the names, probable values, defaults, and behavior of the registry settings that you can use to manage the behavior of the S / MIME Control in Outlook Web Access.

• Exchange 2007 value name and type - CheckCRLOnSend (DWORD)
  Explanation - By default, if a Certificate Revocation List Distribution Point (CDP) plans in a sender's certificate chain cannot be contacted during revocation substantiation when sending signed or encrypted e-mail, Outlook Web Access not display an admonition notifying the sender that the certificate cannot be verified. Instead, it allows the e-mail to be sent. When is set to true CheckCRLonSend, if a CDP in a sender's certificate chain cannot be accessed during revocation substantiation when sending signed or encrypted e-mail, Outlook Web Access will Indicate a malfunction and thwart The e-mail message from being sent.
  
• Exchange 2007 value name and type - DLExpansionTimeout (DWORD)
  Explanation - This attribute controls how protracted Outlook Web Access will wait, in milliseconds, for an allocation list in Active Directory to enlarge when sending encrypted e-mail before the operation stops working. When sending encrypted e-mail to a distribution list, Outlook Web Access must expand the distribution list to get back the encryption certificate of each recipient for utilize in the encryption operation. The time this operation takes varies depending on the size of the distribution list and the presentation of the fundamental Active Directory infrastructure. While the distribution list is being expanded, the sender will receive no comeback from Outlook Web Access. These attribute specifiers how long Outlook Web Access should wait for the full distribution list to be expanded.
  

[Appaji]

I would like to suggest to use Secondary Proxy Certificates when finding it. The Exchange 2007 value name and type is UseSecondaryProxiesWhenFindingCertificates (DWORD). Outlook Web Access tries to discover the accurate credential in Active Directory for a recipient when sending encrypted e-mail. The certificate subject or subject unconventional name values can contain at SMTP address as one of its values. Because a recipient can have numerous SMTP proxy addresses in the directory, not the subject or subject alternative name of the certificate may match the primary SMTP address. Instead it may match one of the proxy addresses. If UseSecondaryProxiesWhenFindingCertificates is set to true, Outlook Web Access will allow certificates that do not match the primary SMTP address of the recipient as valid. If UseSecondaryProxiesWhenFindingCertificates is set to false, Outlook Web Access will accept as valid only certificates that match the primary SMTP address of the recipient.

[Mrigankasekhar]

CRL Connection timeout stipulates the time, in milliseconds, that Outlook Web Access will remain while connecting to get back a single Certificate Revocation List (CRL) as part of a certificate corroboration operation. Validating a certificate necessitates retrieving the certification authority's CRL from the CRL distribution point that is specified within the certificate. This maneuver must be performed for each certificate in the absolute certificate chain. When multiple CRLs must be retrieved, this key will apply to each connection. For example, if three CRLs must be retrieved and CRLConnectionTimeout seconds is set to 60, each of CRL retrieval operation will have a time-out limit 60 seconds. If the CRL is not retrieved before the time-out limit that is specified, the operation fails. If CRLConnectionTimeout is set to less than 5000, the default value (60000) will be used. If CRLConnectionTimeout is set to the maximum, 2147483647, the connection will not time out.

[Chakradev]

To use Registry Editor to change the S / MIME control settings for Outlook Web Access :

1. Start Registry Editor (regedit).
2. Situate the following registry subkey:
   
   HKLM \ System \ CurrentControlSet \ Services \ MSExchange OWA \ SMIME
3. Discover the key that you want to modify.
4. Set the key to the value that is required by your association.
5. If the key that you need does not exist create, a new DWORD with that name, and then set it to the value that is necessary to your association.