Setting up encryption certificates on Outlook 2016 for Mac

Hello,


I'm trying to send an encrypted email from Outlook, but am having a difficult time setting up the certificates. I don't just want to digitally sign the email, but want to encrypt its contents. I tried creating a certificate in the Certificate Assistant (in Keychain Access), but Outlook said "Mail Mismatch" next to the certificate and gave an error when I tried to use the certificate to send the message. Do you have any ideas? I'm wondering how I can tie my email address to the certificate. If possible, I would rather not have to get a certificate through a third party, since I don't need to encrypt emails often. If you have any solutions that use Apple Mail instead of Outlook, that's fine too.


Thank you very much.

Posted on May 30, 2017 8:26 PM

Reply
2 replies

May 30, 2017 9:08 PM in response to GreenYoshi

Email encryption is not an easy thing to do. One alternative solution I have for you is to use disk utility to create an encrypted disk image containing the file to protect. Then, simply attach that disk image file (.dmg) to a signed email. You will get the benefit of the signed email to tell you that it is unaltered, yet will not need to set up email encryption. You will however need to exchange the disk image passphrase with the recipient in some way other than email.

May 31, 2017 9:53 AM in response to GreenYoshi

There are two main standards for sending and receiving encrypted emails. One is PGP and the other is S/MIME.


As far as I am aware Outlook for Mac has built-in support for S/MIME as does Apple Mail. Neither has built-in support for PGP. There are two possible ways to add support for PGP, one is a free package called GPG Suite but this only supports Apple Mail, the other is a commercial product called PGP Desktop from Symantec. As far as I can tell PGP Desktop for Mac only supports Apple Mail and Gmail aka Google Mail.


Therefore we can assume you are trying to setup and use S/MIME in Outlook for Mac.


The way S/MIME works is that each person needs their own S/MIME email SSL certificate. Yes in theory you can create your own although I am dubious about how well Apple's Keychain Access tool does this.


Instead I strongly recommend getting an official S/MIME certificate. It is possible to get a free one which lasts for a year, you then need to get a new one when it expires again free of charge. The benefit of getting an official one is that it will be far more easily 'trusted' by other parties. The one I use I get here https://www.comodo.com/home/email-security/free-email-certificate.php


The S/MIME certificate is linked to your email address. Once you have your own S/MIME certificate installed in your Keychain you need to send a signed only email to the person you want to exchange emails with. They then need to reply with an email again signed only with their S/MIME certificate. Once you have exchanged signed only emails, you should then be able to send encrypted emails to/from that person.


I have not tried this with Outlook but the above is how it works with Apple Mail and is very easy and practically automatic. The only occasion it proved less easy was when we had to communicate with someone who was using a self-signed S/MIME certificate and we then had to manually add and trust their self-signed rootCA and intermediaryCA certificates.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Setting up encryption certificates on Outlook 2016 for Mac

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.