Do one of the following:
- On the Encryption Endpoints toolbar, click New.
- In the Task panel, click New encryption endpoint.
The
For each group of settings, click Click here to change these settings, and then follow the instructions on screen.
- You will find extra information about some of the settings later in this topic.
- Some of the settings may not be available in FIPS mode.
In the For mail sent to the area, click Click here to change these settings, and then follow the instructions on screen.
Extra information
| Setting | Description |
|---|---|
| Email address | Enter a maximum of 160 characters. |
| Domain | Enter a fully-qualified domain name, maximum 160 characters. |
Optionally, select Sign the messages using the sender's key to use automatic mail signing.
When the email message is sent, the
In the S/MIME Options area, click Click here to change these settings, and then follow the instructions on screen.
Extra information
| Setting | Description |
|---|---|
| Messages will be signed using the detached format |
S/MIME signatures are usually detached signatures where the signature information is separate from the text being signed. The MIME type for this is multipart/signed with the second part having a MIME subtype of application/(x-)pkcs7-signature. It is possible, however, for mailing list software to change the textual part and invalidate the signature. |
| Messages will be signed using the opaque format |
The secured content in S/MIME messages is actually made up of Multipurpose Internet Mail Extension (MIME) body parts. A plain text message can, therefore, contain an attached signature. This is called a clear-signed message because the message can be read without verifying the signature. An opaque-signed message contains the message and signature combined in a single part that cannot be read except by verifying the signature. |
