Hi Everybody,
We are bugged by an issue with S/MIME and Exchange 2010 SP3 for a while now. The problem is that somehow OWA does not seem to get the public certificates from people we want to write emails to. Which means we can sign emails and we can decrypt emails that we receive. But we cannot send encrypted emails. If we try so, we always get the error message:
Outlook Web Access could not find digital ID for encryption. .... if your digital id is not trusted by the exchange server you can't use it to sign messages
For me that error message does not make sense, as I understood s/mime to use the public certificate of the other party to encrypt a message!? Also I can sign my messages, so OWA HAS to know my digital ID.
So far we did the following which worked in the way that we can choose the certificate now, but this did not help:
kb/2497165 (cannot insert full link)
For various reasons we only want to use OWA and not Outlook. Is this even possible? If I analyzed the problem correctly, OWA does not safe the public certificates and this causes the problem?
Would appreciate help very much!
Thanks!