Forum Discussion

ashmelburnian's avatar
ashmelburnian
Brass Contributor
Jun 01, 2020

External users cannot open encrypted email

Hi all, I searched the communities but couldn't find the answers I need in regards to Office 365 Message Encryption.   We have a customer that wants to send encrypted emails from Outlook.   When ...
microsoft 365
  • PeterRising's avatar
    PeterRising
    Jun 04, 2020

    ashmelburnian 

     

    Hi, I received your test message and whilst I was unable to access it via the Gmail web interface, I was able to open it via Outlook using the AIP viewer.  This is going to be the only way that the Gmail users will be able to do this.

     

    As ChristianBergstrom pointed out, the options you are using for encryption are the built-in OME / and older default AIP templates.  I would recommend taking a look at updating your labels and policies.  Could be a good time to start looking to migrate to Sensitivity Labels from the Security and Compliance Center, as Microsoft are planning to "sunset" the older AIP method in 2021 as per https://techcommunity.microsoft.com/t5/azure-information-protection/announcing-timelines-for-sunsetting-label-management-in-the/ba-p/1226179

     

    But, for the meantime, if you want Gmail accounts to access the encrypted emails, then Outlook and the. AIP viewer is going to be the way.

Phil_M650's avatar
Phil_M650
Copper Contributor

piekedahla 

Thanks for the reply. So a full switch to Azure rather that just the Azure access given to you via a 365 subscription?

piekedahla's avatar
piekedahla
Copper Contributor
May 11, 2022
We had to migrate to Azure Information protection:

Set up new Message Encryption capabilities (https://docs.microsoft.com/en-us/microsoft-365/compliance/set-up-new-message-encryption-capabilities?view=o365-worldwide&viewFallbackFrom=o365-worldwideCopy)

Important
If you use Active Directory Rights Management service (AD RMS) with Exchange Online, you need to migrate to Azure Information Protection before you can use the new OME capabilities. OME is not compatible with AD RMS.

Resources