Forum Discussion

Børge Holse's avatar
Børge Holse
Copper Contributor
Jun 26, 2020

Problems during encryption of mail

Hi there

We have a problem with encryption of mails. We are using the danish NemID which is a S/Mime method. A couple of weeks ago, we created the contact with the certificate and was able to send encrypted. 

But today we tried again, and it failed. 

We tried from another user, but the same contact.. and the same user but another contact, and it worked. 

We tried deleting the contact and recreating it, restarting the computer but no luck.. My best guess is, that we need to delete the certificate further down before we can reinstall it. 

  • Børge Holse Hello, difficult to say with the attached information. How about deleting the contact, have the contact sending a new signed email to the user, import the certificate/save the contact and try setting it up again.

     

    *edit* had a look at the attached photo. That shows when you do not have your recipient’s public key.

    • Børge Holse's avatar
      Børge Holse
      Copper Contributor
      Is the public key the same as the certificate in the contact? Then we have it
      • ChristianBergstrom's avatar
        ChristianBergstrom
        Silver Contributor

        Børge Holse Hello again and sorry for the late reply. Yes, I did mean that. The contact has to send a signed email message to your user to have him/her save the contact and the cert/public key for the encryption to work. But I get the feeling you already know this.

         

        Another thing that could be causing the issue, as you've done the process all over again, could be that when you send an encrypted email to a recipient the recipient's certificate/public key is used to encrypt it. If the email address of the contact doesn't match the email address in the recipient's certificate, you'll also get the message you attached.

         

        I just did a search and found a page that actually describes it. Don't be alarmed by the old "applies to", it should still be possible if you use the appropriate key.

         

        https://support.microsoft.com/en-us/help/276597/how-to-turn-off-e-mail-matching-for-certificates-in-outlook

         

        Hope it helps!

Resources