Forum Discussion

Jay Hampton's avatar
Jay Hampton
Copper Contributor
Jan 05, 2018

Email Encryption in Office 365 with Azure

Hi All,   I'm trying to setup office 365 Email encryption and having some issues. Following these instructions:   http://office365support.ca/setup-and-enable-office-365-message-encryption/ ...
azure
TROY MORETTI's avatar
TROY MORETTI
Copper Contributor
Mar 01, 2018

First download  - https://www.microsoft.com/en-us/download/details.aspx?id=30339

Then follow the updated instructions - https://support.office.com/en-us/article/Set-up-new-Office-365-Message-Encryption-capabilities-built-on-top-of-Azure-Information-Protection-7ff0c040-b25c-4378-9904-b1b50210d00e?ui=en-US&rs=en-US&ad=US

 

  • Mark Souva's avatar
    Mark Souva
    Copper Contributor
    Mar 02, 2018

    When I run the import part I get the following: 

     

    Import-RMSTrustedPublishingDomain -RMSOnline -name "RMS Online"
    This cmdlet is deprecated.  The Trusted Publishing Domain (TPD) for your organization is managed in Microsoft Azure Rights Management.  For more information, see http://go.microsoft.com/fwlink/p/?LinkId=789272.

     

    • null null's avatar
      null null
      Copper Contributor
      Aug 11, 2018

      I discovered for those commands that produce "cmdlet deprecated" and "The Trusted Publishing Domain (TPD) for your organization is managed in Microsoft Azure Rights Management" errors you have to first disable any transport rule you have enabled to encrypt email in Exchange admin console then 

       

      Set-IRMConfiguration -InternalLicensingEnabled $false

      Set-IRMConfiguration -InternalLicensingEnabled $false

       

      then the cmdlet

       

      Import-RMSTrustedPublishingDomain -RMSOnline "RMS Online"

       

      should work. If so, then set the above back to $true and re-enable your transport rules. You may have to wait for a period of time for the rule to kick in. I had to do the above because when we ran 

       

      Get-IRMConfiguration

       

      the output showed empty values for RMSOnlineKeySharingLocation, RMSOnlineVersion, ServiceLocation, and PublishingLocation. These values were filled in after successfully running the Import-RMSTrustedPublishingDomain cmdlet.

      • jeffsinit's avatar
        jeffsinit
        Copper Contributor
        May 23, 2019
        This worked for me, thanks!
        "I discovered for those commands that produce "cmdlet deprecated" and "The Trusted Publishing Domain (TPD) for your organization is managed in Microsoft Azure Rights Management" errors you have to first disable any transport rule you have enabled to encrypt email in Exchange admin console then"

        Set-IRMConfiguration -InternalLicensingEnabled $false
        Set-IRMConfiguration -AzureRMSLicensingEnabled $false

        then the cmdlet(s)
        Import-RMSTrustedPublishingDomain -RMSOnline "RMS Online"
        Set-IRMConfiguration –RMSOnlineKeySharingLocation “https://sp-rms.na.aadrm.com/TenantManagement/ServicePartner.svc” for N. America

        Set-IRMConfiguration -AzureRMSLicensingEnabled $true
        Set-IRMConfiguration -InternalLicensingEnabled $true

Resources