SOLVED

Office 365 Message Encryption - Encrypt from Outlook

%3CLINGO-SUB%20id%3D%22lingo-sub-237873%22%20slang%3D%22en-US%22%3EOffice%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237873%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20configured%20Message%20Encryption%20and%20it%20seems%20to%20be%20running%20smooth%20%3A)%3C%2Fimg%3E%3C%2FP%3E%3CP%3EMy%20question%20is%20-%20instead%20of%20using%20transport%20rules%2C%20is%20it%20possible%20to%20change%20the%20templates%20so%20I%20can%20set%20%22Encrypt%22%20from%20the%20Outlook%20ribbon%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-237873%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EExchange%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EOffice%20365%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-239373%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-239373%22%20slang%3D%22en-US%22%3EThis%20really%20is%20a%20new%20feature.%3CBR%20%2F%3EI've%20changed%20the%20update%20channel%2C%20and%20not%20ENCRYPT%20is%20there.%3CBR%20%2F%3EThanks%20a%20lot%20guys%20%3A)%3C%2Fimg%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-238517%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-238517%22%20slang%3D%22en-US%22%3EYou%20said%20you%20had%20the%20latest%20version%20of%20Office%20365%20Pro%20Plus%20-%20but%20which%20deployment%20channel%3F%20It%20needs%20to%20be%20Current%20Channel%20to%20see%20this%20feature%20as%20it%20is%20new.%20If%20you%20are%20on%20any%20of%20the%20deferred%20channels%20(Semi%20Annual%20Channel%20for%20example)%20you%20will%20not%20see%20it%20(yet)%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237973%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237973%22%20slang%3D%22en-US%22%3EBut%20I'm%20still%20not%20seeing%20Encrypt%20Only%3F%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237972%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237972%22%20slang%3D%22en-US%22%3ENearly%20correct.%20There%20are%20two%20options.%20%22Do%20Not%20Forward%22%20and%20%22Encrypt-Only%22%20(Outlook%20wording)%3CBR%20%2F%3E%3CBR%20%2F%3EBoth%20apply%20rights%20management%2C%20so%20both%20are%20encrypted%2C%20but%20DNF%20has%20additional%20policies%20on%20it%20that%20restrict%20sharing%20and%20forwarding.%20Encrypt-Only%20has%20emphasis%20on%20the%20'only'%20in%20that%20the%20message%20is%20encrypted%20but%20everything%20else%20is%20possible.%20That%20is%2C%20with%20Encrypt-Only%20the%20recipient%20can%20print%2C%20forward%2C%20share%20etc.%20When%20forwarding%20it%20remains%20encrypted%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237971%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237971%22%20slang%3D%22en-US%22%3E%3CP%3EWell.%20Seems%20to%20be%20%22hidden%22%20in%20the%20%22Do%20not%20forward%22%20choice.%26nbsp%3B%3C%2FP%3E%3CP%3EWhen%20using%20do%20not%20forward%20-%20it%20seems%20to%20be%20encrypted.%20Correct%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237958%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237958%22%20slang%3D%22en-US%22%3EIt%20is%20installed%20last%20week%20from%20the%20O365%20portal%20-%20all%20up%20to%20date.%3CBR%20%2F%3ECan%20I%20change%20the%20template%2C%20so%20it%20is%20possible%20to%20press%20ENCRYPT%20instead%20of%20creating%20a%20transport%20rule%3F%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237954%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237954%22%20slang%3D%22en-US%22%3EAs%20written%20above.%20The%20feature%20is%20still%20rolling%20out.%20You%20need%20the%20latest%20Office%20365%20Pro%20Plus%20release%20to%20see%20this.%20It%20does%20not%20appear%20in%20the%20MSI%20release%20as%20far%20as%20I%20have%20been%20able%20to%20tell.%20The%20OME%20general%20configuration%20was%20automatically%20rolled%20out%20to%20all%20tenants%20early%20Aug.%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237946%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237946%22%20slang%3D%22en-US%22%3E%3CP%3EOkay%2C%20probably%20your%20Outlook%20just%20hasn't%20downloaded%20the%20new%20%22Encrypt%22%20template%20yet.%20You%20can%20manually%20refresh%20templates%3A%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Frefresh-templates%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fazure%2Finformation-protection%2Frefresh-templates%3C%2FA%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237942%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237942%22%20slang%3D%22en-US%22%3EFrom%20OWA%20I%20can%20choose%20%22Encrypt%22%20-%20actually%2C%20its%20this%20funtion%20I'm%20missing%20in%20Outlook!%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237941%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237941%22%20slang%3D%22en-US%22%3EHi%2C%3CBR%20%2F%3EIm%20having%20the%20Protect%20button%2C%20but%20from%20the%20menu%20I%20can%20choose%3A%3CBR%20%2F%3E-%20Confidential%3CBR%20%2F%3E-%20Highly%20Confidential%3CBR%20%2F%3E-%20Do%20not%20Forward%3CBR%20%2F%3EI%20dont%20see%20an%20option%20to%20choose%20%22Encrypt%22.%3CBR%20%2F%3EWhen%20applying%20a%20transport%20rule%20to%20set%20encryption%2C%20its%20working%20as%20intended.%20But%20I%20really%20would%20like%20the%20option%20to%20Choose%20%22Encrypt%22%20from%20the%20protect%20button.%3CBR%20%2F%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237914%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237914%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20you%20see%20the%20protect%20button%3F%20If%20not%2C%20you%20might%20have%20not%20completed%20the%20OME%20configuration.%20See%20my%20%3CA%20href%3D%22http%3A%2F%2Fo365blog.com%2Fpost%2Fencrypt-email%2F%23configuration%22%20target%3D%22_self%22%20rel%3D%22nofollow%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%20noopener%20noreferrer%22%3Eblog%20post%3C%2FA%3E%20here%20for%20configuration%20instruction.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-237881%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-237881%22%20slang%3D%22en-US%22%3EIf%20you%20are%20running%20the%20latest%20version%20of%20Office%20ProPlus%20365%20then%20you%20have%20this%20feature%20already%20(or%20will%20do%20soon).%20It%20is%20currently%20rolling%20out%2C%20so%20you%20might%20have%20it%20already.%20Its%20been%20in%20OWA%20since%20about%20Feb%202018%20as%20well.%20In%20OWA%2C%20click%20Protect%20button%20and%20then%20change%20the%20protection%20from%20Do%20Not%20Forward%20to%20Encrypt.%20In%20Outlook%2C%20new%20email%20%26gt%3B%20Options%20%26gt%3B%20Permissions%20%26gt%3B%20OrgName%20%26gt%3B%20Encrypt-Only%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-668879%22%20slang%3D%22en-US%22%3ERe%3A%20Office%20365%20Message%20Encryption%20-%20Encrypt%20from%20Outlook%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-668879%22%20slang%3D%22en-US%22%3EEverything%20appears%20to%20be%20enabled%20on%20my%20end%20--%20I%20can%20select%20Encrypt%20Only%20--%20but%20I%20get%20an%20Invalid%20Certificate%20message%20when%20I%20try%20to%20send.%20I%20followed%20other%20instructions%20to%20install%20a%20certificate%20(which%20I%20thought%20should%20already%20be%20there%20for%20Office%20365%20E3)%2C%20but%20none%20are%20listed%20as%20available.%20Can%20someone%20point%20me%20in%20the%20right%20direction%3F%3C%2FLINGO-BODY%3E
Highlighted
Contributor

Hi,

 

I have configured Message Encryption and it seems to be running smooth :)

My question is - instead of using transport rules, is it possible to change the templates so I can set "Encrypt" from the Outlook ribbon?

13 Replies
Highlighted
If you are running the latest version of Office ProPlus 365 then you have this feature already (or will do soon). It is currently rolling out, so you might have it already. Its been in OWA since about Feb 2018 as well. In OWA, click Protect button and then change the protection from Do Not Forward to Encrypt. In Outlook, new email > Options > Permissions > OrgName > Encrypt-Only
Highlighted

Can you see the protect button? If not, you might have not completed the OME configuration. See my blog post here for configuration instruction.

Highlighted
Hi,
Im having the Protect button, but from the menu I can choose:
- Confidential
- Highly Confidential
- Do not Forward
I dont see an option to choose "Encrypt".
When applying a transport rule to set encryption, its working as intended. But I really would like the option to Choose "Encrypt" from the protect button.
Highlighted
From OWA I can choose "Encrypt" - actually, its this funtion I'm missing in Outlook!
Highlighted

Okay, probably your Outlook just hasn't downloaded the new "Encrypt" template yet. You can manually refresh templates: https://docs.microsoft.com/en-us/azure/information-protection/refresh-templates

 

Highlighted
As written above. The feature is still rolling out. You need the latest Office 365 Pro Plus release to see this. It does not appear in the MSI release as far as I have been able to tell. The OME general configuration was automatically rolled out to all tenants early Aug.
Highlighted
It is installed last week from the O365 portal - all up to date.
Can I change the template, so it is possible to press ENCRYPT instead of creating a transport rule?
Highlighted

Well. Seems to be "hidden" in the "Do not forward" choice. 

When using do not forward - it seems to be encrypted. Correct?

Highlighted
Nearly correct. There are two options. "Do Not Forward" and "Encrypt-Only" (Outlook wording)

Both apply rights management, so both are encrypted, but DNF has additional policies on it that restrict sharing and forwarding. Encrypt-Only has emphasis on the 'only' in that the message is encrypted but everything else is possible. That is, with Encrypt-Only the recipient can print, forward, share etc. When forwarding it remains encrypted
Highlighted
But I'm still not seeing Encrypt Only??
Best Response confirmed by Michael Jensen (Contributor)
Solution
You said you had the latest version of Office 365 Pro Plus - but which deployment channel? It needs to be Current Channel to see this feature as it is new. If you are on any of the deferred channels (Semi Annual Channel for example) you will not see it (yet)
Highlighted
This really is a new feature.
I've changed the update channel, and not ENCRYPT is there.
Thanks a lot guys :)
Highlighted
Everything appears to be enabled on my end -- I can select Encrypt Only -- but I get an Invalid Certificate message when I try to send. I followed other instructions to install a certificate (which I thought should already be there for Office 365 E3), but none are listed as available. Can someone point me in the right direction?