Digital Signature and Encryption Controls in MS Outlook

NDU technically supports encrypting and digitally signing out-going email using Microsoft Outlook 2010 and a DoD-issued Common Access Card (CAC) on NDU's network email servers ("name@ndu.edu"). The following instructions apply only to the use of MS Outlook 2010 on NDU network-based Exchange email servers using a CAC.

Receiving Digitally Signed Email Messages

When you receive a digitally signed email message, a red ribbon appears next to the subject line of the email in your inbox. Once the email is open, the signer’s name appears after “Signed By” in the header of the message, and a red ribbon will appear in the far right corner of the message. Open in the normal manner.

Receiving Encrypted Email Messages​

When you receive an encrypted email message, a padlock appears next to the subject line of the email in your inbox. A gold padlock will appear in the far right corner of the message. When you open the email, you may be prompted to enter your CAC PIN. If the email was sent without access to your current public key, you will not be able to open the email.

Sending Digitally Signed or Encrypted Email Messages

NDU recommends that you toggle your digital signature and encryption options on and off depending upon the type of information you are sending via email message, although it is also acceptable to enable your digital signature for all outgoing email (See “MS Outlook Settings,” below).

To toggle ON or OFF a digital signature or encryption in MS Outlook, open a “New Email,” click on the “File” tab, and then click on the “Options” tab. You can choose to “Encrypt” or “Sign” this email without affecting the settings for other outgoing email.

MS Outlook Settings

NDU highly recommends that you DO NOT modify your MS Outlook settings to encrypt contents and attachments for ALL outgoing messages, as this may prevent many of your email recipients from opening your email. Encryption works best when the sender and receiver have previously communicated with each other via digitally signed emails, and when both choose and agree to exchange unclassified information that requires encryption.

To modify your MS Outlook settings to digitally sign all outgoing email, click on the “File” tab from your Inbox, and then on “Options” in the left tool bar.

In the “Outlook Options” dialog box that opens, click on “Trust Center” in the left tool bar, and then on “Trust Center Settings.”

In the “Trust Center” dialog box that opens, click on “E-mail Security” in the left tool bar, and then click “Add digital signature to outgoing messages.”