Email Encryption

Nandan NK 50

Hello Team,

I we have created exchange transport rule to encrypt the email, this is working as expected but for few users we see below error when they try to send email, can someone help on this.

Rule: User's image

Error: Fail | Reason: [{LED=550-5.7.162 OmeEncryptionAgent; Permanent Failure 550-5.7.162 Exception encountered: RmException. 550-5.7.162 Exception message: Failed to bootstrap tenant. FailureCode:RMSFailure. Recoverable:False.. 550 5.7.162 Please contact your system administrator for more information.};{MSG=};{FQDN=};{IP=};{LRT=}]

Thanks

Mike Hu-MSFT 4,140 Reputation points Microsoft Vendor

2024-07-22T01:30:30.9633333+00:00

Any updates so far? If you have solved your problem, could you share with us? Maybe it will help more people with similar problems. Don't forget to mark it as answer, this will be easy for other community members to find the useful one.

1 answer

Mike Hu-MSFT 4,140 Reputation points Microsoft Vendor

2024-07-17T08:35:54.5866667+00:00

Hi,

Thanks for posting your question in Microsoft Q&A forum.

Based on your description, the error suggests a failure in the Rights Management System (RMS) when attempting to process the tenant's encryption requirements.

Have you verified that whether Azure Rights Management is active? If not, then you can manually activate Azure Rights Management. You can also verify Microsoft Purview Message Encryption configuration in Exchange Online PowerShell. Just follow the steps in this link: Set up Microsoft Purview Message Encryption | Microsoft Learn.

Please feel free to contact me for any updates.
Please sign in to rate this answer.
Nandan NK 50 Reputation points

2024-07-17T14:09:57.74+00:00

Yes, I have verified also I have performed the test and got result PASS.

Nandan NK 50 Reputation points

2024-07-18T07:29:29.1033333+00:00

Anyone can help further on this please!?

Mike Hu-MSFT 4,140 Reputation points Microsoft Vendor

2024-07-18T09:30:38.3066667+00:00

Make sure that the users affected have the appropriate licenses assigned that include Azure Rights Management，such as an Enterprise E3 or E5 license.

Run diagnostic tests available in the Office 365 admin center to identify and resolve RMS issues.

Go to Support > New service request.

Describe the issue, and the diagnostic tool will help you identify potential problems.

Here is also a thread discussing this issue for your reference: Remote server returned '550-5.7.162 OmeEncryptionAgent

Nandan NK 50 Reputation points

2024-07-24T11:59:34.4066667+00:00

Hello @Mike Hu-MSFT

Thanks for reply,
I have validated the https://community.spiceworks.com/topic/2485042-remote-server-returned-550-5-7-162-omeencryptionagent settings but we have all settings in please.

regarding the license part can you please let me know who should have Enterprise E3 or E5 license assigned, sender or recipient.

Mike Hu-MSFT 4,140 Reputation points Microsoft Vendor

2024-07-25T01:20:14.8733333+00:00

The sender needs an Enterprise E3 or E5 license to be able to apply the encryption.

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Deleted

This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.

Mike Hu-MSFT 4,140 Reputation points Microsoft Vendor

2024-07-25T08:43:30.9066667+00:00

Yes, you can refer to this link:https://learn.microsoft.com/en-us/purview/ome-faq?source=recommendations
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Email Encryption

1 answer

Your answer