How to Configure BizTalk Server to Send Signed MIME or SMIME Messages

This topic describes how to configure BizTalk Server to use certificates to send signed MIME/SMIME messages. The procedure below also applies to configuring the sending of signed messages over AS2 transport.

Prerequisites

To perform the procedure in this topic, you must be logged on as a member of the BizTalk Server Administrators group.

To configure BizTalk Server to send signed messages

1. Create a pipeline to send signed messages, as follows:

   Note

   This step is not necessary when configuring AS2 transport for sending signed messages because the AS2Send and AS2EdiSend pipelines that are included in BizTalk Server serve this function.

   1. Create a send pipeline and then drag the MIME/SMIME Encoder pipeline component into the Encode stage of the pipeline.

   2. In the Properties window, configure the MIME/SMIME Encoder pipeline component Signature type property to ClearSign or BlobSign.

      Note

      If you are also using encryption, you can only select BlobSign.

      Note

      You can configure the send pipeline component properties using the BizTalk Server Administration console after the pipeline has been deployed into a BizTalk group.

      Note

      The MIME/SMIME Encoder pipeline component performs both encryption and digital signing (when configured to perform both functions). Therefore, if you are configuring BizTalk Server to send encrypted and signed messages, you can use the same send pipeline. In other words, you do not have to create separate pipelines for encryption and digital signing.

   3. Build and deploy the send pipeline.

2. Configure the send port for sending signed messages, as follows:

   1. Add the BizTalk assembly that you created containing the send pipeline to the BizTalk application that includes the send ports to send signed messages.

      Note

      This step is not necessary when configuring AS2 transport for sending signed messages because the AS2Send and AS2EdiSend pipelines are included in the BizTalk EDI Application in BizTalk Server.

   2. Configure the send port in the BizTalk application with the send pipeline that you created in the previous procedure.

3. Configure the group with a certificate for sending signed messages, as follows:

   1. Configure the BizTalk group with the signing certificate that you installed by expanding the BizTalk group in the BizTalk Server Administration Console, right-clicking BizTalk Group, and then clicking Properties.

   2. Click the Certificate tab, click Browse, select the appropriate certificate, and then click OK.

See Also

Configuring Certificates for MIME or SMIME Messages