S/Mime AzuerAD/ Office 365

Question

Hello,

I would like to implement S/Mime in a pure Office 365 environment, i.e. without a local server. How can I link the certificates to AzureAD users.

Thank's for your anwsers.

Answer 1

Follow the steps for Scenario #1 here: https://techcommunity.microsoft.com/t5/exchange-team-blog/how-to-configure-s-mime-in-office-365/ba-p/584516

Answer 2

1. Create a .SST file for the Trusted Root CA / Intermediate CA of the certificate issued to the users: You can use either Certificate MMC or PowerShellcmdlets to export SST file.
2. Select Microsoft Serialized Certificate Store(.SST) > Click Next and save the SST file.
3. Upload .SST to office 365 server using PowerShell. It could look like this $sst = Get-Content TenantRoot.sst -Encoding Byte)
4. Publish user’s certificate to the Exchange Online GAL (Global Address List) using Outlook. in the Security Settings of the Trust Center.
5. Type Get-Mailbox <user> | FL or FT user in PowerShell to confirm the certificate is published in AAD (Azure Active Directory).
6. The end-user will find the certificate in certificates > personal store