How the Symmetric key gets generated at client side? Do I Need to install a client side certificate for that?

Question

Hi, I have a requirement in my project where I have to secure the communication between my client application (running on BizTalk Server Send port configured with Office 365 Email adaptor) and Microsoft Office 365 Server. This communication is to be secured by TLS 1.2 and a certificate is provided by MS O365 server during Server hello (handshake process) to later securely exchange the symmetric key generated at client side. Do I need to install another certificate at client side for generating this symmetric key? How is this symmetric key generated at client end? Please help.

Answer 1

@HARSH SHARMA

I don't know how you application works, but there are the information about certificate for Outlook client, it may similar to your application:

For Exchange server, when client want to build a connection with it, the connection will using server side certificate to encrypt the connection. If you are using a certificate which issued by a personal CA, you will need to install the certificate on client side.

In your environment, the certificate is issued by Office 365 which is a public CA, the certificate will be trusted by client by default, you don't need to install certificate on client side.

---

If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

We don't require another certificates client side (BizTalk) to establish a TLS 1.2 connection.

The BizTalk Server needs to trust the certificate however, but as this is one issues by Microsoft, it should be trusted.