This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(51.2, 33%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAM%3C/text%3E%3C/svg%3E)
Hello,
I need to send encrypted emails using PowerShell. Can someone please share the script and pre-requisites. Appreciate your help.
Thx,
Alex
Hi Rich,
Thanks for your response.
I came across this link but is that the only way to send encrypted emails and do we have to sign to encrypt?
Also, The script is referring a certificate but in my case I need to send emails to 100 users that means I need to have 100 certificates for each email?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 74%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERM%3C/text%3E%3C/svg%3E)
You cannot encrypt anything without the public key of the recipient and the private key of the sender. The recipient needs the public key of the sender to decrypt the message.
Signing and encrypting are separate actions, designed to protect against different things. You sign a message to prove it has not been altered (similar to, but not exactly the same way that you'd use the hash value of a file to verify it hasn't been altered). You encrypt a message to protect the contents from anyone except the intended recipient. It's not unusual to receive a signed, unencrypted, message.
You can ask the recipients to send you their public key (assuming they're not using a CA that's part of your organization). You can create a mail-enabled Contact object in the AD for each of them, and store that key in an AD property.
By "encrypted" I'm assuming you mean to sign and encrypt the message body using a certificate, and not just by using an encrypted channel between to SMTP servers?
Maybe something like this?
how-to-sign-and-encrypt-a-message-using-s-mime-in-powershell
