Managing Domain Security

Microsoft Exchange Server 2007 will reach end of support on April 11, 2017. To stay supported, you will need to upgrade. For more information, see Resources to help you upgrade your Office 2007 servers and clients.

 

Applies to: Exchange Server 2007, Exchange Server 2007 SP1, Exchange Server 2007 SP2, Exchange Server 2007 SP3

Domain Security refers to the set of functionality in Microsoft Exchange Server 2007 and Microsoft Office Outlook 2007 that provides a relatively low-cost alternative to S/MIME or other message-level security solutions. The purpose of the Domain Security feature set is to provide administrators a way to manage secured message paths over the Internet with business partners. After these secured message paths are configured, messages that have successfully traveled over the secured path from an authenticated sender are displayed to users as "Domain Secured" in the Outlook and Outlook Web Access interface.

Domain Security uses Transport Layer Security (TLS) with mutual authentication to provide session-based authentication and encryption. Managing Domain Security requires configuring TLS with mutual authentication on Edge Transport servers and then specifying the business partners by domain name in the transport configuration.

For more information, see the following topics:

• How to Enable PKI on the Edge Transport Server for Domain Security

• Creating a Certificate or Certificate Request for TLS

• How to Configure Mutual TLS for Domain Security

• How to Fix Certificate Validation Errors

• How to Test PKI and Proxy Configuration

• Domain Security White Paper

Using Exchange Hosted Services

Message-level encryption is enhanced by or is also available as a service from Microsoft Exchange Hosted Services. Exchange Hosted Services is a set of four distinct hosted services:

• Hosted Filtering   This service helps organizations protect themselves from e-mail-borne malware.

• Hosted Archive   This service helps organizations satisfy retention requirements for compliance.

• Hosted Encryption   This service helps organizations encrypt data to preserve confidentiality.

• Hosted Continuity   This service helps organizations preserve access to e-mail during and after emergency situations.

These services integrate with any on-premise Exchange servers that are managed in-house or Hosted Exchange e-mail services that are offered through service providers. For more information about Exchange Hosted Services, see Microsoft Exchange Hosted Services.