Encryption in Office 365 Shobhit Sahay Technical Product Manager Asaf Kashi Group Program Manager

DLP Modules Introduction to Encryption in Office 365 Information Rights Management Office 365 Message Encryption S/MIME

Module 4: S/MIME

S/MIME Government preferred way to secure email communication Based on a published and broadly supported standard Must know recipients public cert to send them encrypted mail Must have private key associated with sending email address to sign email Without having recipients private key, no one can open and view the message Exchange on-prem continues to support S/MIME OWA 2013 support added in SP1

S/MIME in Exchange Online Admin: Admin provisions certificates to users and synchronizes them with Exchange Online Simple Exchange Online configuration for S/MIME OWA behavior Sender: Ability to send signed and encrypted email to intra organization recipients who are properly configured Recipient: Ability to view signed and encrypted emails using OWA and supported clients and reply

S/MIME in Exchange Online Admin Exchange Online configuration options

S/MIME in OWA Compose, send, receive, encrypt and decrypt S/MIME encrypted email in OWA You can select the S/MIME options to encrypt or digitally sign the message when you send the message in OWA. When you receive a digitally signed and encrypted S/MIME email, the digital signature is displayed on the message.

Customer Control - Encryption Solutions in Office 365 Information Rights Management – Encrypt content and restrict usage; usually within own organization or trusted partners Internal company confidential memo Office 365 Message Encryption – Encrypt messages to any SMTP address Personal account statement from a financial institutions S/MIME – Sign and encrypt messages to users using certificates Peer to peer signed communication within a government agency