Q248052: XGEN: Installing Encryption on Exchange Server w. French Setting
Article: Q248052
Product(s): Microsoft Exchange
Version(s): 5.5,8.03,8.5,9.0
Operating System(s):
Keyword(s): kbFEA exc55 kbExchange550SP4Fea
Last Modified: 11-JUN-2002
-------------------------------------------------------------------------------
The information in this article applies to:
- Microsoft Exchange Server, version 5.5
- Microsoft Outlook 97, version 8.03, used with:
- the operating system: Microsoft Windows 98
- the operating system: Microsoft Windows 95
- Microsoft Outlook 2000, version 9.0, used with:
- the operating system: Microsoft Windows 98
- the operating system: Microsoft Windows 95
- Microsoft Outlook 98, version 8.5, used with:
- the operating system: Microsoft Windows 98
- the operating system: Microsoft Windows 95
-------------------------------------------------------------------------------
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:
Q256986 Description of the Microsoft Windows Registry
SUMMARY
=======
Because of French encryption regulations, Microsoft Exchange Server version 5.5
Key Management server (KM server) advanced security was previously unavailable
in France, so the installation program did not install KM server.
Encryption-based security was also disabled in Exchange Server clients, such as
Outlook 98 and Outlook 2000, if they were used in France.
As a result of government approval of Microsoft Exchange Server 5.5 KM server
advanced security (and Outlook 98 and Outlook 2000 clients encryption-based
security) for distribution and use in France, a new Microsoft Exchange Server
5.5 installation program is available that installs KM server in France. For
Exchange Server clients (Outlook 98 and Outlook 2000), you must activate
encryption-based security through the application of a security patch.
For additional information about the latest service pack for Exchange Server 5.5,
click the article number below to view the article in the Microsoft Knowledge
Base:
Q191014 XGEN: How to Obtain the latest the latest Exchange Server 5.5 Service
Pack
MORE INFORMATION
================
The new Exchange Server 5.5 installation program and client security patch are
available separately as part of this feature.
Requirements for Client and Server
----------------------------------
The following are the requirements for clients and servers:
- Microsoft Windows NT 4.0 Service Pack 6a
- Microsoft Windows 98 Second Edition
- Internet Explorer 5.01
Server
------
To use the new KM server installation program and install Exchange Server 5.5 KM
server advanced security in France:
1. Copy the Exchange Server 5.5 retail CD-ROM to a server share.
2. Copy one of the following files, as applicable, to this installation point:
- Srvmin.exe (for an Exchange Server Standard Edition computer)
- Srvmax.exe (for an Exchange Server Enterprise Edition computer)
3. For the French version, rename the file that you copied in the previous step
to Install.exe.
4. Run the Install.exe program.
5. Apply the latest Exchange Server service pack.
6. Add the following keys and values to the registry:
WARNING: If you use Registry Editor incorrectly, you may cause serious problems
that may require you to reinstall your operating system. Microsoft cannot
guarantee that you can solve problems that result from using Registry Editor
incorrectly. Use Registry Editor at your own risk.
a. Start Registry Editor (Regedt32.exe).
b. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults
c. On the Edit menu, click Add Key, and then add the following registry
value:
Value Name: CheckInfo
Class:
d. Select the following new key in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\CheckInfo
e. On the Edit menu, click Add Value, and then add the following registry
value:
Value Name: Mask
Data Type: REG_DWORD
Value: 3
f. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft
Exchange Cryptographic Provider v1.0
NOTE: The above registry key is one path; it has been wrapped for
readability.
g. On the Edit menu, click Add Value, and then add the following registry
value:
Value Name: FrenchEncryptionPermissions
Data Type: REG_SZ
Value: {8c7e4f00-20fc-11d2-9c60-0060979387ea}
NOTE: The parentheses are part of the string.
h. Quit Registry Editor.
Client
------
- To install encryption security for Outlook 97 or Outlook 2000, add the same
registry keys that are added in the "Server" section of this article.
- To install encryption security for Outlook 98, add the following registry
keys and values:
a. Start Registry Editor (Regedt32.exe).
b. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults
c. On the Edit menu, click Add Key, and then add the following registry
value:
Value Name: CheckInfo
Class:
d. Select the following new key in the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\CheckInfo
e. On the Edit menu, click Add Value, and then add the following registry
value:
Value Name: Mask
Data Type: REG_DWORD
Value: 3
f. Locate the following key in the registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\8.0\Outlook
g. On the Edit menu, click Add Key, and then add the following registry
value:
Value Name: Security
Class:
h. Select the following new key in the registry:
HKEY_LOCAL_MACHINE\Software\Microsoft\Office\8.0\Outlook\Security
i. On the Edit menu, click Add Value, and then add the following registry
value:
Value Name: FrenchEncryptionPermissions
Data Type: REG_SZ
Value: {C62A69F0-16DC-11CE-9E98-00AA00574A4F}
NOTE: The parentheses are part of the string.
j. Quit Registry Editor.
Additional query words: KMS OL98 OL97 OL2K OL2000
======================================================================
Keywords : kbFEA exc55 kbExchange550SP4Fea
Technology : kbOutlookSearch kbExchangeSearch kbZNotKeyword2 kbOutlook97Search kbZNotKeyword3
Version : :5.5,8.03,8.5,9.0
Issue type : kbbug
Solution Type : kbfix
=============================================================================
THE INFORMATION PROVIDED IN THE MICROSOFT KNOWLEDGE BASE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND. MICROSOFT DISCLAIMS ALL WARRANTIES, EITHER EXPRESS OR IMPLIED, INCLUDING THE WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. IN NO EVENT SHALL MICROSOFT CORPORATION OR ITS SUPPLIERS BE LIABLE FOR ANY DAMAGES WHATSOEVER INCLUDING DIRECT, INDIRECT, INCIDENTAL, CONSEQUENTIAL, LOSS OF BUSINESS PROFITS OR SPECIAL DAMAGES, EVEN IF MICROSOFT CORPORATION OR ITS SUPPLIERS HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. SOME STATES DO NOT ALLOW THE EXCLUSION OR LIMITATION OF LIABILITY FOR CONSEQUENTIAL OR INCIDENTAL DAMAGES SO THE FOREGOING LIMITATION MAY NOT APPLY.
Copyright Microsoft Corporation 1986-2002.