We have a large Oganization that uses PKI exclusively. We hve several Clients that can send but not recieve Encrypted E-Mails. Is there documentation, (Courses/Books) that cover troubleshooting and the proper placement and configuration of Certificates in an Enterprise system.

Hi , Please test on other machine. Please try redoing the steps on client and test again. More informationf for your reference. Encrypt e-mail messages: http://office.microsoft.com/en-001/outlook-help/encrypt-e-mail-messages-HP001230536.aspx] By the way, can you receive uncrypt message on problematic machine ? and is there any error information when you send the crypt email ? Wendy Liu TechNet Community Support

What kind of email encryption are you using? S/MIME? AD-RMS/IRM? My guess is that someone does not have the keys (private/public combination) they need but... It would help to know more: - Are you using Windows PKI (that would be a safe bet but if it's something else we need to know). - If Windows, what version of AD CS? W2K8 or still W2K3? -Exchange version - Outlook version - if you are using Outlook. *** As for the "book" on PKI (assuming Windows PKI), this is it: http://www.amazon.com/Windows-Server-Certificate-Security-PRO-Other/dp/0735625166/ref=la_B001H9RRKE_1_2?ie=UTF8&qid=1358204985&sr=1-2 Brian Komar posts in the Technet Security forum and often provides advice there. http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsPlease mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.

What kind of email encryption are you using? S/MIME? AD-RMS/IRM? My guess is that someone does not have the keys (private/public combination) they need but... It would help to know more: - Are you using Windows PKI (that would be a safe bet but if it's something else we need to know). - If Windows, what version of AD CS? W2K8 or still W2K3? -Exchange version - Outlook version - if you are using Outlook. *** As for the "book" on PKI (assuming Windows PKI), this is it: http://www.amazon.com/Windows-Server-Certificate-Security-PRO-Other/dp/0735625166/ref=la_B001H9RRKE_1_2?ie=UTF8&qid=1358204985&sr=1-2 Brian Komar posts in the Technet Security forum and often provides advice there. http://social.technet.microsoft.com/Forums/en/winserversecurity/threadsPlease mark as helpful if you find my contribution useful or as an answer if it does answer your question. That will encourage me - and others - to take time out to help you.