End-to-end support for AES email encryption in Outlook (CA to client)

good evening,

before embark on setting entire test environment, trying clarify if knows experience if following scenario correct:

if want support aes encryption in outlook, need instantiate microsoft pki uses cng (crypto next gen) csp. specifically, issuing ca must use cng csp.

if use non-cng csp @ issuing ca, cannot generate certificates outlook able use aes encryption on vista & higher clients. best can 3des.

these statements believe true, , trying confirm. have test environment not use cng and, on windows 7, able send 3des encrypted emails. having researched issue why aes not available, thing seems can differently use cng csp @ ca; or, there templates can change enable aes support.

thanks feedback,

ed p

hi ed-

in 10 minutes, can install second certificate test theory.  can grab free certificate testing variety of vendors, including comodo:

http://www.comodo.com/home/email-security/free-email-certificate.php

the quick test may best route based on information provided.  can decide whether or not bring pki environment latest revision support cng.

brian

Windows Server  >  Security