Personal Digital ID

Microsoft Outlook 2000 Instructions

Introduction
You can use a GeoTrust My Credential certificate to send and receive secure e-mail messages over the Internet with Outlook 2000. Outlook 2000 supports the Secure Multi-Purpose Internet Messaging Extensions (S/MIME) protocol; My Credential conforms to this standard allowing you to use this for encrypted e-mail.

Instructions on how to:
• Obtain a GeoTrust S/MIME certificate for use with Outlook 2000
• Backup or copy a digital ID
• Move a digital ID to another computer
• Send a signed message — Add a digital ID to your 'Contacts' list
• Send an encrypted (sealed) message
• Sign or encrypt all messages you send

Obtain a GeoTrust My Credential certificate for use with Outlook 2000
In order to send and receive secure messages in Outlook 2000 you must have a digital certificate. To obtain a certificate, please use the information below.

Get a GeoTrust My Credential certificate:
Obtain your certificate here: http://www.geotrust.com/smime/

Enrollment Process:

1. Complete enrollment and verification process.

2. Go to your custom certificate pick-up page to obtain your new certificate.

3. Click on 'INSTALL' button.

Note: In order to complete the certificate installation process, you must complete both the enrollment process and certificate pickup process using the same browser.

Configuring Outlook 2000 to use your certificate (Figure 1)
After your certificate has been installed the following tasks must be completed to enable Outlook 2000 for secure e-mail.

1. Open Outlook 2000 and select the 'Tools' menu.

2. Select 'Options' and click on the 'Security' tab.

figure 1

3. Click on the 'Settings' button

4. There are two 'Choose.' buttons. (Figure 2) The first allows you to select the certificate you want to use to sign your e-mails and the second allows you to select the certificate that you want to use to encrypt your e-mail messages. Please click on both 'Choose' buttons and select your GeoTrust certificate. When done, select 'OK' to finish.

figure 2

To Backup or Copy a GeoTrust My Credential certificate

1. On the 'Tools' menu, click 'Options', and then click the 'Security' tab.

2. Click 'Import/Export digital ID'.

3. Click to select 'Export your digital ID to a file' and then click 'Select'.

4. Click to select the certificate you want to back up, and then click 'OK'.

5. To remove the digital ID from this computer, click to select the 'Delete Security Information Digital ID from System' check box.

6. In the 'Password' box, type the password for this certificate.

7. Type or browse to the path and file name for your digital ID and then click 'OK'.

Outlook saves your digital ID as a .pfx file.

To Move a Digital ID to Another Computer

1. Copy the .pfx file you created to the new computer.

2. On the new computer in Outlook, on the 'Tools' menu, click 'Options' and then click the 'Security' tab.

3. Click 'Import/Export digital ID'.

4. Click to select 'Import existing digital ID from a file'.

5. Type or browse to the .pfx file created above and type the password.

6. In the 'Password' box, type the password you assigned to your GeoTrust My Credential certificate.

7. In the 'Digital ID Name' box, type a description for your GeoTrust My Credential certificate and click 'OK'. Your GeoTrust certificate is now available on the new computer.

To Send a Signed Message

1. Open a new message.

2. On the 'View' menu, click 'Options'.

3. Click to select the 'Add digital signature to outgoing message' check box, and then click 'Close'.

4. Complete and send the message.

The message received is marked with a certificate icon in the lower-right corner of the header. The recipient can click this icon to see validation information about your digital signature.

To add another individual's certificate to Your 'Contacts' List
To send someone an encrypted message, you need a copy of that person's S/MIME certificate. Have the person send you a digitally signed message; when you receive the message, follow these steps:

1. Open the digitally signed message.

2. Right-click the name in the 'From' field, and on the shortcut menu click 'Add To Contacts'.

3. If you have an entry for this person on your 'Contacts' list, click 'Update This Address'.

The S/MIME certificate is stored with your contact entry for this person.You can now send encrypted e-mail messages to this person. To view the certificates for a contact, double-click the person's name, and then click the 'Certificates' tab.

To Send an Encrypted (Sealed) Message

1. Open a new message.

2. On the 'View' menu, click 'Options'.

3. Click to select the 'Encrypt message contents and attachments' check box, and then click 'Close'.

4. Complete and send the message.

The message received is marked by a lock icon in the lower-right corner of the header. The recipient can click this icon to see validation information about the encryption certificate.

NOTE: When sending an encrypted message you may receive the following 'Non- Secure Recipients' message: "None of the recipients can process an encrypted message. You can either proceed with an unencrypted message or cancel the operation."

This is because you addressed the message using the 'Global Address' list or other non-contact address source. You must use the contact record containing the recipient's digital ID to address the message.

To Sign or Encrypt All Messages You Send

1. On the 'Tools' menu, click 'Options'.

2. On the 'Security' tab, click to select 'Encrypt contents and attachments for outgoing messages' or 'Add digital signature to outgoing messages' and then click 'OK'.

NOTE: To specify that recipients whose e-mail clients do not support S/MIME signatures are allowed to read the message without verification of the digital signature, click to select 'Send clear text signed message'.