Error messages using security in Outlook 2000 (195670)


The information in this article applies to:

  • Microsoft Outlook 2000
This article was previously published under Q195670

SYMPTOMS

When you send or receive a signed or encrypted message using a Verisign certificate with Microsoft Outlook 2000, you may receive the following error message:
Your key set cannot be found by the underlying security system.
If you try to reinstall the security certificate, you may receive the following error when sending a message:
This message could not be secured using the selected security settings. Your e-mail address may not match the e-mail address on the certificate, or some other problem exists with the certificate. Do you want to proceed with the message without security?"

CAUSE

You pressed ESC at the Windows Logon dialog box and so failed to log on to Windows.

-or-

You deleted your Windows Password file (*.pwl). Outlook uses this file as part of the security key set. If you fail to log on to Windows or delete the password file, the key set is incomplete and you will not be able to use your security certificate.

RESOLUTION

Be sure to log on to Windows by entering your password in the Windows Logon dialog box.

-or-

If you deleted your password file, contact your security provider and obtain a new security ID.

MORE INFORMATION

If you find it necessary to delete your Windows password file, you can export your certificate and delete your security ID before deleting the password file. Then, after you rebuild the password file by logging in to Windows with your password, you can re-import your Certificate.

If you try to export the certificate after you delete the password file, you will receive the following error message:

An error occurred trying to export security information.

To Export Your Certificate and Delete Your Security ID

  1. On the Tools menu, click Options.
  2. On the Security tab, click "Import/Export Digital ID."
  3. Click to select "Export your Digital ID to a file" and click Select.
  4. Click to select the certificate you wish to Export and click OK.
  5. Type a file name in the form <name.pfx>, into the Filename box.
  6. Type a password in the Password box. You will need this password to re-import this file.
  7. Click to select "Delete Digital ID from system" and click OK.

    NOTE: If you have more than one certificate, you will need to repeat this procedure for each certificate.
Delete your Password file from the Windows folder and close Windows. Then restart Windows and log on with your password.

To Import Your Certificate

  1. On the Tools menu, click Options.
  2. On the Security tab, click "Import/Export Digital ID."
  3. Click to select "Import existing Digital ID from a file."
  4. Type the name or Browse to the file you created when you exported the certificate and click Open.
  5. In the Password box, type the password you assigned when you exported the certificate.
  6. Type a name in the Digital ID Name box and click OK.

To Reinitialize Your Security Settings

  1. On the Tools menu, click Options.
  2. On the Security tab, click Setup Secure E-mail.
  3. In the Signing Certificate section, click Choose.
  4. Click to select the certificate you wish to use and click OK.
  5. Repeat steps 3 and 4 for the Encryption Certificate and then press OK and OK to exit.
If you find that you need to replace the digital ID but wish to send mail without digital security, follow these steps to disable security:

  1. On the Tools menu, click Options. Click the Security tab.
  2. In Secure E-mail, click to clear, "Encrypt contents and attachments for outgoing messages" and "Add digital signature to outgoing messages"
Modification Type:MajorLast Reviewed:12/2/2004
Keywords:kbprb KB195670
©2004 Microsoft Corporation. All rights reserved.