XGEN: Installation and Use of Encryption on Exchange Server with French Settings (248052)


The information in this article applies to:

  • Microsoft Exchange Server 5.5
  • Microsoft Outlook 97 8.03, when used with:
    • the operating system: Microsoft Windows 98
    • the operating system: Microsoft Windows 95
  • Microsoft Outlook 98 8.5, when used with:
    • the operating system: Microsoft Windows 98
    • the operating system: Microsoft Windows 95
This article was previously published under Q248052
IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SUMMARY

Because of French encryption regulations, Microsoft Exchange Server version 5.5 Key Management server (KM server) advanced security was previously unavailable in France, so the installation program did not install KM server. Encryption-based security was also disabled in Exchange Server clients, such as Outlook 98 and Outlook 2000, if they were used in France.

As a result of government approval of Microsoft Exchange Server 5.5 KM server advanced security (and Outlook 98 and Outlook 2000 clients encryption-based security) for distribution and use in France, a new Microsoft Exchange Server 5.5 installation program is available that installs KM server in France. For Exchange Server clients (Outlook 98 and Outlook 2000), you must activate encryption-based security through the application of a security patch.

For additional information about the latest service pack for Exchange Server 5.5, click the article number below to view the article in the Microsoft Knowledge Base:

191014 XGEN: How to Obtain the latest the latest Exchange Server 5.5 Service Pack

MORE INFORMATION

The new Exchange Server 5.5 installation program and client security patch are available separately as part of this feature.

Requirements for Client and Server

The following are the requirements for clients and servers:
  • Microsoft Windows NT 4.0 Service Pack 6a
  • Microsoft Windows 98 Second Edition
  • Internet Explorer 5.01

Server

To use the new KM server installation program and install Exchange Server 5.5 KM server advanced security in France:
  1. Copy the Exchange Server 5.5 retail CD-ROM to a server share.
  2. Copy one of the following files, as applicable, to this installation point:
    • Srvmin.exe (for an Exchange Server Standard Edition computer)
    • Srvmax.exe (for an Exchange Server Enterprise Edition computer)
  3. For the French version, rename the file that you copied in the previous step to Install.exe.
  4. Run the Install.exe program.
  5. Apply the latest Exchange Server service pack.
  6. Add the following keys and values to the registry: WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

    1. Start Registry Editor (Regedt32.exe).
    2. Locate the following key in the registry:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults

    3. On the Edit menu, click Add Key, and then add the following registry value:

      Value Name: CheckInfo
      Class:

    4. Select the following new key in the registry:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\CheckInfo

    5. On the Edit menu, click Add Value, and then add the following registry value:

      Value Name: Mask
      Data Type: REG_DWORD
      Value: 3

    6. Locate the following key in the registry:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Exchange Cryptographic Provider v1.0

      NOTE: The above registry key is one path; it has been wrapped for readability.
    7. On the Edit menu, click Add Value, and then add the following registry value:

      Value Name: FrenchEncryptionPermissions
      Data Type: REG_SZ
      Value: {8c7e4f00-20fc-11d2-9c60-0060979387ea}

      NOTE: The parentheses are part of the string.
    8. Quit Registry Editor.

Client

  • To install encryption security for Outlook 97 or Outlook 2000, add the same registry keys that are added in the "Server" section of this article.
  • To install encryption security for Outlook 98, add the following registry keys and values:
    1. Start Registry Editor (Regedt32.exe).
    2. Locate the following key in the registry:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults

    3. On the Edit menu, click Add Key, and then add the following registry value:

      Value Name: CheckInfo
      Class:

    4. Select the following new key in the registry:

      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\CheckInfo

    5. On the Edit menu, click Add Value, and then add the following registry value:

      Value Name: Mask
      Data Type: REG_DWORD
      Value: 3

    6. Locate the following key in the registry:

      HKEY_LOCAL_MACHINE\Software\Microsoft\Office\8.0\Outlook

    7. On the Edit menu, click Add Key, and then add the following registry value:

      Value Name: Security
      Class:

    8. Select the following new key in the registry:

      HKEY_LOCAL_MACHINE\Software\Microsoft\Office\8.0\Outlook\Security

    9. On the Edit menu, click Add Value, and then add the following registry value:

      Value Name: FrenchEncryptionPermissions
      Data Type: REG_SZ
      Value: {C62A69F0-16DC-11CE-9E98-00AA00574A4F}

      NOTE: The parentheses are part of the string.
    10. Quit Registry Editor.
Modification Type:MinorLast Reviewed:9/23/2005
Keywords:kbHotfixServer kbQFE kbbug kbFEA kbfix kbQFE KB248052
©2004 Microsoft Corporation. All rights reserved.