In environments with internal PKI and Exchange Online, publishing S/MIME certificates centrally can save a lot of manual work. This PowerShell script exports public user S/MIME certificates from Active Directory, stores them as .cer files, and then writes them to Exchange Online mailbox attributes so they are available through the Global Address List (GAL). S/MIME in Exchange … Weiterlesen
When troubleshooting S/MIME in Exchange Online with Microsoft support, one of the key questions was: Is our internal CA certificate chain really stored correctly in the tenant? Exchange Online does not only rely on public online CAs; it maintains its own virtual certificate collection for S/MIME trust, which Outlook Mobile then uses to validate user certificates. To … Weiterlesen
I needed a script to export S/MIME encryption certificates for a client migration. The script requires that the S/MIME private key be exportable. If it isn’t, the certificate can only be recovered at the CA using a Key Recovery Agent (if configured) or Mimikaz 😉 The search routine for the correct certificate may also need … Weiterlesen