Hello, I recently purchased Microsoft Outlook I am in the military and have a smart card, specifically a CAC, and would like to be able to use it at home to check my emails on Microsoft Outlook but I just can’t do it.

I also can’t find ffree about how to configure microsoft outlook 2016 to use smart card certificates free download it. Anyone know how to sync my military email with Outlook ? Was this reply helpful?

Yes No. Sorry this didn’t help. Thanks for your feedback. Choose where you want to search below Search Search the Community. This thread is locked. You can follow the question or vote as helpful, but you cannot reply to this thread. I have the same question Report abuse. Details required :. Cancel Submit.

Palcouk Volunteer Moderator. You would at the very least vree a smart card reader. How satisfied are you with this reply? Thanks for your feedback, it helps us configure microsoft outlook 2016 to use smart card certificates free download the site.

In reply to Palcouk’s mirosoft on March 28, Miceosoft, I already have a smart card reader. I just don’t know what comes next. Hello, I too have the same problem. Did you ever find out how to use your CAC on Outlook? In reply to ShaniqueBrown’s certificcates on April 20, Similar Issue has been highlighted. I believe Smart Card functionality is affected with Outlook Workaround is to use Outlook as of now. This site in other languages x.

– Configure microsoft outlook 2016 to use smart card certificates free download

Sign in. United States English. Ask a question. Quick access. Search related threads. Remove From My Forums. Answered by:. Archived Forums. Outlook IT Pro Discussions. This forum is for general questions and feedback related to Outlook all versions as they pertain to the IT Pro community. Sign in to vote.

Here’s more information about the certificate requirements:. The client certificate must be issued for client authentication for example, the default User certificate template in AD CS. The client certificate must contain the user principal name UPN of the user in the certificate’s Subject or Subject Alternative Name fields. All servers and devices that are involved in access to Outlook on the web and ActiveSync including proxy servers and client devices must trust the entire chain of trust for the client certificates the root certificate of the certification authority, and any intermediate CAs that were used to issue certificates.

For CBA in Outlook on the web, the client certificate needs to be installed on the local computer, device, or on a smart card. You can automate the installation of certificates on devices by using a mobile device management MDM solution like Intune. For more information about Intune, see Overview of Microsoft Intune.

You need to be assigned permissions before you can perform this procedure or procedures. To see what permissions you need, see the “IIS Manager” entry in the Outlook on the web permissions section of the Clients and mobile devices permissions topic. For information about keyboard shortcuts that may apply to the procedures in this topic, see Keyboard shortcuts in the Exchange admin center. Having problems? To do so:. If the file that contains the certificates is a Personal Information Exchange PKCS 12 file, type the password that you used to encrypt the private key, click to select the appropriate check box if you want the private key to be exportable, and then turn on strong private key protection if you want to use this feature.

Select the option to automatically put the certificate in a certificate store based on the type of certificate. Install the third-party smartcard certificate onto the smartcard.

See the vendor’s documentations for instructions. The SubjAltName field of the smartcard certificate is badly formatted. For each of the following conditions, you must request a new valid domain controller certificate.

If your valid domain controller certificate has expired, you may renew the domain controller certificate, but this process is more complex and typically more difficult than if you request a new domain controller certificate.

If the domain controllers or smartcard workstations do not trust the Root CA to which the domain controller’s certificate chains, then you must configure those computers to trust that Root CA. The smartcard has an untrusted certificate. If the domain controllers or smartcard workstations do not trust the Root CA to which the user’s smartcard certificate chains, then you must configure those computers to trust that Root CA.

The certificate of the smart card is not installed in the user’s store on the workstation. The certificate that is stored on the smartcard must reside on the smartcard workstation in the profile of the user who is logging on with the smart card.

You do not have to store the private key in the user’s profile on the workstation. It is only required to be stored on the smartcard.

The correct smartcard certificate or private key is not installed on the smartcard. The valid smartcard certificate must be installed on the smartcard with the private key and the certificate must match a certificate stored in the smartcard user’s profile on the smartcard workstation. The certificate of the smart card cannot be retrieved from the smartcard reader.

It can be a problem with the smartcard reader hardware or the smartcard reader’s driver software. Verify that you can use the smartcard reader vendor’s software to view the certificate and the private key on the smartcard. The smartcard has an otherwise malformed or incomplete certificate.

For each of these conditions, you must request a new valid smartcard certificate and install it onto the smartcard and into the profile of the user on the smartcard workstation.

The smartcard certificate must meet the requirements described earlier in this article, which include a correctly formatted UPN field in the SubjAltName field.

If your valid smartcard certificate has expired, you may also renew the smartcard certificate, which is more complex and difficult than requesting a new smartcard certificate.

Secure your email by using a digital signature is an option to make your email more secure. A digital signature isn’t the same as a signature you routinely include with an outgoing message. Anyone can copy an email signature, which essentially is a customisable closing salutation. But your digital signature, which includes your certificate and public key, originates from your digital ID.

– Outlook connection fails when certificate is required – Outlook | Microsoft Learn

 
When this policy setting isn’t turned on, certificates that are expired or not yet valid aren’t listed on the sign-in screen.