XGEN: Installation and Use of Encryption on Exchange Server with French Settings

Because of French encryption regulations, Microsoft Exchange Server version 5.5 Key Management server (KM server) advanced security was previously unavailable in France, so the installation program did not install KM server. Encryption-based security was also disabled in Exchange Server clients, such as Outlook 98 and Outlook 2000, if they were used in France.

As a result of government approval of Microsoft Exchange Server 5.5 KM server advanced security (and Outlook 98 and Outlook 2000 clients encryption-based security) for distribution and use in France, a new Microsoft Exchange Server 5.5 installation program is available that installs KM server in France. For Exchange Server clients (Outlook 98 and Outlook 2000), you must activate encryption-based security through the application of a security patch.

For additional information about the latest service pack for Exchange Server 5.5, click the article number below to view the article in the Microsoft Knowledge Base:

The new Exchange Server 5.5 installation program and client security patch are available separately as part of this feature.

Requirements for Client and Server

The following are the requirements for clients and servers:

• Microsoft Windows NT 4.0 Service Pack 6a
• Microsoft Windows 98 Second Edition
• Internet Explorer 5.01

Server

To use the new KM server installation program and install Exchange Server 5.5 KM server advanced security in France:

1. Copy the Exchange Server 5.5 retail CD-ROM to a server share.
2. Copy one of the following files, as applicable, to this installation point:
   • Srvmin.exe (for an Exchange Server Standard Edition computer)
   • Srvmax.exe (for an Exchange Server Enterprise Edition computer)
3. For the French version, rename the file that you copied in the previous step to Install.exe.
4. Run the Install.exe program.
5. Apply the latest Exchange Server service pack.
6. Add the following keys and values to the registry: WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.
   
   
   1. Start Registry Editor (Regedt32.exe).
   2. Locate the following key in the registry:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults
   3. On the Edit menu, click Add Key, and then add the following registry value:
      Value Name: CheckInfo
      Class:
   4. Select the following new key in the registry:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\CheckInfo
   5. On the Edit menu, click Add Value, and then add the following registry value:
      Value Name: Mask
      Data Type: REG_DWORD
      Value: 3
   6. Locate the following key in the registry:
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\Provider\Microsoft Exchange Cryptographic Provider v1.0
      NOTE: The above registry key is one path; it has been wrapped for readability.
   7. On the Edit menu, click Add Value, and then add the following registry value:
      Value Name: FrenchEncryptionPermissions
      Data Type: REG_SZ
      Value: {8c7e4f00-20fc-11d2-9c60-0060979387ea}
      NOTE: The parentheses are part of the string.
   8. Quit Registry Editor.

Client

• To install encryption security for Outlook 97 or Outlook 2000, add the same registry keys that are added in the "Server" section of this article.
• To install encryption security for Outlook 98, add the following registry keys and values:
  1. Start Registry Editor (Regedt32.exe).
  2. Locate the following key in the registry:
     HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults
  3. On the Edit menu, click Add Key, and then add the following registry value:
     Value Name: CheckInfo
     Class:
  4. Select the following new key in the registry:
     HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\Defaults\CheckInfo
  5. On the Edit menu, click Add Value, and then add the following registry value:
     Value Name: Mask
     Data Type: REG_DWORD
     Value: 3
  6. Locate the following key in the registry:
     HKEY_LOCAL_MACHINE\Software\Microsoft\Office\8.0\Outlook
  7. On the Edit menu, click Add Key, and then add the following registry value:
     Value Name: Security
     Class:
  8. Select the following new key in the registry:
     HKEY_LOCAL_MACHINE\Software\Microsoft\Office\8.0\Outlook\Security
  9. On the Edit menu, click Add Value, and then add the following registry value:
     Value Name: FrenchEncryptionPermissions
     Data Type: REG_SZ
     Value: {C62A69F0-16DC-11CE-9E98-00AA00574A4F}
     NOTE: The parentheses are part of the string.
  10. Quit Registry Editor.