The Allow Email Router to use my credentials option is unavailable in Microsoft Dynamics CRM 2011

This article provides a resolution for the issue that the Allow Email Router to use my credentials to send and receive email on my behalf option isn't available in Microsoft Dynamics CRM Personal Options.

Applies to:   Microsoft Dynamics CRM 2011
Original KB number:   2667140

Symptoms

The Allow Email Router to use my credentials to send and receive email on my behalf option is greyed out in Microsoft Dynamics CRM Personal Options.

Cause

In processing e-mail for a user or queue, the E-mail Router requires credentials for the user or queue. Those credentials can be entered in the Microsoft Dynamics CRM Web application in the Set Personal Options dialog box (for users) and in the Queues form (for queues). Microsoft Dynamics CRM stores these credentials in encrypted form in the Microsoft Dynamics CRM database. The E-mail Router uses a key stored in the Microsoft Dynamics CRM database to decrypt these credentials. The call that the E-mail Router makes to obtain this key enforces HTTPS. In Microsoft Dynamics CRM 2011, the E-mail Router functions this way by default, which means that you need not take any action to retain this behavior.

Resolution

To resolve the above issue, follow the below steps to add the registry key DisableSecureDecryptionKey on the Microsoft Dynamics CRM server.

  1. Launch the registry editor on the Microsoft Dynamics CRM server by selecting Start > Run, and type regedit.

  2. Locate the following path on the Microsoft Dynamics CRM server:

    HKEY_Local_Machine\Software\Microsoft\MSCRM

  3. Check the value of the registry key DisableSecureDecryptionKey. If this registry key is present, set its value to 1. (If the key is not present or set to 0, calls from the E-mail Router to the Microsoft Dynamics CRM Server 2011 are made using HTTPS.) Setting the value of this key to 1 allows the E-mail Router to obtain information from the Microsoft Dynamics CRM database over the HTTP protocol.

  4. If you changed the value of DisableSecureDecryptionKey, do the following on the Microsoft Dynamics CRM Server 2011 to Restart Internet Information Services (IIS). To perform the same, select Start > Run, type cmd, and then select OK.

  5. Type IISRESET in the command prompt window。

  6. (Recommended) Enable IPSec for all communications between the Microsoft Dynamics CRM Server 2011 and the E-mail Router computer. For more information about enabling IPSec, see What Is IPSec?.

More information

If your organization uses the E-mail Router to send and receive messages on behalf of users or queues, you should increase security. For more information, see Keep user credentials secure.