Enterprise Vault™ Setting up Exchange Server and Office 365 for SMTP Archiving

Last Published:
Product(s): Enterprise Vault (14.1, 14.0, 12.5, 12.4, 12.3, 12.2, 12.1)

Configuring the decryption of RMS-protected messages in Enterprise Vault

Configure the RMS settings in the site properties, and the SMTP policy to allow Enterprise Vault to decrypt RMS-protected messages.

To configure RMS settings in Enterprise Vault

  1. In the left pane of the Administration Console, expand the hierarchy until the name of the site is visible.
  2. Right-click the name of the site. Then click Properties. The site properties are displayed.
  3. Click the RMS tab.
  4. Select the Enable RMS Decryption check box.
  5. Edit the following settings:
    • Intranet URL

    • Extranet URL

    • BPOS Tenant ID

    • Application Principal ID

    • Symmetric Key

  6. Click Test to verify whether the Enterprise Vault server can authenticate with the Azure Information Protection (AIP) services using the provided settings.
  7. Click OK to close the site properties.
  8. In the left pane of the Administration Console, expand the hierarchy until Policies is visible.

    Expand Policies and click SMTP.

    In the right-hand pane, double-click the name of the policy that is used for SMTP archiving. The policy's properties are displayed.

  9. Click the Advanced tab.
  10. Set ClearText copies of RMS Protected items to Treat as Secondary.
  11. Set Decrypt RMS Protected items to Decrypt for journal archives only.
  12. Click OK to close the SMTP policy properties.
  13. Restart the SMTP archiving task and the associated Storage service to apply the changes.