General Requirements for S/MIME

The signature and encryption features of S/MIME are available to a Communications Express Mail user only after:

• A private and public key pair are issued with a certificate in standard X.509 format. The certificate assures other mail users that the keys really belong to the person who uses them. Keys and their certificate are issued from within your organization or purchased from a third-party vendor. Regardless of how the keys and certificate are issued, the issuing organization is referred to as a certificate authority (CA).

• The private-public key pair, with its certificate, are properly stored electronically in a local key store or distributed to end users on common access cards (CACs), referred to as smart cards.

• All public keys and certificates are stored to an LDAP directory, accessible by Directory Server. This is referred to as publishing the public keys to make them available to other mail users who are creating S/MIME messages.

• Card reading devices are properly installed on the client machines when private-public key pairs and their certificates are stored on smart cards.

• All the necessary platform software is installed on the client machines where Communications Express Mail is accessed.

• All the necessary Sun Microsystems software is installed and configured for S/MIME.

• The Communications Express Mail user is set up to use the Sun Microsystems mail system. This includes giving the user permission to use the S/MIME features.