Windows 10: Cannot read Encrypted emails on OWA website using S/MIME

I have seen a lot of messages regarding this problem. I even talked to my computer experts at work and nobody can fix this problem. When I use the owa.us.af.mil to read my messages, I can't read the ones that are encrypted. I have tried to download s/mime and it doesn't work. I have been working this problem for at least 2 months with no solution. When is Microsoft going to fix this bug? The best article I have seen on this was posted by Jeremy Nickel on 19 May 2019 and still didn't fix my problem. There is not Internet Explorer 11 for Windows 10. I have Windows 10 and use Microsoft edge. I tried downloading s/mime for internet explorer and still didn't work. Do I need to revert to Windows 7 to have to use the junky Internet Explorer. Please advise. There is not even a workaround this.


***Original title: Problems with S/MIME on OWA website***

:)

 

Windows 10 IE 11 S/MIME Issues with OWA.

I had posted a response to a question about this topic back in April 2017 and since the post is locked, I wanted to pass on some updated information for those that me require it. I'm posting those same steps as before but have added an additional step which
is to install the latest DoD Root Certificates.

I resolved this issue with opening digitally signed and encrypted emails with OWA on Windows 10 using IE 11 by performing the following steps.

1. Download the InstallRoot utility from DISA IASE and install the latest DoD Root Certificates.

2. Open 32 bit Internet Explorer.

3. Click the gear icon located on the top right corner of the browser.

4. Select Safety menu and then turn on ActiveX Filtering by selecting it.

5. Click the gear icon again.

6. Select internet options.

7. Select security, trusted sites, and then click the sites button.

8. Add the URL of your OWA to the trusted list. i.e.
https://osan.mail.us.af.mil

9. If you have issues sending emails, you may need to add an underlying URL, like
https://web.mail.us.af.mil. or
https://web.mail.mil. This step was not required for me, but may be required for others.

10. Navigate to your OWA site.

11. At the top of the URL bar, you should see a circle with a diagonal line through it.

12. Click that circle and then click Turn Off ActiveX Filtering. If you don't do this for the OWA site, you will not be able to download, or use S/MIME.

13. Verify S/MIME is installed by going to the OWA options, see all options, settings, S/MIME.

14. Download and install if required, otherwise you should see the two checkboxes for sign and encrypt.

15. A final step if you are still having issues would be to add site to your compatibility view options. I did not have to perform this step.

16. After performing all of these steps, close your browser and reopen for changes to take effect.

Hope this helps!

Jeremy Nickel

Plans and Programs Flight Superintendent

 

S/MIME

Using OWA on internet explorer. I went under settings and selected set up of S/MIME. It asked me to approve download. I did and it says it is on there now, but now I can not read any emails I am receiving, even those not encrypted.

 

S/MIME Issues with IE 11

I resolved this issue with opening digitally signed and encrypted emails with OWA on Windows 10 using IE 11 by performing the following steps.

1. Open 32 bit Internet Explorer.

2. Click the gear icon located on the top right corner of the browser.

3. Select Safety menu and then turn on ActiveX Filtering by selecting it.

4. Click the gear icon again.

5. Select internet options.

6. Select security, trusted sites, and then click the sites button.

7. Add the URL of your OWA to the trusted list. i.e.
https://osan.mail.us.af.mil

Edit: 7.A. If you have issues sending emails, you may need to add an underlying URL, like
https://web.mail.us.af.mil. or
https://web.mail.mil. This step was not required for me, but may be required for others.

8. Navigate to your OWA site.

9. At the top of the URL bar, you should see a circle with a diagonal line through it.

10. Click that circle and then click Turn Off ActiveX Filtering. If you don't do this for the OWA site, you will not be able to download, or use S/MIME.

11. Verify S/MIME is installed by going to the OWA options, see all options, settings, S/MIME.

12. Download and install if required, otherwise you should see the two checkboxes for sign and encrypt.

13. A final step if you are still having issues would be to add site to your compatibility view options. I did not have to perform this step.

Edit: 14. forgot to mention. After performing all of these steps, close your browser and reopen for changes to take effect.

Hope this helps!

Jeremy Nickel

Network Operations Flight Superintendent