1. Encryption in Office 365 Shobhit Sahay Technical Product Manager
Asaf Kashi
Group Program Manager

2. DLP Modules Introduction to Encryption in Office 365
Information Rights Management
Office 365 Message Encryption
S/MIME

3. Module 3: Office 365 Message Encryption

4. Office 365 Message Encryption
Admin:
Simple to provision and configure
Policy driven via Transport Rules
Customizable branding of encrypted s and mail reading portal
Allows for Enterprise content inspection and compliance
Sender:
Ability to send encrypted messages to any SMTP address regardless of recipient’s client or service provider
Recipient:
View encrypted messages on Office 365 Message Encryption portal after sign-in
Office 365 Message Encryption portal has rich OWA controls for viewing and composing messages
Replies from the portal are also encrypted

5. Office 365 Message Encryption – Admin Configuration
New ETR actions configurable via UI or PowerShell
New-TransportRule –Name EncryptRule <Condition for which to apply encryption> -ApplyOME $true
New-TransportRule –Name DecryptRule <Condition for which to remove encryption> -RemoveOME $true

6. Office 365 Message Encryption – Admin Configuration
Customize opening text in encrypted and disclaimer statement
Set-OMEConfiguration -Identity default - Text "Encrypted message from ContosoPharma secure messaging system"
Set-OMEConfiguration -Identity default -DisclaimerText “This message and its attachments are for the sole use of the …"

7. Office 365 Message Encryption – Admin Configuration
Customize portal text and logo
Set-OMEConfiguration -Identity default -PortalText "ContosoPharma secure portal"
Set-OMEConfiguration -Identity default -Image (Get-Content "C:\Users\admin\Desktop\contoso.png” -Encoding byte)

8. Office 365 Message Encryption – Modern UI
Modern O365 UI and rich OWA controls

9. Office 365 Message Encryption
How do recipients sign-in to view messages? – 3 ways
Microsoft account – used for sign-in to Microsoft services like OneDrive, XBOX Live, etc…
Microsoft account for hotmail.com, outlook.com, live.com already exists
User can create Microsoft account for any SMTP address, like gmail.com, mycustomdomain.com – address verification done as part of account creation process
If recipient does not have a Microsoft account, recipients are navigated through the process of creating one
For a given address, a single Microsoft account is used to access all Microsoft services and view future encrypted s
Organizational Account – used for sign-in to workloads like Exchange Online, SharePoint Online, etc…
One time Passcode
As Office 365 embraces additional identity providers, so will Office 365 Message Encryption.

10. Office 365 Message encryption
demo
Office 365 Message encryption

11. Office 365 Message Encryption - Under the hood
Exchange Online
Policy detection and Enforcement
Deliver
O365 User
Send
Internet User
Mail Reading Portal
Tenant configuration
Post
Microsoft account/Organization Account/One time Passcode

12. Mobile Experiences Apps for iOS and Android Devices
Windows Phone provides a Native support

13. Mobile Experiences

14. Mobile Experiences

15. Mobile Experiences

16. Mobile Experiences

17. Mobile Experiences

18. Purchasing Office 365 Message Encryption
Office 365 Message Encryption is included with Azure RMS
Plan
Requires
Price
Office 365 E3, E4
Windows Azure Rights Management is included
Included
Office 365 E1, K1
Windows Azure Rights Management
$2 PUPM
Office 365 Exchange Online Plan 2, Plan 1, Kiosk
Office 365 SharePoint Plan 2, Plan 1
Office 365 Midsize Business
Exchange on-premises
* On-premise customers need to route mails through Exchange Online
** Windows Azure Rights Management is not available for Office 365 Small Business plans