How To Get Office 365 Email Encryption Setup?

Scroll down this page to know how to set up Office 365 email encryption. To protect your emails, Microsoft has introduced many features and one such feature is Message Encryption. This feature allows you to send and receive emails securely within and outside of your organization. Now, let see how to get office 365 email encryption setup.

Step 1: Activate Right management

Step 1:Open a web browser.

Step 2:Type http://portal.office.com and tap Enter. Now, the Global Admin sign-in page will open.

Step 3:Enter your Global Admin credentials in the given fields.

Step 4:After signing in to your Global Admin account, go to the Admin section.

Step 5:Click Settings > Services & add-ins > Microsoft Azure Information Protection on your office 365 email encryption setup.

Step 6:Now, the Microsoft Azure Information Protection dialog box will open.

Step 7:In this dialog box, click the option that says Manage Microsoft Azure Information Protection settings.

Step 8:Check if the Right management service is activated. If not, activate it by clicking the Activate button.

Step 2: Multi-factor authentication (MFA)

Step 1:In case you’re using multi-factor authentication (MFA) for your organization, then you need to install the Exchange Online PowerShell module to connect to Exchange Online PowerShell.

Step 2:After installing the module, use the following comments to connect to the online PowerShell: Connect-EXOPSSession cmdlet.

Step 3: Sign in to Office 365

Step 1:Open the Edge browser on your computer. (Note: The Chrome browser doesn’t work).
Step 2:Navigate to the Exchange admin center.

Step 3:Make sure that you have the permissions to access the Exchange admin center.
Step 4:Now, using either your work account or school account, sign in to Office 365 to get office 365 email encryption setup.

Step 4: Install Microsoft Exchange Online PowerShell Module

Step 1:Go to the Admin title.
Step 2:Click Admin centers > Exchange > Hybrid > Configure.
Step 3:Now, a dialog box with a message “Do you want to open Microsoft.Online.CSE.PSModule.Client.application” will open.
Step 4:Click the Open button.

Step 5:In the Do you want to install this application? dialog box, click the Install button.
Step 6:Wait for the installation to complete.
Step 7:Once it is done, the Windows PowerShell window will open.

Step 5: Enable Basic authentication for WinRM

Step 1:Now, check whether the basic authentication permission is enabled on your computer.
Step 2:To check it, open the Command Prompt application with admin rights.
Step 3:Type the command Winrm quickconfig and run it.
Step 4:Enter Y to continue the process to get office 365 email encryption setup.

Step 5:Now, run the following command: winrm get winrm/config/client/auth.
Step 6:Check whether the Basic value is true. If not, run the winrm set winrm/config/client/auth @ {Basic=true} command to enable basic authentication for WinRM.

Step 6: Connect to Exchange Online PowerShell

Step 1:Launch the Exchange Online Remote PowerShell Module on your computer.
Step 2:Run the command using the following syntax: Connect-IPPSSession –UserPrincipalName @bemopro.com.

Step 3:Sign in to the Exchange Online PowerShell account by following the on-screen instructions and then get office 365 email encryption setup.

Step 7: Import modules

Step 1:Import the newly installed modules using the following command: Import-Module AADRM.
Step 2:After importing the module, check the cmdlet available for the imported modules.

Step 8: Check the cmdlet of the modules

Step 1:Now, you need to check whether there is cmdlet available for the newly imported modules. To check it, use the Get-Command- Module ADDRM command.

Step 9: Establish a connection to Azure RMS

Step 1:To establish the connection, type the Connect-AadrmService command.
Step 2:Enter your Global Administrator account credentials in the given fields.
Step 3:Once the connection has been established, enable Azure RMS using the following command: Enable-Aadrm.
Step 4:Now, gather the configuration details for message encryption using the commands mentioned below:

Step 5:$rmsConfig = Get-AadrmConfiguration
Step 6:$licenseUri = $rmsConfig.LicensingIntranetDistributionPointUrl
Step 7:Disconnect your modules from the Aadrm service using the Disconnect – AadrmService command.

Step 10: Connect to Exchange Online

Step 1:To connect to exchange online, you need to create a remote PowerShell first.
Step 2:To do so, run the following command: Connect- EXOPSSession –UserPrincipalName @bemopro.com
Step 3:Now, gather the IRM Configuration details for your Office 365 account using the following commands:

Step 4:$irmConfig = Get–IRMConfiguration
Step 5:$list = $irmConfig.LicensingLocation
Step 6:If (!$list) {$list = @()}
Step 7:If (!$list.Contains($licenseUri)) {$list +=$licenseUri}

Step 11: Enable Message encryption

Using the below-mentioned commands, enable the message encryption feature for your office 365 email encryption setup.

Step 1:Set-IRMConfiguration –LicensingLocation $list

Step 2:Set-IRMConfiguration –AzureRMSLicensing Enabled $true- InternalLicensingEnabled $true.

Step 12: Turn on server decryption

Step 1:If you wish to use Office Message Encryption on your iOS, Android, or on the web, then enable the server decryption feature.
Step 2:Run the Set-IRMConfiguration –ClientAccessServerEnabled $true command to enable server decryption.

Step 13: Run a test

Step 1:Once the server decryption feature is enabled, run a test using the Test-IRMConfiguration –sender@bemopro.com command.

Step 14: Disable IRM templates

Step 1:Once the setup is done successfully, disable the IRM templates for your Office 365 account.

Step 2:To do so, type the Set-IRMConfiguration –ClientAccessServerEnabled $false command.

Congratulations! You have successfully configured office 365 email encryption setup. If you have any doubts about the same, contact us.