Email Setup Center
  • Home »
  • Office 365 Email Encryption

How To Get Office 365 Email Encryption Setup?

Scroll down this page to know how to set up Office 365 email encryption. To protect your emails, Microsoft has introduced many features and one such feature is Message Encryption. This feature allows you to send and receive emails securely within and outside of your organization. Now, let see how to get office 365 email encryption setup.

Office 365 Email Encryption Setup

Step 1: Activate Right management

  • Step 1:Open a web browser.
  • Step 2:Type and tap Enter. Now, the Global Admin sign-in page will open.
  • Step 3:Enter your Global Admin credentials in the given fields.
  • Step 4:After signing in to your Global Admin account, go to the Admin section.
  • Step 5:Click Settings > Services & add-ins > Microsoft Azure Information Protection on your office 365 email encryption setup.
  • Step 6:Now, the Microsoft Azure Information Protection dialog box will open.
  • Step 7:In this dialog box, click the option that says Manage Microsoft Azure Information Protection settings.
  • Step 8:Check if the Right management service is activated. If not, activate it by clicking the Activate button.

Step 2: Multi-factor authentication (MFA)

  • Step 1:In case you’re using multi-factor authentication (MFA) for your organization, then you need to install the Exchange Online PowerShell module to connect to Exchange Online PowerShell.
  • Step 2:After installing the module, use the following comments to connect to the online PowerShell: Connect-EXOPSSession cmdlet.

Step 3: Sign in to Office 365

  • Step 1:Open the Edge browser on your computer. (Note: The Chrome browser doesn’t work).
  • Step 2:Navigate to the Exchange admin center.
  • Step 3:Make sure that you have the permissions to access the Exchange admin center.
  • Step 4:Now, using either your work account or school account, sign in to Office 365 to get office 365 email encryption setup.

Step 4: Install Microsoft Exchange Online PowerShell Module

  • Step 1:Go to the Admin title.
  • Step 2:Click Admin centers > Exchange > Hybrid > Configure.
  • Step 3:Now, a dialog box with a message “Do you want to open Microsoft.Online.CSE.PSModule.Client.application” will open.
  • Step 4:Click the Open button.
  • Step 5:In the Do you want to install this application? dialog box, click the Install button.
  • Step 6:Wait for the installation to complete.
  • Step 7:Once it is done, the Windows PowerShell window will open.

Step 5: Enable Basic authentication for WinRM

  • Step 1:Now, check whether the basic authentication permission is enabled on your computer.
  • Step 2:To check it, open the Command Prompt application with admin rights.
  • Step 3:Type the command Winrm quickconfig and run it.
  • Step 4:Enter Y to continue the process to get office 365 email encryption setup.
  • Step 5:Now, run the following command: winrm get winrm/config/client/auth.
  • Step 6:Check whether the Basic value is true. If not, run the winrm set winrm/config/client/auth @ {Basic=true} command to enable basic authentication for WinRM.

Step 6: Connect to Exchange Online PowerShell

  • Step 1:Launch the Exchange Online Remote PowerShell Module on your computer.
  • Step 2:Run the command using the following syntax: Connect-IPPSSession –UserPrincipalName
  • Step 3:Sign in to the Exchange Online PowerShell account by following the on-screen instructions and then get office 365 email encryption setup.

Step 7: Import modules

  • Step 1:Import the newly installed modules using the following command: Import-Module AADRM.
  • Step 2:After importing the module, check the cmdlet available for the imported modules.

Step 8: Check the cmdlet of the modules

  • Step 1:Now, you need to check whether there is cmdlet available for the newly imported modules. To check it, use the Get-Command- Module ADDRM command.

Step 9: Establish a connection to Azure RMS

  • Step 1:To establish the connection, type the Connect-AadrmService command.
  • Step 2:Enter your Global Administrator account credentials in the given fields.
  • Step 3:Once the connection has been established, enable Azure RMS using the following command: Enable-Aadrm.
  • Step 4:Now, gather the configuration details for message encryption using the commands mentioned below:
  • Step 5:$rmsConfig = Get-AadrmConfiguration
  • Step 6:$licenseUri = $rmsConfig.LicensingIntranetDistributionPointUrl
  • Step 7:Disconnect your modules from the Aadrm service using the Disconnect – AadrmService command.

Step 10: Connect to Exchange Online

  • Step 1:To connect to exchange online, you need to create a remote PowerShell first.
  • Step 2:To do so, run the following command: Connect- EXOPSSession –UserPrincipalName
  • Step 3:Now, gather the IRM Configuration details for your Office 365 account using the following commands:
  • Step 4:$irmConfig = Get–IRMConfiguration
  • Step 5:$list = $irmConfig.LicensingLocation
  • Step 6:If (!$list) {$list = @()}
  • Step 7:If (!$list.Contains($licenseUri)) {$list +=$licenseUri}

Step 11: Enable Message encryption

Using the below-mentioned commands, enable the message encryption feature for your office 365 email encryption setup.

  • Step 1:Set-IRMConfiguration –LicensingLocation $list
  • Step 2:Set-IRMConfiguration –AzureRMSLicensing Enabled $true- InternalLicensingEnabled $true.

Step 12: Turn on server decryption

  • Step 1:If you wish to use Office Message Encryption on your iOS, Android, or on the web, then enable the server decryption feature.
  • Step 2:Run the Set-IRMConfiguration –ClientAccessServerEnabled $true command to enable server decryption.

Step 13: Run a test

  • Step 1:Once the server decryption feature is enabled, run a test using the Test-IRMConfiguration – command.

Step 14: Disable IRM templates

  • Step 1:Once the setup is done successfully, disable the IRM templates for your Office 365 account.
  • Step 2:To do so, type the Set-IRMConfiguration –ClientAccessServerEnabled $false command.

Congratulations! You have successfully configured office 365 email encryption setup. If you have any doubts about the same, contact us.