Cannot encrypt to a coworker after either of you got a new CAC

windows

Symptoms

After a CAC reissue, encrypted email starts failing with 'message could not be decrypted' or signature validation errors.

Likely cause

The GAL still has the old encryption certificate.

Fix

Publish the new certs to the GAL from a government Outlook: - Outlook 2016/2013/2010: File > Options > Trust Center > Trust Center Settings > E-mail Security > Publish to GAL. - Outlook 2007: Tools > Trust Center > E-mail Security > Publish to GAL. - Outlook 2003: Tools > Options > Security > Publish to GAL. Wait ~24 hours for replication.

Sourced from militarycac.com. Rewritten for clarity.

Didn't work, or need it tailored to your setup?

Ask the AI assistant