Mac/Windows: clean old encryption cert after a new CAC

windowsmacos

Symptoms

Signed/encrypted email partially works but coworkers cannot encrypt to you for ~24 hours after a new CAC.

Likely cause

GAL still has the old encryption cert.

Fix

1. From a government Outlook, Publish to GAL (see Outlook publish entry). 2. Wait ~24 hours for replication. 3. OWA-only users without Outlook can rely on https://dod411.gds.disa.mil to pull the new cert manually.

Sourced from militarycac.com. Rewritten for clarity.

Didn't work, or need it tailored to your setup?

Ask the AI assistant