Policy
Fortezza certificate policies
Microsoft Office 5532.1000
Policy overview
Key metadata and intent for this policy.
This policy setting specifies a list of policies allowed in the policies extension of a certificate that indicate the certificate is a Fortezza certificate. Fortezza is a hardware--based encryption standard created by the National Security Agency (NSA), a division of the United States Department of Defense. To be valid for use with Fortezza, a certificate must include an appropriate policy in the certificate's policies extension. If you enable this policy setting, you can enter a list of policies in the supplied text box that can be used to indicate that a certificate is a Fortezza certificate. The list should be separated by semi-colons. For example: policy1;policy2;policy3. If you disable or so nor configure this policy setting, a list of Fortezza certificate policies are not listed.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
List of policies to indicate that a certificate is a Fortezza certificate ID L_Enterlistofpoliciesthatcanbeinthepoliciesextension2 | text | HKCU\software\policies\microsoft\office\16.0\outlook\security\fortezza_policies Type REG_SZ | None |
Other policies in this category
Explore related policies at the same level.
- UserAlways use TNEF formatting in S/MIME messagesWindows7
- UserCheck for the user's private key when the user sends an encrypted email that includes the user as a recipientWindows7
- UserDo not check e-mail address against address of certificates being usedWindows7
- UserDo not display 'Publish to GAL' buttonWindows7
- UserDo not provide Continue option on Encryption warning dialog boxesWindows7
- UserEnable Cryptography IconsWindows7
- UserEnable Retrieval of Remote Certificate Authority InformationWindows7
- UserEncrypt all e-mail messagesWindows7
- UserEnsure all S/MIME signed messages have a labelWindows7
- UserMessage FormatsWindows7
- UserMessage when Outlook cannot find the digital ID to decode a messageWindows7
- UserMinimum encryption settingsWindows7