WinXP Pro SP2 fully patched (upgraded from Win2K Pro SP4)
Office 2003/Outlook 2003 SP2 fully patched

I'm installing company issued certificates in Outlook 2003 for the
first time for digital signature and encrypted email. When I try to
send email with my digital signature I get the error:

Your Digital ID name can not be found
by the underlying security system

I have removed and reinstalled these certs several times (including
system reboots after removal) with no change.

I went to thawte.com and got a freemail cert issued but it gives the
same error message when I try to use it. Since the company cert and
the free cert both give the same error I'm guessing it's not a
certificate issue/install problem.

I use Exchange for company email and my Exchange server is Exchange
2000 (all the others are Exchange 2003). I did find an MS KB article
about this error and Exchange 2000
http://support.microsoft.com/?kbid=831601
that discusses this error can be triggered by Exchange 2000 not
running Post-Service Pack 3 Rollup.

My PC is part of my company's Windows domain and my user name is not a
"normal" user on my system (not listed under "Local Users and
Groups"). I connect to my domain via a VPN client.

I have my company's support team investigating but we all know how
that works......

Clyde <(E-Mail Removed)> wrote:

> I'm installing company issued certificates in Outlook 2003 for the
> first time for digital signature and encrypted email. When I try to
> send email with my digital signature I get the error:
>
> Your Digital ID name can not be found
> by the underlying security system
>
> I have removed and reinstalled these certs several times (including
> system reboots after removal) with no change.

Which are you trying to do, encrypt or digitally sign. The latter uses your
certificate, but the former does not. If you are trying to encrypt a
message and you do not have the certificate (public key) of the recipient in
your security subsystem, you will see exactly the message you see.
--
Brian Tillman

"Brian Tillman" <(E-Mail Removed)> wrote:
>Clyde <(E-Mail Removed)> wrote:
>> I'm installing company issued certificates in Outlook 2003 for the
>> first time for digital signature and encrypted email. When I try to
>> send email with my digital signature I get the error:
>>
>> Your Digital ID name can not be found
>> by the underlying security system
>>
>> I have removed and reinstalled these certs several times (including
>> system reboots after removal) with no change.
>
>Which are you trying to do, encrypt or digitally sign. The latter uses your
>certificate, but the former does not. If you are trying to encrypt a
>message and you do not have the certificate (public key) of the recipient in
>your security subsystem, you will see exactly the message you see.


I'm tring to digitally sign a message. It appears that I can send an
encrypted email message to my email account fine.

"Clyde" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> "Brian Tillman" <(E-Mail Removed)> wrote:
>>Clyde <(E-Mail Removed)> wrote:
>>> I'm installing company issued certificates in Outlook 2003 for the
>>> first time for digital signature and encrypted email. When I try to
>>> send email with my digital signature I get the error:
>>>
>>> Your Digital ID name can not be found
>>> by the underlying security system
>>>
>>> I have removed and reinstalled these certs several times (including
>>> system reboots after removal) with no change.
>>
>>Which are you trying to do, encrypt or digitally sign. The latter uses
>>your
>>certificate, but the former does not. If you are trying to encrypt a
>>message and you do not have the certificate (public key) of the recipient
>>in
>>your security subsystem, you will see exactly the message you see.
>
>
> I'm tring to digitally sign a message. It appears that I can send an
> encrypted email message to my email account fine.
>
>

Check out if this helps:
http://support.microsoft.com/kb/5555...d=2520&sid=139

--
Arek Iskra
MVP for Windows Server - Software Distribution

"Arek Iskra [MVP]" <(E-Mail Removed)> wrote:
>"Clyde" <(E-Mail Removed)> wrote in message
>news:(E-Mail Removed)...
>> "Brian Tillman" <(E-Mail Removed)> wrote:
>>>Clyde <(E-Mail Removed)> wrote:
>>>> I'm installing company issued certificates in Outlook 2003 for the
>>>> first time for digital signature and encrypted email. When I try to
>>>> send email with my digital signature I get the error:
>>>>
>>>> Your Digital ID name can not be found
>>>> by the underlying security system
>>>>
>>>> I have removed and reinstalled these certs several times (including
>>>> system reboots after removal) with no change.
>>>
>>>Which are you trying to do, encrypt or digitally sign. The latter uses
>>>your
>>>certificate, but the former does not. If you are trying to encrypt a
>>>message and you do not have the certificate (public key) of the recipient
>>>in
>>>your security subsystem, you will see exactly the message you see.
>>
>>
>> I'm tring to digitally sign a message. It appears that I can send an
>> encrypted email message to my email account fine.
>>
>>
>
>Check out if this helps:
>http://support.microsoft.com/kb/5555...d=2520&sid=139

Problem is I can't even send a digitally signed message to myself,
much less anyone else. I can however send an encrypted message to
myself when I look myself up on the LDAP server.

Clyde <(E-Mail Removed)> wrote:

> Problem is I can't even send a digitally signed message to myself,
> much less anyone else. I can however send an encrypted message to
> myself when I look myself up on the LDAP server.

Click Tools>Options>Security>Settings. Are the "Security Settings Name" and
"Cryptography Format" drop-downs set correctly? In IE click Tools>Internet
Options>Content>Certificates. Do you see your certificate?
--
Brian Tillman

"Brian Tillman" <(E-Mail Removed)> wrote:
>Clyde <(E-Mail Removed)> wrote:
>
>> Problem is I can't even send a digitally signed message to myself,
>> much less anyone else. I can however send an encrypted message to
>> myself when I look myself up on the LDAP server.
>
>Click Tools>Options>Security>Settings. Are the "Security Settings Name" and
>"Cryptography Format" drop-downs set correctly? In IE click Tools>Internet
>Options>Content>Certificates. Do you see your certificate?

Yes, all the settings in the Security tab are correct and I have
certificates set for both signing and encrypting.

"Clyde" <(E-Mail Removed)> wrote in message
news:(E-Mail Removed)...
> WinXP Pro SP2 fully patched (upgraded from Win2K Pro SP4)
> Office 2003/Outlook 2003 SP2 fully patched
>
> I'm installing company issued certificates in Outlook 2003 for the
> first time for digital signature and encrypted email. When I try to
> send email with my digital signature I get the error:
>
> Your Digital ID name can not be found
> by the underlying security system
>
> I have removed and reinstalled these certs several times (including
> system reboots after removal) with no change.
>
> I went to thawte.com and got a freemail cert issued but it gives the
> same error message when I try to use it. Since the company cert and
> the free cert both give the same error I'm guessing it's not a
> certificate issue/install problem.

Hello Clyde!

This message means generally that outlook has problems with displaying an
encrypted email. It does not necessarily mean that there are problems with
your id. You can try using p7mViewer to decode the message and find what is
the real source of the problem.
See the Cryptigo blog
http://cct-blog.cryptigo.com/index.p...006/08/04.html for some
more information on possible problem sources :-)
p7mViewer can be downloaded from
http://www.cryptigo.com/p7mViewer/Download/

Vizvary Istvan

Clyde <(E-Mail Removed)> wrote:
>WinXP Pro SP2 fully patched (upgraded from Win2K Pro SP4)
>Office 2003/Outlook 2003 SP2 fully patched
>
>I'm installing company issued certificates in Outlook 2003 for the
>first time for digital signature and encrypted email. When I try to
>send email with my digital signature I get the error:
>
> Your Digital ID name can not be found
> by the underlying security system
>
>I have removed and reinstalled these certs several times (including
>system reboots after removal) with no change.
>
>I went to thawte.com and got a freemail cert issued but it gives the
>same error message when I try to use it. Since the company cert and
>the free cert both give the same error I'm guessing it's not a
>certificate issue/install problem.
>
>I use Exchange for company email and my Exchange server is Exchange
>2000 (all the others are Exchange 2003). I did find an MS KB article
>about this error and Exchange 2000
> http://support.microsoft.com/?kbid=831601
>that discusses this error can be triggered by Exchange 2000 not
>running Post-Service Pack 3 Rollup.
>
>My PC is part of my company's Windows domain and my user name is not a
>"normal" user on my system (not listed under "Local Users and
>Groups"). I connect to my domain via a VPN client.
>
>I have my company's support team investigating but we all know how
>that works......


bump