Control Outlook Profile Configuration

Manages configuration settings regarding Outlook Profile setup.

If "Outlook AutoConfiguration" is enabled, PKI Client will scan the user's smart card upon insertion and add any applicable certificates into the user's Outlook profile to use as S/MIME certificates with the default hash and encryption algorithm set as configured here.
If "Outlook AutoConfiguration" is disabled, PKI Client will not perform Outlook profile configuration on smart card insertion.
If "Outlook Email Certificates" is enabled, Outlook will include certificates in outgoing signed email messages when Outlook AutoConfiguration is enabled.
If "Outlook Email Certificates" is disabled, Outlook will not include certificates in outgoing signed email messages when Outlook AutoConfiguration is enabled.
Enable Outlook Email Matching so that PKI Client will ensure any certificates registered will match an email address in the Outlook profile.
If Outlook Email Matching is disabled, PKI Client will register new certificates without this email check.

Outlook AutoConfiguration is disabled by default.
Outlook Email Certificates is enabled by default.
Outlook Email Matching is enabled by default.
The default Security Settings Name is: "Symantec Corporation - Config"
SHA1 and 3DES are selected as the default hash and encryption algorithms.
SHA1 and 3DES are also the fallback algorithms if the an algorithm unsupported by the machine is selected.

Supported on: Windows 10

Enable Outlook AutoConfiguration
Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
Value NameEnableAutoConfiguration
Value TypeREG_DWORD
Default Value0
True Value1
False Value0
Enable Outlook Email Certificates
Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
Value NameSendCertificates
Value TypeREG_DWORD
Default Value1
True Value1
False Value0
Enable Outlook Email Matching
Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
Value NameDisableEmailMatching
Value TypeREG_DWORD
Default Value0
True Value0
False Value1
Default Security Settings Name:

Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
Value NameDefaultProfileName
Value TypeREG_SZ
Default ValueSymantec Corporation - Config
Default Hash Algorithm:


  1. SHA512
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultSignatureAlgorithm
    Value TypeREG_SZ
    ValueSHA-2-512
  2. SHA384
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultSignatureAlgorithm
    Value TypeREG_SZ
    ValueSHA-2-384
  3. SHA256
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultSignatureAlgorithm
    Value TypeREG_SZ
    ValueSHA-2-256
  4. SHA1
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultSignatureAlgorithm
    Value TypeREG_SZ
    ValueSHA-1
  5. MD5
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultSignatureAlgorithm
    Value TypeREG_SZ
    ValueMD5

Default Encryption Algorithm:


  1. AES (256-bit)
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueAES-256
  2. AES (192-bit)
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueAES-192
  3. AES (128-bit)
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueAES-128
  4. 3DES
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    Value3DES
  5. RC2 (128-bit)
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueRC2-CBC-128
  6. RC2 (64-bit)
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueRC2-CBC-64
  7. RC2 (40-bit)
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueRC2-CBC-40
  8. DES
    Registry HiveHKEY_LOCAL_MACHINE or HKEY_CURRENT_USER
    Registry PathSoftware\Policies\Symantec\PKI Client\4\Features\Outlook
    Value NameDefaultEncryptionAlgorithm
    Value TypeREG_SZ
    ValueDES-CBC


symantecpkiclient4.admx

Administrative Templates (Computers)

Administrative Templates (Users)