{"id":12039,"date":"2025-06-28T09:01:06","date_gmt":"2025-06-28T00:01:06","guid":{"rendered":"https:\/\/m365jp.net\/?p=12039"},"modified":"2025-06-28T09:08:34","modified_gmt":"2025-06-28T00:08:34","slug":"mc1105021-intune-policy-to-determine-smime-cert-lookup-priority","status":"publish","type":"post","link":"https:\/\/m365jp.net\/index.php\/2025-06-28-mc1105021-intune-policy-to-determine-smime-cert-lookup-priority","title":{"rendered":"MC1105021 | Intune policy to determine SMIME cert lookup priority"},"content":{"rendered":"<div class=\"postie-post\">\n<div>\n<hr>\n<table id=\"section\">\n<tbody>\n<tr>\n<th width=\"95%\">MC1105021 | Intune policy to determine SMIME cert lookup priority<\/th>\n<\/tr>\n<\/tbody>\n<\/table>\n<hr>\n<table id=\"data\">\n<tbody>\n<tr>\n<th>Classification<\/th>\n<td>planForChange<\/td>\n<\/tr>\n<tr>\n<th>Last Updated<\/th>\n<td>06\/27\/2025 23:25:59<\/td>\n<\/tr>\n<tr>\n<th>Start Time<\/th>\n<td>06\/27\/2025 23:25:54<\/td>\n<\/tr>\n<tr>\n<th>End Time<\/th>\n<td>12\/25\/2025 08:00:00<\/td>\n<\/tr>\n<tr>\n<th>Message Content<\/th>\n<td>\n<p>We&#8217;re introducing a new Intune policy that allows admins to define the priority order for SMIME certificate lookup in Outlook mobile. This gives organizations more control over how certificates are selected when multiple sources are available, improving   flexibility and alignment with internal security practices.<\/p>\n<p>[When this will happen:]<\/p>\n<p>This change will begin rolling out on August 29, 2025.  <\/p>\n<p>[How this affects your organization:]<\/p>\n<p>You&#8217;re receiving this message because our reporting indicates that one or more users in your organization may be using SMIME in Outlook mobile. With this update, administrators can configure a new Intune policy to control the order in which SMIME certificates   are retrieved from different sources.  <\/p>\n<p>This policy is off by default. If not configured, Outlook mobile will continue using the default lookup order.  <\/p>\n<p>[What you can do to prepare  <\/p>\n<p>Once the policy becomes available, you can configure it using the following key:  <\/p>\n<ul>\n<li>Key: <code>com.microsoft.outlook.Mail.SMIMEEnabled.CertificatesLookupOrder<\/code>  <\/li>\n<li>Type: String  <\/li>\n<li>Accepted Values:<br \/> \n<ul>\n<li><code>0<\/code> (Contacts)  <\/li>\n<li><code>1<\/code> (GAL)  <\/li>\n<li><code>2<\/code> (Device)  <\/li>\n<li><code>3<\/code> (LDAP)  <\/li>\n<li>Format: &#8220;X&#8221;, &#8220;X, X&#8221;, &#8220;X, X, X&#8221;, or &#8220;X, X, X, X&#8221;  <\/li>\n<li>Default (if not specified): &#8220;<code>0, 1, 2, 3<\/code>&#8220;  <\/li>\n<li>Example: &#8220;<code>3, 2, 0, 1<\/code>&#8220;  <\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>To learn more about configuring SMIME settings in Outlook mobile with Intune, visit:&nbsp;<a href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/clients-and-mobile-in-exchange-online\/outlook-for-ios-and-android\/outlook-for-ios-and-android-configuration-with-microsoft-intune#smime-settings.\" target=\"_blank\">Deploying   Outlook for iOS and Android app configuration settings in Exchange Online<\/a>.<\/p>\n<\/td>\n<\/tr>\n<tr>\n<th>Machine Translation<\/th>\n<td>\n<p>\u65b0\u3057\u3044 Intune \u30dd\u30ea\u30b7\u30fc\u3092\u5c0e\u5165\u3057\u3001\u7ba1\u7406\u8005\u304c Outlook \u30e2\u30d0\u30a4\u30eb\u3067\u306e SMIME \u8a3c\u660e\u66f8\u53c2\u7167\u306e\u512a\u5148\u9806\u4f4d\u3092\u5b9a\u7fa9\u3067\u304d\u308b\u3088\u3046\u306b\u3057\u307e\u3057\u305f\u3002\u3053\u308c\u306b\u3088\u308a\u3001\u7d44\u7e54\u306f\u3001\u8907\u6570\u306e\u30bd\u30fc\u30b9\u304c\u5229\u7528\u53ef\u80fd\u306a\u5834\u5408\u306b\u8a3c\u660e\u66f8\u3092\u9078\u629e\u3059\u308b\u65b9\u6cd5\u3092\u3088\u308a\u8a73\u7d30\u306b\u5236\u5fa1\u3067\u304d\u308b\u3088\u3046\u306b\u306a\u308a\u3001\u67d4\u8edf\u6027\u3068\u5185\u90e8\u30bb\u30ad\u30e5\u30ea\u30c6\u30a3\u30d7\u30e9\u30af\u30c6\u30a3\u30b9\u3068\u306e\u6574\u5408\u6027\u304c\u5411\u4e0a\u3057\u307e\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3044\u3064\u8d77\u3053\u308b\u304b:]<\/p>\n<p>\u3053\u306e\u5909\u66f4\u306f\u30012025 \u5e74 8 \u6708 29 \u65e5\u306b\u30ed\u30fc\u30eb\u30a2\u30a6\u30c8\u3055\u308c\u307e\u3059\u3002<\/p>\n<p>[\u3053\u308c\u304c\u3042\u306a\u305f\u306e\u7d44\u7e54\u306b\u4e0e\u3048\u308b\u5f71\u97ff:]<\/p>\n<p>\u3053\u306e\u30e1\u30c3\u30bb\u30fc\u30b8\u304c\u8868\u793a\u3055\u308c\u308b\u306e\u306f\u3001\u7d44\u7e54\u5185\u306e 1 \u4eba\u4ee5\u4e0a\u306e\u30e6\u30fc\u30b6\u30fc\u304c Outlook \u30e2\u30d0\u30a4\u30eb\u3067 SMIME \u3092\u4f7f\u7528\u3057\u3066\u3044\u308b\u53ef\u80fd\u6027\u304c\u3042\u308b\u3053\u3068\u304c\u30ec\u30dd\u30fc\u30c8\u3067\u793a\u3055\u308c\u3066\u3044\u308b\u305f\u3081\u3067\u3059\u3002\u3053\u306e\u66f4\u65b0\u30d7\u30ed\u30b0\u30e9\u30e0\u306b\u3088\u308a\u3001\u7ba1\u7406\u8005\u306f\u65b0\u3057\u3044Intune\u30dd\u30ea\u30b7\u30fc\u3092\u69cb\u6210\u3057\u3066\u3001\u3055\u307e\u3056\u307e\u306a\u30bd\u30fc\u30b9\u304b\u3089SMIME\u8a3c\u660e\u66f8\u3092\u53d6\u5f97\u3059\u308b\u9806\u5e8f\u3092\u5236\u5fa1\u3067\u304d\u307e\u3059\u3002<\/p>\n<p>\u3053\u306e\u30dd\u30ea\u30b7\u30fc\u306f\u30c7\u30d5\u30a9\u30eb\u30c8\u3067\u306f\u30aa\u30d5\u3067\u3059\u3002\u69cb\u6210\u3055\u308c\u3066\u3044\u306a\u3044\u5834\u5408\u3001Outlook Mobile \u306f\u5f15\u304d\u7d9a\u304d\u65e2\u5b9a\u306e\u691c\u7d22\u9806\u5e8f\u3092\u4f7f\u7528\u3057\u307e\u3059\u3002<\/p>\n<p>\u3010\u6e96\u5099\u3067\u304d\u308b\u3053\u3068\u3011<\/p>\n<p>\u30dd\u30ea\u30b7\u30fc\u304c\u4f7f\u7528\u53ef\u80fd\u306b\u306a\u3063\u305f\u3089\u3001\u6b21\u306e\u30ad\u30fc\u3092\u4f7f\u7528\u3057\u3066\u30dd\u30ea\u30b7\u30fc\u3092\u69cb\u6210\u3067\u304d\u307e\u3059\u3002<\/p>\n<ul>\n<li>\u9375\uff1a <code>com.microsoft.outlook.Mail.SMIMEEnabled.CertificatesLookupOrder<\/code>  <\/li>\n<li>Type: \u6587\u5b57\u5217<\/li>\n<li>\u53d7\u3051\u5165\u308c\u3089\u308c\u308b\u5024:\n<ul>\n<li><code>0<\/code> (\u9023\u7d61\u5148)<\/li>\n<li><code>1<\/code> (\u30ac\u30ed\u30f3)<\/li>\n<li><code>2<\/code> (\u30c7\u30d0\u30a4\u30b9)<\/li>\n<li><code>3<\/code> (LDAP)<\/li>\n<li>\u5f62\u5f0f: &#8220;X&#8221;\u3001&#8221;X\u3001X&#8221;\u3001&#8221;X\u3001X\u3001X&#8221;\u3001\u307e\u305f\u306f &#8220;X\u3001X\u3001X\u3001X&#8221;<\/li>\n<li>\u30c7\u30d5\u30a9\u30eb\u30c8(\u6307\u5b9a\u3057\u306a\u3044\u5834\u5408): &#8220;<code>0, 1, 2, 3<\/code>&#8220;<\/li>\n<li>\u4f8b: &#8220;<code>3, 2, 0, 1<\/code>&#8220;<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n<p>Intune \u3092\u4f7f\u7528\u3057\u3066 Outlook \u30e2\u30d0\u30a4\u30eb\u3067 SMIME \u8a2d\u5b9a\u3092\u69cb\u6210\u3059\u308b\u65b9\u6cd5\u306e\u8a73\u7d30\u306b\u3064\u3044\u3066\u306f\u3001\u300c<a href=\"https:\/\/learn.microsoft.com\/en-us\/exchange\/clients-and-mobile-in-exchange-online\/outlook-for-ios-and-android\/outlook-for-ios-and-android-configuration-with-microsoft-intune#smime-settings.\" target=\"_blank\">Exchange   Online \u3067\u306e Outlook for iOS \u304a\u3088\u3073 Android \u30a2\u30d7\u30ea\u306e\u69cb\u6210\u8a2d\u5b9a\u306e\u5c55\u958b<\/a>\u300d\u3092\u53c2\u7167\u3057\u3066\u304f\u3060\u3055\u3044&nbsp;\u3002<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table><\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"<p>MC1105021 | Intune policy to determine SMIME cert lookup priority Classification planForChange Last Updated 06 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-12039","post","type-post","status-publish","format-standard","hentry","category-uncategorized"],"_links":{"self":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/12039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/comments?post=12039"}],"version-history":[{"count":0,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/posts\/12039\/revisions"}],"wp:attachment":[{"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/media?parent=12039"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/categories?post=12039"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/m365jp.net\/index.php\/wp-json\/wp\/v2\/tags?post=12039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}