Microsoft GZA-00006 Computer Accessories User Manual


 
Office 2008 Planning
64
Smart card support
Entourage 2008 supports the use of digital certificate that have been stored on smart card-based
keychains to perform secure messaging operations such as digitally signing, verifying, encrypting,
and decrypting e-mail messages.
Smart card features in Entourage 2008
Entourage 2008 includes the following features:
Mac OS X has built-in smart card support that complies with the U.S. Department of
Defense standards for U.S. federal government smart cards. These standards follow one
of the approved specifications: Common Access Card (CAC), Government Smart Card
Interoperability Specification (GSCIS), Personal ID Verification (PIV).
Entourage users can now apply send or save a digitally signed e-mail message in their
Drafts folder.
When there are more than one certificate associated with an e-mail account, Entourage
uses the certificate that is not expired. If all the certificates associated with an e-mail
message are expired, Entourage displays an error message.
Entourage uses visual cues to distinguish between expired and current certificates.
Entourage uses symbols to identify the certificates used for digital signatures.
For information about Apple’s support for smart cards, see Smart Card Services
on the Apple
Developer Web site (developer.apple.com).
Using Entourage 2008 with ISA Server and ADAM
Internet Security and Acceleration Server (ISA Server) is compatible with most of the authentication
methods that can be used with Entourage 2008. However, you cannot use forms-based
authentication when Entourage 2008 is used with ISA Server 2004. For information about how to
use forms-based authentication in an ISA Server environment, see You cannot access your mailbox
on an Exchange Server 2003 front-end server by using Entourage 2004 for Mac (KB909268) in
the Microsoft Knowledge Base (support.microsoft.com).
For more information about ISA Server, see the Microsoft Internet Security and Acceleration
Server on the the Microsoft Web site (www.microsoft.com/isaserver).
If you provide secured external access to the Global Address List (GAL), you might prefer not to
open ports for LDAP searches through ISA Server. Instead, you can host a copy of the GAL on an
Active Directory Application Mode (ADAM) server that is exposed to the Internet for Secure
Sockets Layer (SSL) access. For more information about ADAM, see Introduction to Windows Server
2003 Active Directory Application Mode on the Microsoft Web site (www.microsoft.com).