Troubleshooting

Certificate not found, contains errors or is invalid

If you are encrypting your message, Stormshield Data Mail searches your trusted address book and, if necessary, your LDAP directories for each recipient's certificate. It also verifies whether the certificate is valid, is authorized for encryption, and presents no unsupported critical extensions.

NOTE
When sending a message to a dynamic distribution group, it is not possible to search for recipients' certificates. This is because SDS Enterprise cannot access the e-mail addresses of members of such groups.

If any certificates are not found when sending the e-mail, Stormshield Data Mail displays the recipients in question with a sign.

Certificate issues must be resolved before your message can be sent. If any certificates are not in your address book, you must import them. If the recipients are part of a contact group, you can remove the recipients whose certificates cause issues.

Stormshield Data Mail displays the certificates which present an issue (self-certified certificate, expired revocation list, etc.) with the warning sign. If, at the time of sending, all certificates are in warning mode, you can still continue sending with the Continue button, or resolve the issues raised by the certificates after canceling the send.

If any certificates contain errors when sending the e-mail (expired, revoked, etc.), Stormshield Data Mail displays the affected certificates with a sign. Certificate issues must be resolved before your message can be sent.

IMPORTANT
If a co-worker's e-mail address has changed, the user certificate must be renewed and republished in the LDAP directory, if necessary. If the co-worker's e-mail address is not the same as the one indicated in their certificate, they will no longer be able to send secure messages.