SecureEmail - Faq

Comodo SecureEmail Mini-FAQ

Q. What operating systems do SecureEmail and SecureEmail Pro support?
A.
32 bit versions
Windows Vista (32 bit)
Windows XP (32 bit)
and Windows 2000

64 bit versions
Windows Vista (64 bit)
Windows XP (64 bit)

Q. Which e-mail clients does SecureEmail support?
A. SecureEmail is confirmed to support:

Outlook 2000 and above
Outlook Express 5.5 and above
Thunderbird 1.5 and above
Windows Mail
Incredimail

Q. Does SecureEmail work with POP/SMTP mail clients other than Outlook, Outlook Express and Thunderbird and Incredimail?
A. SecureEmail should work with most Windows mail clients that use POP, SMTP or IMAP messaging protocols, but comprehensive testing has not been completed and you may experience unexpected behavior. Users are encouraged to contact the Comodo Forums to report any problems experienced when using SecureEmail with alternative mail clients.

Q: What's the difference between the Home and Pro versions of SecureEmail

  • Pro version can be configured to encrypt and decrypt messages using certificates from any vendor whereas the Home version can only encrypt/decrypt using a Comodo email certificate. This is an especially important feature in a corporate environment when employees will be likely to receive messages encrypted using email certificates from C.A.s other than Comodo.
  • Pro version can only sign messages with a Comodo corporate e-mail certificate. It cannot use Comodo free e-mail certificates to sign messages.
  • Home version can sign using Comodo free or corporate email certificates but cannot encrypt using 3rd party certificates.
  • Future developments planned for the Pro version included Key ESCROW and central management of network installations.

 Home VersionPro Version
Automatic Encryption and Signing of Email
Encrypt with one-time use session certificates
Read encrypt mails using web-reader service
Automatic certificate exchange and installation
Built in Wizard for easy certificate sign-up
Automatic import of mail settings
Encrypt with 3rd Party Certificates
Sign with Comodo Free Certificates
Sign with Comodo Corporate Certificates

Q. Will my port settings be imported into SecureEmail?
A. Yes. SecureEmail will automatically import your port settings from previously configured mail accounts in Outlook, Outlook Express and Thunderbird. For all other supported and unsupported mail clients, SecureEmail will use the following default ports:

POP - port 110
SMTP - port 25
IMAP - port 143

If your mail set-up utilizes different ports to those listed above, then you need to configure SecureEmail accordingly. Click the 'Protocols' button in the main application interface to re-configure them.

Q. I already have an e-mail certificate from a vendor other than Comodo CA. Will SecureEmail work with my certificate?
A. The Pro version of the software will encrypt and decrypt with non-Comodo email certificates but requires a Comodo certificate to digitally sign messages. The home version requires a Comodo certificate for both encryption/decryption and signing.

Q. How do I get a free Comodo certificate?
A. Two options:
Option 1: Use the Sign-Up Wizard from the Certificates tab of the SecureEmail main window (see below).

(Click here to enlarge)

Option 2: Sign up for an email certificate at the Comodo website using the following link: http://www.comodo.com/products/certificate_services/email_certificate.html

Q. I've downloaded an encrypted e-mail before I installed SecureEmail and before I had installed my Comodo CA certificate. How do I decrypt a SecureEmail e-mail that I've already received?
A: There are three choices open to you.

For Outlook, Outlook Express and Thunderbird (Windows only) users:
After Comodo SecureEmail has been installed, you will be asked whether you would like to scan your inbox for encrypted messages the next time you start your mail client. Selecting 'Yes' will allow SecureEmail to detect and decrypt any pre-existing encrypted mails. Although this is a one-off process and it should not be necessary to re-scan again, users have the option to enable automatic scanning in the 'E-mail folders scanning' section of the application.

Other Windows based e-mail client users:
Forward the e-mail back to the receiving e-mail address to enable SecureEmail to intercept it and decrypt the contents.

For all other users including Linux and web based e-mail client users:
To decrypt this e-mail you will need to use the Comodo SecureEmail WebReader service by forwarding the e-mail to secure-read@secure-email.comodo.com. You will then receive an e-mail with full instructions of how to proceed.

Q. Do I have to disable encryption and signing (S/MIME) in my e-mail client?
A. Yes. For smooth operations of SecureEmail it is strongly recommended that you turn off encryption and signing in your e-mail client as both of these duties will be performed by SecureEmail.

Outlook - Select Tools > Options > Security. Make sure the 'Encrypt contents...' and 'Add Digital Signature...' boxes are NOT checked (see below)

Q. Why are some mails not signed?
A. This could be because your e-mail client has encrypted an e-mail before SecureEmail intercepted it. Please ensure that you have turned off encryption and signing in your e-mail client.

Q. Why isn't the SecureEmail auto decryption footer added to some decrypted e-mails?
A. This is probably because the e-mail was also signed. Adding extra data to a signed e-mail would destroy the integrity of the e-mail's signature, making the signature invalid.

Q. Where does SecureEmail store my certificate and my contacts' certificates?
A. SecureEmail uses the standard Microsoft Windows certificate store on your computer to store certificates. You can view these from the Certificates tab in the SecureEmail main window.

Q. What are single-use certificates?
A. Single-use certificates are one-time 'session' certificates that enable the encryption of messages to recipients when you do not have their 'regular' email certificate installed on your system. The encrypted e-mail is then sent to the contact and the single-use certificate is uploaded to the SecureEmail servers. Your recipient then has two options to decrypt and read the email:

(1) Download and install SecureEmail themselves. (a link to the application is included in the notification email). After installation, SecureEmail will automatically scan their inbox in order to decrypt any encrypted messages and allow them to read it.

(2) They can also read the mail by simply forwarding your message to secure-read@secure-email.comodo.com and using Comodo's secure web reader service. Again, full instructions on this process are sent to the recipient in the initial notification email.

Q. How can I stop SecureEmail encrypting e-mails with single-use certificates?
A. You can stop SecureEmail encrypting with single user certificates by selecting

Encryption > Advanced > "Only encrypt for contacts where a certificate is already installed on the system" (see below)

(Click here to enlarge)

Please note that if your turn off encryption with Single Use Certificates then e-mails sent to contacts where a certificate is not installed will not be encrypted and will be sent in clear text.