CMT fr Cexistence 3.4.3 Release Ntes May 2015
Table f Cntents What s New in Versin 3.4.3... 3 Release Ntes 3.4.3... 3 On the Fly Decryptin and Encryptin... 4 Prerequisites & Settings... 4 Hw it Wrks... 6 Abut Binary Tree... 8 CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 2
What s New in Versin 3.4.3 CMT fr Cexistence (CMTc) 3.4.3 includes several updates t the BTCal cmpnent f CMTc. On the fly decryptin and encryptin that will decrypt messages sent frm Dmin t Exchange and encrypt messages sent frm Exchange t Dmin has been added (See the On the Fly Decryptin and Encryptin sectin belw fr mre infrmatin). The new BTSUBJECTPREFIXMARKER parameter allws fr prefixes autmatically prepended t meeting titles in meetingrelated messages sent frm Ntes t be remved. If the GRIP prcess fails and the GRIP timeut is exceeded, an NDR with the reasn and crrective actin is nw sent t the Chair. This release als includes several bug fixes detailed belw. Release Ntes 3.4.3 The fllwing features are included in this release (user stry/defect numbers are in parenthesis): If the GRIP prcess fails and the GRIP timeut is exceeded, an NDR with the reasn and crrective actin is nw sent t the Chair. (1944) The BTSUBJECTPREFIXMARKER parameter has been added t the NOTES.INI file. BTSUBJECTPREFIXMARKER Accepted Value: markers separated by a cmma. Default: This parameter allws fr prefixes such as Updated and Reschedule autmatically prepended t meeting titles in meeting-related messages sent frm Ntes and received by Outlk t be remved. Remving the prefixes allws users t mre easily see meeting titles n mbile device calendar views. Text preceding the marker(s) specified fr this parameter, a cln-space (: ) by default, and the marker will be remved frm meeting-related messages sent frm Ntes and received by Outlk. (2042) Use a trailing cmma t avid the stripping f trailing spaces. Fr example, BTSubjectPrefixMarker=:,-, Cmmas as part f a marker can be escaped with a backslash (\,). Backslashes as part f a marker can be dubled (\\). Unicde characters are nt supprted. An issue where the meeting lcatins frm Outlk were being incrrectly cnverted t qualified names in Ntes resurces has been reslved. (2129) On the fly decryptin and encryptin that will autmatically decrypt messages sent frm Dmin t Exchange, and encrypt messages sent frm Exchange t Dmin, using standard Dmin encryptin has been added. See the On the Fly Decryptin and Encryptin sectin belw fr details f this new feature. (2134) An issue where an NDR fr using unsupprted exceptins (fr example, mve t nearest wrkday) fr recurring meetings was being incrrectly sent has been reslved. (3492) An issue where meetings sent t users with qutatin marks in the Fullname field were nt being ruted has been reslved. (3737) An issue where an NDR was incrrectly generated when rescheduling a single instance f a recurring Outlk meeting sent t a Ntes user has been reslved. (3849) CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 3
An issue where NDRs wuld display -1, -1 fr the meeting date instead f the actual meeting date has been reslved. (3853) An issue causing the "Avided pssible buffer ver run" t be written t the Dmin cnsle fllwed by a Dmin server crash has been reslved. (4002) An issue where the installer was placing the templates in the Dmin Prgram Directry rather than the Dmin data directry has been reslved. (4003) On the Fly Decryptin and Encryptin On the Fly Decryptin and Encryptin is an advanced feature in CMT fr Cexistence that will autmatically decrypt messages sent frm Dmin t Exchange, and encrypt messages sent frm Exchange t Dmin, using standard Dmin encryptin. In rder t decrypt an item sent frm a Dmin user t Exchange, yu must first mdify the Mail file template fr all Dmin mail users, s that whenever a message (r calendar item) is encrypted, a specific user is autmatically added t the BCC field f that item. CMT fr Cexistence will use that ID t decrypt the message befre it is ruted t Exchange. Encrypting items frm Exchange t Dmin requires that the message (r calendar item) be marked as Private. CMT fr Cexistence will utilize the Public Keys in the Dmin Directry t encrypt the messages fr each Dmin recipient. Prerequisites & Settings The mail file template fr all Dmin users must be mdified s that any time a message is marked fr encryptin, the Dmin user accunt used fr On the Fly Decryptin and Encryptin is added t the BCC field. This accunt shuld be an administrative accunt with a valid ID, passwrd and certificate. The Dmin user accunt used fr On the Fly Decryptin and Encryptin must a valid Ntes Certificate in their Persn Dcument in the Dmin Directry, but it des nt need a mail file assciated t it. The Dmin user accunt ID file used fr On the Fly Decryptin and Encryptin must be n all Dmin Cexistence servers. The passwrd fr this ID may be stred in the Ntes.ini r in a text file the Dmin Cexistence server(s). All Exchange Recipients must als have a valid Ntes Certificate in their Persn Dcument in the Dmin Directry. The fllwing Ntes.ini values must be cnfigured n all Dmin Cexistence servers: BTEncryptDecrypt=1 0 - disabled (default) CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 4
1 - encrypt and decrypt 2 - decrypt nly 3 - encrypt nly Nte: the last tw values d nt have a use at present and are brken ut in case they are needed fr future use cases BTDecryptID=<ID file name, full pathname if nt in the Data flder> This is the ID file that is assciated with the user accunt that is added t the BCC field f encrypted messages (frm Dmin t Exchange) BTDecryptEmail=<Ntes distinguished name fr the accunt used fr n-the-fly encryptin/decryptin> BTDecryptPasswrdFile=<full path and file name> Use this ini parameter if yu will be string the passwrd fr the BTDecrypt ID in a text file. This must be a plain text file that cntains nthing but the passwrd fr the BTDecrypt ID file. OS security can be enabled n this file, as lng as dne with windws server accunt used by the Dmin server. BTDecryptPasswrd=<passwrd fr the accunt used fr n-the-fly encryptin/decryptin> Use this ptin is yu will be string the passwrd fr the BTDecrypt ID in the Ntes.ini file. BTDminEncryptDmains= This is a multivalue, cmma separated parameter that shuld cntains a list f Dmin dmains t be included is prcessing On the Fly Decryptin and Encryptin. BTCalTargetAddressPrefix=dmin. This is the value that is prepended t the SMTP address when creating the TargetAddress. The abve value is a typical example (dmin.). Nte the value ends with a perid, since that t is prefixed t the base smtp address fr Dmin users - as happens when the AD SMTP address f "Jane.Smith@cnts.cm" is stred in the AD targetaddress as a value f "Jane.Smith@dmin.cnts.cm" ) BTLeaveKeepPrivate=0/1 (default=0) When set t 0, CMTC will delete the $KeepPrivate item, which allws the Ntes user t reply with histry r frward t the encrypted mem, as well as respnd t calendar items. (Recmmended) When this is set t 1, $KeepPrivate will remain in place, which result in nt being able t reply with histry, frward r respnd t calendar items. This setting will verride SMTP_NO_MAP_PERSONAL, SMTP_NO_MAP_PRIVATE and SMTP_NO_MAP_COMPCONF. Please refer t this IBM technte fr mre infrmatin n these settings: http://www-01.ibm.cm/supprt/dcview.wss?uid=swg21417429 If this is set t 1, the chairpersn will receive an NDR frm any Dmin rms r resurces in the invitatin. BTScanSubjectFrEncryptFlag=1 If set t 1, CMTC will encrypt any item that has the value f BTScanSubjectFlag in the subject f the message. This allws Exchange users t encrypt items frm mbile devices. If set t 0, CMTC will nt encrypt any items based n the subject cntent. BTScanSubjectFlag=<text> This value is used t allw Exchange mbile users t put add redefined keywrd in the subject f an email t have that message encrypted. This shuld be unique text that will nt be used accidentally. BTEXPANDCALGROUPS=N BTEXPANDMAILGROUPS=N BTEXPANDGROUPS=N CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 5
The three existing ini parameters defined when mail grup membership is expanded during the ruting prcess. If these are set t N (n), On the Fly Decryptin and Encryptin requires that grups be synched, r represented as member-ppulated grups in the target directries. If grups are represented as Cntacts (Exchange), r as Persn dcuments (Dmin), sending encrypted message t the grup will result in an DNR (see NDR49) If these are set t Y (yes), grups will be expanded prir t the decryptin/encryptin prcess, s they will be decrypted r encrypted as expected. It is strngly recmmended that yu investigate hw these setting will impact yur messaging envirnment befre yu make any changes. Custmizable NDR s As with ther CMTC NDR messages, there is a single custmizable message, and 4 custmizable encrypt NDR s reasns. The default text is listed belw. These are custmized in the same manner as any BTNDR text. BTENCRYPTFAILTEXT - multiline, supplies the generic NDR email text. Example: BTENCRYPTFAILTEXT1=There was a prblem delivering yur message t a Ltus Ntes user, grup, r mailbx.\n\n BTENCRYPTFAILTEXT2=%REASON%\n\n BTENCRYPTFAILTEXT3=Thank yu fr giving this matter yur prmpt attentin.\n If nt supplied in Ntes.ini, it defaults t the values used in the first 2 lines abve. BTNDR49: "An encrypted cpy f the message culd nt be delivered t the fllwing Dmin Grup(s): %GROUPLIST%.\r\nPlease re - send the message using individual recipients." BTNDR50: "An encrypted cpy f the message culd nt be created fr the fllwing Ntes recipient(s): %RECIPIENTS%.\r\nPlease cntact the HelpDesk." BTNDR51: "An encrypted cpy f the message culd nt be delivered t the fllwing Ntes recipient(s): %RECIPIENTS%.\r\nPlease cntact the HelpDesk." BTNDR52: "This meeting cntains mre text than BTCal can prcess fr Dmin users.\r\nplease recreate it using less than 25K f text." Hw it Wrks Encrypting frm Exchange t Dmin Exchange generated email sent t Dmin users that is marked private, r has the prperty ICCategry=4 will be encrypted. Befre submitting an item fr encryptin, CMTC will validate that all users in the recipient list have a Public Key in the Dmin Directry. If any recipients d nt have a Public Key, an NDR will be sent t the riginatr. These items will marked as Private in the recipients inbx. If BTScanSubjectFrEncryptFlag=1 and the subject cntains the text value in BTScanSubjectFlag the messages sent frm Exchange t Dmin users will be encrypted. This is t allw mbile users t encrypt messages sent frm smart phnes. In rder t allw Dmin users t reply with histry and respnd t calendar items, Prevent Cpy (Ntes feature) is NOT set n encrypted items frm Exchange. If any users d nt have a valid Public Key, CMTC will send an NDR t the riginatr. CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 6
When Calendar invitatins are encrypted, they will appear as a mem with a meeting.ics attachment in the Dmin user s inbx. When the item is pened it will be cnverted t a typical invitatin. Ntes: Exchange generated email with external recipients shuld nt be ruted thrugh the Dmin CMTC servers, therefre nt encrypted. Encrypted calendar invitatins frm Exchange t Dmin will initially arrive as an email with a meeting.ics attached, nt an invitatin. Once the email is pened, it is prperly displayed as an invitatin. There will als be an additinal email versin f the item in the inbx. If the Ntes preferences are set t nt t remve items frm the inbx after yu prcess them, yu will see tw items fr each invitatin. Decrypting frm Dmin t Exchange When any encrypted item is sent frm a Dmin user t an Exchange user, it will be decrypted using the BTDecryptID specified in the Ntes.ini file f the Dmin Cexistence server. The user accunt assciated with this ID must be in the BCC field when the item is sent. If is nt listed n the email (therefre it s nt pssible t decrypt), then the CMTC will autmatically fallback t whatever prcess is specified fr BTZAPPCHECKENCRYPT is the Ntes.ini. Invites with r&r s we hide the bcc accunt, but if there is a rm, it ges t the ruter befre btcal. S resurce reservatin will shw bcc. Ntes users can see bcc in prperties (nt the bcc field in ui) Lgging: Successful and failed encryptin and decryptin stats shuld be lgged t btcalsta.nsf CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 7
Abut Binary Tree Binary Tree is a singularly fcused glbal prvider f migratin sftware and slutins fr Ltus Ntes, Micrsft Exchange, Active Directry, and Windws Server envirnments. Since 1993, Binary Tree has enabled mre than 6,000 custmers t migrate mre than 30 millin email users, and facilitated sme f the mst cmplex migratins n the planet. Its sftware slutins are available fr migrating frm Exchange 2003/2007/2010/2013 and Ltus Ntes t npremises and nline versins f Micrsft Exchange, as well as migratins f Active Directry and Windws Server envirnments. Binary Tree is a Micrsft Gld Partner, an IBM Advanced Business Partner, and is ne f Micrsft s preferred vendrs fr migrating t Micrsft Office 365. The Cmpany is headquartered utside f New Yrk City with ffices in Lndn, Paris, Stckhlm and Sydney. Fr mre infrmatin, visit us at www.binarytree.cm. Binary Tree Scial Media Resurces Cpyright 2015, Binary Tree, Inc. All rights reserved. Binary Tree, the Binary Tree lg, the SMART Migratin graphics, and any references t SMART Migratin and Binary Tree s sftware prducts, are trademarks f Binary Tree, Inc. All ther trademarks are the trademarks r registered trademarks f their respective rights hlders. CMT FOR COEXISTENCE 3.4.3 RELEASE NOTES 8