<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div><span style="font-family: LucidaSans;">We have our PIV certs populated in AD. </span><span style="font-family: LucidaSans;">I have the OS X Smartcard Services installed and enabled on an OS X </span><span style="font-family: LucidaSans;">10.9.2</span><font face="LucidaSans"> laptop
bound to AD. I can successfully log into OS X with my PIV card. I can create new email messages with click the digital signature button to successful send digitally signed emails. I can’t click the encryption button. It is is grayed out.</font></div>
<div><font face="LucidaSans"><br>
</font></div>
<div><font face="LucidaSans">I read in Apple Mail Help that I need the personal certificate for each recipient in my Keychain to send them encrypted messages. Can Apple Mail not get those certificates from AD?</font></div>
<div><font face="LucidaSans"><br>
</font></div>
<div><font face="LucidaSans">Walter</font></div>
<div apple-content-edited="true">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; orphans: auto; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; widows: auto; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;">
<div style="orphans: 2; widows: 2;">--</div>
<div style="orphans: 2; widows: 2;">Walter Rowe, Hosting Services<br>
Enterprise Systems / OISM<br>
Email: <a href="mailto:walter.rowe@nist.gov">walter.rowe@nist.gov</a><br>
Work: 301-975-2885</div>
</div>
</div>
<br>
</body>
</html>