Downloaded 24 times
Uploaded byAlbert Hoitingh
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
The document outlines encryption methods in Microsoft 365, including features like customer key, double key encryption, and Microsoft Purview message encryption. It provides information on data protection strategies such as encryption for data at rest and in transit, as well as key management protocols and compliance considerations. Additionally, it highlights the significance of eDiscovery, sensitivity labels, and implications for co-authoring and data sharing within the Microsoft 365 environment.
In this document
Powered by AI
Introduces Albert Hoitingh and the focus on encryption within Microsoft 365.
Covers topics including encryption for Microsoft 365 workloads, Customer Key, and Microsoft Information Protection.
Discusses encryption in Microsoft 365 and its specific functions, including data in transit and at rest.
Covers data at rest encryption methods such as BitLocker and Data Encryption Policies affecting various services.
Focuses on securing data in transit using protocols like TLS and secure transport methods.
Discusses key management systems including Microsoft managed keys, Customer Key, and controls organizations have.
Explains setting up Customer Key, including Azure Key Vault configurations.
Discusses managing statuses of Customer Keys within the Microsoft 365 environment.
Introduces Double Key Encryption with explanations on tenant and organizational keys.
Details the use of sensitivity labels in encryption and standards like AES256 and RSA.
Highlights importance of file types and identity management in the context of Microsoft Purview.
Examines implications of encryption on features like eDiscovery, co-authoring, and Microsoft 365 Copilot.
Focus on secure email communication through Microsoft Purview Message Encryption.
Discusses guidelines on handling encrypted email attachments and permissions.
Brief run-through of message encryption concepts discussed in previous slides.
Practical tips on sharing encrypted files and migration considerations.
Session wrap-up and inviting questions from the audience.
Announcement of the next session focusing on Graph API StarterKit for automation.
More Related Content
Similar to Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
More from Albert Hoitingh
Encryption in Microsoft 365 - ExpertsLive Netherlands 2024
- 1. Albert Hoitingh Encryption inMicrosoft 365 Start 7:45
- 2.
- 3. Principal consultant Microsoft SecurityMVP Albert Hoitingh
- 4. (1) Encryption for Microsoft 365 workloads (2)Customer Key and Double Key (3) Microsoft Information Protection (4) Microsoft Purview Message Encryption (5) Things to keep in mind Today’s agenda
- 5. Encryption in Microsoft365 and Purview
- 6. 1.At rest Intransit Specific functions Different scopes
- 7.
- 8.
- 9.
- 10. Data at rest Per-fileencryption (SPO) BitLocker – on many levels Data Encryption Policies (DEPs) SharePoint Online and OneDrive Exchange Online All other Microsoft 365 services, incl. Microsoft Purview Information Protection
- 11. Data in transit SecureReal-Time Transport Protocol (SRTP) (Mutual) Transport Layer Security (MTLS/TLS) Exchange IRM – s/MIME – OME https://www.adaptivedigital.com/secure-rtp/
- 12.
- 13. 1.Microsoft managed Customer key DoubleKey Encryption (MPIP) Key management
- 14. Microsoft managed SharePoint Online,OneDrive Exchange Online
- 15. Customer key Access byMicrosoft Organization in control Different DEPs, including multi-geo Azure Key Vault Hardware Security Modules
- 16. Customer Key SharePoint Online,OneDrive Exchange Online
- 17. Customer Key perDEP Two Azure Subscriptions Create and configure (Premium) Azure Key Vault and keys Onboard to Customer Key https://learn.microsoft.com/en-us/purview/customer-key-set-up
- 18. Customer Key perDEP https://learn.microsoft.com/en-us/purview/customer-key-set-up
- 19.
- 20. Double Key Encryption Tenantkey and organizational key Office Apps | Sensitivity labels Impairs specific functions
- 21. Software DKE service, GitHub Deploy service, publishkey Create labels with DKE Double Key Encryption
- 22.
- 23. Items and labels Encryption| Visual markings | Offline availability Label stays with item Hierarchy is important
- 24. 1.Content key Symmetric AES256-CBC (Cypher Block Chaining) Keyprotection Asymmetric RSA 2048 bit Certificate signing SHA-256 Encryption standards
- 25.
- 26. Filetypes are important MicrosoftPurview Information Protection Viewer client Native clients | Microsoft Edge Watch out for the file extension | some types only support classification
- 27. Identities are important MicrosoftLive | Guest | RMS Entra ID accounts Set-SPOTenant - EnableAzureADB2BIntegration
- 28. Identities are important MicrosoftLive | Guest | RMS Entra ID accounts Set-SPOTenant - EnableAzureADB2BIntegration
- 29. Consequences eDiscovery | contentsearch Co-authoring | auto-save Microsoft 365 Copilot
- 30. Consequences eDiscovery | contentsearch Co-authoring | auto-save Microsoft 365 Copilot
- 31. Consequences eDiscovery | contentsearch Co-authoring | auto-save Microsoft 365 Copilot
- 35. Microsoft Purview MessageEncryption
- 36. Secure e-mail inMicrosoft 365
- 37. Any recipient and e-mail client Secureweb- portal Do not forward Encrypt only Microsoft Purview Message Encryption
- 38. Advanced message encryption Mailrules using sensitive information types Revocation and expiration Information Protection and Governance Compliance E5 Microsoft 365
- 39. Encapsulated e-mail message Outlook:opens natively .pmsg file MPIP viewer does not work Secure web-portal
- 40. E-mail attachments Do notforward | Encrypt only Non-protected Office document Protected Office document Mind the Entra ID account Set-IRMConfiguration - DecryptAttachmentForEncryptOnly <$true|$false>
- 41.
- 49. Things to thinkabout
- 50. Tips and tricks Sharingencrypted files Older metadata model (MPIP_) Decrypt documents from SPO: Unlock-SensitivityLabelEncryptedFile Super User role eDiscovery (Premium) Encrypted/Signed PDFs Guaranteed SharePoint Permissions
- 51.
- 52. THANK YOU Are thereany questions? Please evaluate this session in the App.
- 53. Next session 10:10– 11:00 The Graph API StarterKit for AVD and W365 automation