Encrypted Email Setup for Microsoft 365 (Abridged)

Note: This is the shortened form of the full article - pictures removed from this article. The original / full article is linked here.

Overview

What you’ll need:

1. Trial subscription with Paubox (don't have one? sign up here!)
2. A Microsoft 365 account (Business Basic, Standard, or Premium)
3. Microsoft 365: Admin access to your organization's Office Exchange Admin  (https://outlook.office.com/ecp)
4. Domain: Admin access to your organization's Domain Host (for ex. GoDaddy or Cloudflare)
5. The smarthost value - provided by Paubox during setup

Note: Make sure you can log into Microsoft 365 & Domain Host as an admin before proceeding. If you don’t have login credentials or permissions, reach out to who set up your Microsoft 365 account and/or website.

What you’ll do:

1. Domain: Update the records in your Domain Host
2. Microsoft 365: Create a connector 
3. Paubox Dashboard: List the email addresses for secure sending, and upload your org's logo
4. Test: Send a test email & see it in your Paubox Admin Panel

Questions? Stuck? We’re here for you!  support@paubox.com

Step-By-Step Guide

Part I: Your Domain - Update Your Records  

1. Log in to your Domain Host
2. Click on the Control Panel (may also be called DNS Zone Editor, or just DNS)
3. If you see a record of type TXT with a value similar to: v=spf1 include:spf.protection.outlook.com -all
   • Edit the record and insert "include:_spf.paubox.com" just before the -all; for example:
     v=spf1 include:spf.protection.outlook.com include:_spf.paubox.com -all
   • Note: there may be other "includes" or IP numbers in the record, that is fine, just insert the "include:_spf.paubox.com" right before the -all
   • Click Save
4. If you do not see a record of type TXT that starts with v=spf1, create a new one: 

• In the Records section, click Add (may also be called Add Record)
• For Type, enter TXT
• In the Host Field, type: @  (if it does not accept the @ symbol, enter your domain)
• In the TXT value or Text field, type this line:

                 v=spf1 include:spf.protection.outlook.com include:_spf.paubox.com -all

• Leave the default value in the TTL field
• Click Save

Part II: Microsoft Microsoft 365 - Create a Connector                                 

1. Log in to the Microsoft 365 Exchange Admin Center using admin-level credentials (https://admin.exchange.microsoft.com/#/homepage)
2. In the navigation pane on the left, click mail flow. Then click connectors.
3. Click + Add a connector 
4. On the pop-up window that follows, select
   From: Office 365 and To: Partner organization. Then click Next
5. Under *Name: enter Paubox. Make sure the checkbox labeled Turn it on is checked, then click Next
6. On the next screen, under Specify when do you want to use this connector?, select Only when email messages are sent to these domains 
7. In the Add domain field, enter * then click then the blue box with the + symbol
   
8. Click Next
9. Choose Route email through these smart hosts then click +
10. During setup, you'll be provided with the value to enter in the "add smart host" box
11. Enter the provided smarthost, then click Save
12. Click Next
13. On the next screen, make sure Always use Transport Layer Security (TLS) to secure the connection (recommended) and Any digital certificate, including self-signed certificates are selected. Click Next.
14. Click Next again
15. On the next screen, click the + and enter a test email address as the validator email address: pauboxtesting@gmail.com
    ... and then click Next.
16. Click Validate
17. After the test is successful, click Next
18. On the next screen, click Create Connector 
19. Next click Done
20. The Paubox connector for Microsoft 365 is now live.

Part III: Paubox Dashboard - Enter Email Addresses; Upload Logo

1. Navigate to the Paubox Admin Login Page (https://www.paubox.com & "Sign In")
2. Log in with your email address and password (not sure? click "Forgot your password?")
3. Click on "Encrypted Senders" and "Add Single Sender" to enter every email address that should be sending securely via Paubox if not already listed (at your limit? email support@paubox.com)
4. Click on "Overview" and under "Domain Settings" upload your organization's logo

Part IV: Test Email

Sending a Test Email

1. Log in to your email account
2. Compose a new email to: paubox15@gmail.com with the subject: Test
3. Enter anything you like in the message body, and click Send
4. Congratulations! You have sent your first secure email via Paubox!

 Verifying a Test Email

1. Navigate to the Paubox Admin Login Page
2. Log in with your email address and password (not sure? click "Forgot your password?")
3. Under Outbound, click on Statistics 

                  Verify green bar graph shows outbound email count passing through our servers

    4. Under Outbound, click on Mail Log

                 Verify that your test email to paubox15@gmail.com appears in the log

In addition, check your email inbox for replies to the emails you send - and note the security footer that appears on the bottom of your messages, confirming they were sent securely via Paubox. 

Note: internal emails (sent to people in your organization) are secure, but will not have the security footer at the bottom.