# Encryption Issue

**URL:** <https://community.ciphermail.com/t/encryption-issue/551>\
**Category:** Gateway\
**Created:** [June 19, 2017, 2:11am UTC](https://community.ciphermail.com/t/encryption-issue/551 "2017-06-19T02:11:32Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Paul\_Bronson](https://avatars.discourse-cdn.com/v4/letter/p/8e8cbc/32.png) [@Paul\_Bronson](https://community.ciphermail.com/u/Paul_Bronson)\
**Post date:** [June 19, 2017, 2:11am UTC](https://community.ciphermail.com/t/encryption-issue/551/1 "2017-06-19T02:11:32Z")

</div>

Hi All,

I setup a new Ciphermail server and am getting some errors.

Everything works except for the fact that I have my internal mail server  
relaying to the cipher mail server for PDF encryption but I am getting the  
following error:

PDF encryption is disabled for the sender

I have the following enabled: [http://i63.tinypic.com/esuqma.png](http://i63.tinypic.com/esuqma.png)

The configuration settings are extremely confusing. I want all mail NOT to  
be encryption EXCEPT for the subject tag set to [encrypt]

If thats set, the message should get encrypted.

Can someone help me out with which settings I need to turn on and off?

---

<div class="post-metadata">

**Author:** ![martijn](https://dub1.discourse-cdn.com/flex017/user_avatar/community.ciphermail.com/martijn/32/127_2.png) [@martijn](https://community.ciphermail.com/u/martijn)\
**Post date:** [June 19, 2017, 7:28am UTC](https://community.ciphermail.com/t/encryption-issue/551/2 "2017-06-19T07:28:47Z")

</div>

> Hi All,
> 
> I setup a new Ciphermail server and am getting some errors.
> 
> Everything works except for the fact that I have my internal mail server  
> relaying to the cipher mail server for PDF encryption but I am getting the  
> following error:
> 
> PDF encryption is disabled for the sender
> 
> I have the following enabled: [http://i63.tinypic.com/esuqma.png](http://i63.tinypic.com/esuqma.png)
> 
> The configuration settings are extremely confusing. I want all mail NOT to  
> be encryption EXCEPT for the subject tag set to [encrypt]
> 
> If thats set, the message should get encrypted.
> 
> Can someone help me out with which settings I need to turn on and off?

The MPA log should tell you why the email was not encrypted. The entry  
"PDF encryption is disabled for the sender" from the log more or less  
tells you why it was not encrypted 🙂

> From your screenshot it looks like "PDF enabled" is not checked and

therefore disabled (hence the message in the log).

Some (most?) settings are sender \*and\* recipient settings, i.e., they  
are checked for the sender and recipient(s). The main reason for this is  
that this provides the greatest flexibility. You should therefore make  
sure that changes are done for sender and recipients. The easiest to  
accomplish this is to set the global settings because every user  
inherits the global settings.

To configure PDF encryption with PDF with OTP password mode I suggest  
the following steps

1. remove existing users and domains to make sure all settings are  
inherited from global  
2. Open the global settings page  
3. Set all settings to inherit to start with a clean setup  
4 Set "Encrypt Mode" to "No Encryption" (you want encryption off by  
default unless encryption is triggered in some way)  
5. select PDF "OTP enabled" (for OTP password mode)  
6. Set "Encryption subject trigger" to [encrypt]  
7. Select "Encryption subject trigger enabled"  
8. Click Apply button  
9. Click on "portal" link (the link to the right of S/MIME at the top of  
the page)  
10. On "Portal settings for global preferences" page set Base URL to:

[https://192.168.88.126/web/portal](https://192.168.88.126/web/portal)

Where the IP should be replaced by the IP or fqdn of your server  
11. Click Apply button

PDF encryption with OTP mode should now be enabled. Email will only be  
encrypted if the subject contains the keyword [encrypt]

Setting up the different password modes for PDF encryption is explained  
in the following guide

[https://www.ciphermail.com/documents/html/pdf-encryption-setup-guide/](https://www.ciphermail.com/documents/html/pdf-encryption-setup-guide/)

The PDF version  
[https://www.ciphermail.com/documents/pdf-encryption-setup-guide.pdf](https://www.ciphermail.com/documents/pdf-encryption-setup-guide.pdf)

Kind regards,

Martijn Brinkers

> **···**
>
> On 06/19/2017 04:11 AM, Paul Bronson via Users wrote:
> 
> --  
> CipherMail email encryption
> 
> Email encryption with support for S/MIME, OpenPGP, PDF encryption and  
> secure webmail pull.
> 
> > **[CipherMail email encryption and digital signatures](https://www.ciphermail.com)**
> >
> > Easy to use server-side email encryption for automatic encryption and digital signing of email.
> 
> Twitter: [http://twitter.com/CipherMail](http://twitter.com/CipherMail)
