How the Symmetric key gets generated at client side? Do I Need to install a client side certificate for that?

HARSH SHARMA 21 Reputation points
2021-03-02T11:37:59.773+00:00

Hi, I have a requirement in my project where I have to secure the communication between my client application (running on BizTalk Server Send port configured with Office 365 Email adaptor) and Microsoft Office 365 Server. This communication is to be secured by TLS 1.2 and a certificate is provided by MS O365 server during Server hello (handshake process) to later securely exchange the symmetric key generated at client side. Do I need to install another certificate at client side for generating this symmetric key? How is this symmetric key generated at client end? Please help.

Microsoft BizTalk Server
Microsoft BizTalk Server
A family of Microsoft server products that support large-scale implementation management of enterprise application integration processes.
358 questions
Microsoft Exchange Online Management
Microsoft Exchange Online Management
Microsoft Exchange Online: A Microsoft email and calendaring hosted service.Management: The act or process of organizing, handling, directing or controlling something.
4,350 questions
0 comments
Accepted answer
  1. KyleXu-MSFT 26,231 Reputation points
    2021-03-03T02:46:49.63+00:00

    @HARSH SHARMA

    I don't know how you application works, but there are the information about certificate for Outlook client, it may similar to your application:

    For Exchange server, when client want to build a connection with it, the connection will using server side certificate to encrypt the connection. If you are using a certificate which issued by a personal CA, you will need to install the certificate on client side.

    In your environment, the certificate is issued by Office 365 which is a public CA, the certificate will be trusted by client by default, you don't need to install certificate on client side.

    If the response is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. HARSH SHARMA 21 Reputation points
    2021-03-03T10:13:48.977+00:00

    We don't require another certificates client side (BizTalk) to establish a TLS 1.2 connection.

    The BizTalk Server needs to trust the certificate however, but as this is one issues by Microsoft, it should be trusted.

    0 comments