Mar 11, 2021 · To initiate granting consent for Fabrikam users to the DKE service, a user of the Fabrikam tenant with normal privileges first needs to open a DKE protected document from Contoso. This initial attempt is expected to fail, the user will see an exclamation mark besides the account in the title bar, indicating there’s an issue with the account.

Mar 31, 2021 · DKE clients attempting to run decrypt operations (when opening DKE protected content) Repeated attempts for decrypt operations where the server responds with 401 would indicate authentication issues. If clients fail to protect content with DKE labels and there’s no activity in the web server logs, likely there’s a misconfiguration or a ...

Mar 17, 2021 · DKE helps to meet several regulatory requirements. Customers have the choice to choose any location (on-premise or third-party cloud) to host their DKE service. Customers can share DKE encrypted across tenants if the users have access to Azure key and the required permission to access the in the DKE service.

Oct 22, 2020 · On IIS, create a new web site «DKE» with https binding, port 443 and using host name "aip-dke4.contoso-o365.net": IIS site configuration; Make sure the value for «JwtAudience» matches the selected URL for the IIS Server: Finish DKE implementation. The following steps are needed to complete the DKE implementation (refer again to our ...

Apr 1, 2021 · DKE Troubleshooting - Microsoft Tech Community \n. The following blog post helps you troubleshoot the reference implementation for DKE. Some of this information may apply to DKE partner implementations as well, but it covers primarily the reference implementation hosted in Azure or on IIS.

Jul 21, 2020 · andrevrodrigues you can open the document in notepad and search for "Microsoft.DKE.Key" -- the presence of this would mean that the document was protected using DKE. Alternatively, you can try opening the content in an older version of Office that does not support DKE and should see a failure when trying to decrypt the content.

Jun 27, 2023 · Microsoft 365 Apps users now have the option to utilize Double Key Encryption (DKE) to safeguard their highly confidential information. By leveraging the integrated labeling client, files and emails can be protected with DKE. This approach involves storing one encryption key in Microsoft Azure while the user retains the other key.

Apr 3, 2023 · Hi jjakub,. For now, all documentations point out that DKE is only supported on Windows. You can consume-only DKE-protected content on Microsoft 365 apps for iOS and macOS but you may experience some limitations or issues

Dec 3, 2021 · The Double Key Encryption [DKE] feature must not be used/tested in the same tenant as long as the AIP Office add-in is active on clients working with DKE protected documents. Co-Authoring can be enabled on the tenant if you use exclusively Office built-in sensitivity labeling, which supports DKE starting with Current Channel version 2307 ...

May 23, 2023 · An exception to the above is if your organization have deployed DKE Double Key Encryption (DKE) - Microsoft Purview (compliance) | Microsoft Learn. Microsoft do not have visibility into content that has been protected using DKE. You can use the Microsoft MIP SDK to allow for integration with DKE. Conclusion