[Robert_K]

We are currently testing out BES 5.0 and the new Tour 9630 in anticipation that we might upgrade our server soon and also upgrade our existing users so we can retire our 8830s.

Recently we have everything setup on BES 5.0 to work with S/MIME just fine EXCEPT that on our old BES 4.1.7 setup using 4.2 or 4.5 OS on our 8830s, when users sent an encypted email it just automatically searched for the user's certificates, fetched them, downloaded them to the device key store, and sent the email in just a few seconds.. the action was seemless and no user interaction was ever required unless the person they were sending to did not have a certificate.

With BES 5.0 and using 5.0.0.419 on our Tour 9630, when you send an email to a user and their certificate is not already in your device key store it prompts you to fetch it and then you have to specify that you want the device to add that certificate to you key store before it sends the encrypted email.

I fear these new steps to send encrypted emails will not go over well with our user base and so far contacting RIM support has not yeilded any real help on the situation. We have searched through the BES, MDS, and device settings many times over to no avail.

We have always only used an LDAP server to search certificates and do not have a CRL or OCSP server to do auto lookups but that never effected us in the past.

Anyone have any ideas?