Create Sensitivity Labels using DKE

In the Microsoft 365 compliance center, Go to Information Protection section.

1. On Labels page, select + Create a Label to start the new sensitivity label configuration. For example, from the Microsoft 365 compliance center:

Create Label

2. On Name and Create a tooltip for your label, specify the following.

• Label name - visible in Microsoft 365 compliance center

• Display name - visible to users in e.g., Microsoft word

• Description for users - the tooltip that appears when users hover over the sensitivity label

• Description for admin - the description available from the Microsoft 365 compliance center

Name and create a tooltip for your label window

3. Click on Next button.

4. Define the scope of the label. E.g., apply label to files & emails only.

Define the scope for this label window

5. Click on Next button.

6. Choose protection settings for file and emails.

Choose protection settings for files and emails window

7. In the Encryption step, you can set permissions to content with the label applied. Since the primary reason for this procedure is to secure the files, you’ll want to configure encryption settings.

8. In most cases, you will use the Never expires option, since it will let users access files without any time limit.

9. You can also allow or deny offline access to a file. Without the offline access, a user will need to be reauthenticated each time they want to open a document or email.

10. Choose which users or groups should be able to access documents with the label set. Clicking Assign permissions opens a wizard on the right side.

11. Finally, select User Double Key Encryption checkbox and enter correct DKE URL along with key.

Files & Emails Access window

Use the DKE Key URL from the ESKM Cloud UI. Refer Viewing Microsoft DKE Key Info in ESKM Cloud Integration document.

12. Content marking lets you add clear information about the applied labels directly to a document. You can choose if you want to add a watermark, a header and a footer, and what it should display on Microsoft word document.

Content Marking window

13. In the next step, you can turn on auto-labeling. That way certain groups or documents created in certain sites can be automatically marked with your label. This may be useful if you want to make sure nobody forgets about securing documents. On the other hand, auto-labeling can create problems if you intend to share some documents outside your organization.

Auto-Labelling for Files and Emails window

14. Click Next, you can define protection settings for groups and sites. Those settings, unlike the previous ones, apply to teams, groups or sites and not the documents stored in them.

Define protection settings for groups and sites

15. The last step is about revising the configuration. Revise your settings, click Create label and then Done.

Review your settings and finish window