Verify Encryption and Decryption with DKE on Microsoft 365 Client

  1. Log in to a client machine as a user to whom access has been provided as described in Execute the DKE Anchor Manager on Linux, Create Sensitivity Labels using DKE, and Publish the Labels.

Make sure before creating any file delete the cache folder data from both client machine on this location: C:\Users\testuser4\AppData\Local\Microsoft\MSIP and MSIPC.

  1. Create a word document and assign sensitivity labels as created earlier, for example DKE.

tmpi0tx7901.jpg

Word doument

  1. Save the file to any location.

tmpf8otld2m.jpg

Encrypted Word document

  1. Copy this file to another client machine and user with allowed access to this sensitivity label and DKE.

  2. Open the file and verify that this authorized user is able to open the document.

tmpoamxex36.jpg

Encrypted Word document

  1. Now copy the same file to another client machine with user who is not authorized to this sensitivity label and DKE

  2. Try to open the document. You will get error with below permission message.

tmp42143_l1.jpg

Access denied message