Allow Journal decryption in OME
Currently RMS-encrypted mails can be decrypted for the purposes of journaling, but OME-encrypted mails - even though also based on RMS - does not have the same option. Set-IRMConfiguration -JournalReportDecryptionEnabled $true is used to enable RMS journal decryption. I suggest something similar is developed and made available for OME.
I tested this today. I created a journal rule to journal messages for a set of users. I tested the rule to make sure that the journal worked, and then created some OME-protected messages using both the standard templates (Encrypt-Only and Do not forward) and custom templates (Office 365 sensitivity labels). In all cases, Exchange Online used its IRM super-user permissions to add a decrypted copy of the message to the journal report. Everything worked as expected. Am I missing something?
Still no change here so sadly we can not move forward with OME.
Aaron A commented
The fact that this setting doesn't work for OME is the reason we can't move forward with implementing OME.
Companies and agencies who use encryption many times have a need to journal for any number of reasons (finance, compliance, government, federal departments, housing, law enforcement, etc), and many of those reasons are legally required. With OME not being able to work with journaling, a large section of your clients are simply not going to be able to use your product. Is there a reason for this? Should we just expect to never be able to use OME going forward with compliance and journaling?
Jeff Winningham commented
We absolutely need this to be rolled out into OME so that our school district is compliant with FOIA requirements when producing emails for legal purposes.
This is absolutely a requirement for compliance and legal retention standards. Readable and searchable form must be available for us to properly respond to request for production. Very common in our industry.
We really need this feature to roll out OME. As you know, European business have very strict compliance requirements in regards to archiving emails. For us it is essential to be able to archive all in a readable and searchable form.
Gaurav Kumra commented
I just want to confirm if this is still pending? We have third party journaling where decryption OME messages for journaling using the above command is not working.