GoogleAppsMessageEncryption(GAME)

ItisanemailencryptionserviceforGoogleAppscustomers.DesignedbyZixCorpatthe
requestofGoogle.
ItprovidessecureemailtoGoogleAppsuserscommunicatingoutsideGooglessecure
cloudtoallotheremailusers.
GAMEprovidesondemandmessageencryption,soyoucansecurelycommunicatewith
businesspartnersandcustomers.
GoogleAppscustomerscanpredefinesecuritypoliciestotriggerencryptionofsensitive
informationintheiroutboundemailcommunication.
UsingZixCorpsBestMethodofDelivery,GAMEprovidestransparentencryption
betweenGoogleAppsandZixCorpcustomers,aswellastheabilitytodeliversecurely
toanyone,anywhereandonanydevice.

PleasefindbelowstepsthatwehavetogothroughinordertoSetupGoogleAppsMessage
Encryption(GAME):

1) PurchaseGAME
2) Servicesetup

PurchaseGAME :NeedtopurchaseitfirstbycontactingaGooglesales
representativeorGoogleforWorkpartnerdirectly.

OrderwillbethenforwardedtoZixCorp,whoisaccountableforfacilitatingGAMESetup.

Servicesetup :Itincludesfollowingsteps:

1. SettingupserviceusingtheGAMESelfServicePortal
2. EnablingAdminSDK
3. SettinguptheGAMEAdminTool
4. SettinguptheGoogleAdminconsoleforencryptedmail
5. TestingGAMEconfiguration

Nowwewillhighlightthesestepsindetail


SettingupserviceusingtheGAMESelfServicePortal
:

OncewepurchaseGAMEbycontactingandworkingwithaGooglesalesrepresentative,
ZixCorpreceivestheorderrequestandsetsupGAMESelfServicePortal(SSP)account
information.

TheGAMESSPautomaticallysendsawelcomeletter,similartothefollowing,tohelpget
started.WemustthenchooseourGAMEconfigurationoptionsusingtheGAMESSP.

Note:WemustchooseourconfigurationoptionsusingtheGAMESSPandsubmitservicefor
deploymentbeforecontinuingwiththenextstep.

WhenwereceivetheautomatedwelcomeletterfromtheGAMESSP,Wehavetofollowthe
instructionsinittosignintotheGAMESSPtoprepareandsubmitservicefordeployment.

Note:ServicedeploymentshappeneveryTuesdayandThursdaynight:

>>DeadlineforTuesdaynightdeploymentSubmityourGAMESSPorderbythe
previousWednesdayat5pmEST.
>>DeadlineforThursdaynightdeploymentSubmityourGAMESSPorderbythe
previousMondayat5pmEST.

AfterwechooseourconfigurationoptionsusingtheGAMESSPandsubmitservicefor
deployment,ZixCorpdeploystheservice.

Afterthat,wewillreceiveaconfirmationemail.OncewereceiveconfirmationthatGAME
serviceisdeployed,wewillhavetochangesomesettingsfortheGAMEservice.

EnablingAdminSDK:

BeforeWelaunchtheGAMEAdminToolforthefirsttime,wewillhavetoenabletheAdmin
SDKsothattheGAMEAdminToolcanauthenticateus.

1. Signintothe
GoogleAdminconsole
.
2. SelectSecurity.
3. SelectAPIreference.
4. ChecktheEnableAPIaccessboxifitsunchecked.
5. ClickSaveChanges.

SettinguptheGAMEAdminTool
:

TheGAMEAdminToolallowsyoutoaddauthorizedmessageencryptionusersandtosetup
customemailbouncemessagesthataresenttounauthorizedusers.

WhenaGoogleAppsuserneedtosendanencryptedemail,thatmessageisroutedtothe
GAMESMTPserver,whichthenchecksthesendersemailaddressagainsttheauthorized
messageencryptionuserslistyoucreated.
Iftheuserisauthorizedtosendencryptedemail,themessagewillbeencryptedandsentusing
ZixCorpsBestMethodofDelivery(BMOD).BMODprovidestransparentencryptionbetweenall
ZixCorpcustomersaswellastwodifferentkeylessdeliverymethodsforotherrecipients.

ThedefaultkeylessdeliverymethodforGAMEcustomersisPortalDelivery.

Note:TheGAMEAdminToolisintendedtomanageonlyyourprimaryGoogleAdminconsole
domain.
Anyusersinadditionaldomainsareautomaticallyallowedtosendencryptedemail.
Ifwewanttochangethesepermissions,wemustmanagethemusingcontentcompliancerules
intheGoogleAdminconsole.

LaunchtheGAMEAdminTool

1. Dooneofthefollowing:
IfyouareintheU.S.,goto
https://www.appsmessageencryption.com/gmeadmin .
IfyouareintheEU,goto
https://www.appsmessageencryptioneu.com/gmeadmin .
Assuggestedabovepleasetrytoaccessbothifoneofthisworkthenitsfine
otherwisewewillneedtocontacttheirsupportteam,
2. SigninusingyourGoogleAppsaccount.
3. Ifyouarepromptedtoacceptaccesstotheuserprofile,selectAccepttocontinue.

4. Note :ThefirsttimeyoulaunchtheGAMEAdminTool,EnableMessageEncryption
forallusersinthisdomainontheUserstabmaybeselected.Ifyouwantto
customizeyouruserlist,youmustuncheckthisbox.

Manageusersandsetupcustomnotifications

AddalluserstoGAME

1. IntheGAMEAdminTool,selecttheUserstab.
2. ChecktheEnableMessageEncryptionforallusersinthisdomainboxifitisnt
alreadychecked.

Note:Exceedingthenumberoflicenseswillresultinadditionalfees
.

AddselecteduserstoGAME

1. IntheGAMEAdminTool,selecttheUserstab.
 2. Note:IftheEnableMessageEncryptionforallusersinthisdomainboxischecked,
youmustuncheckittoaddspecificusers.
3. ClickAdd.
4. Enterthethefirstpartoftheusersemailaddress(thepartbeforethe@sign).
5. ClickAdd.

Adduserswithabulkupload

1. IntheGAMEAdminTool,selecttheUserstab.
2. ClicktheImportbutton.
3. Choosethefileandselectcsvfile.
4. ClickImport.

DeleteusersfromGAME

1. IntheGAMEAdminTool,selecttheUserstab.
2. Checktheboxesfortheusersthatyouwanttodelete.
3. ClickDelete.
4. Inthepopupwindow,checktheboxandclickDeletetoconfirm.

Setupcustomnotifications

1. IntheGAMEAdminTool,selecttheGeneraltab.
2. IntheUnauthorizedUserMessagesection,enteryouremailnotification.
3. ClickPreviewMessage.
4. ClickSave.

SettinguptheGoogleAdminconsoleforencryptedmail:

AddGAMEtotheInboundGatewaylist:
GAMErequiresyoutoaddtheZixCorpIPaddressestotheGoogleAppsInboundGatewaylist
toensureallrepliesandencryptedmessagesfromotherZixCorpcustomersaredelivered.

1. Signintothe
GoogleAdminconsole .
2. ClickApps>GoogleApps>Gmail>Advancedsettings.
3. IntheSpamsection,lookforInboundGateway.
4. Dooneofthefollowing:
IfyouareintheU.S.,inthetextbox,typetheIPaddress:199.30.235.99.
IfyouareintheEU,inthetextbox,typetheIPaddress91.209.6.244.
WhiledoingsopleasetrywithanyoneoftheIPgivenaboveifitdoesntwork
thenweneedtocontacttheirsupportteamasforAPACnothingisspecified.
 5. Note:DontchecktheOnlyletusersreceiveemailfromtheemailgatewayslisted
abovebox.
6. ClickSaveChanges.

AddanemailrouteforZixCorpintheGoogleAdminconsole

YounowmustaddanemailrouteforZixCorp.Youneedtoaddonlyoneemailroute,orhost,
regardlessofhowmanyorganizationsoruserswillbeusingGAME.

1. Signintothe
GoogleAdminconsole.
2. ClickApps>GoogleApps>Gmail.
3. OntheGmailsettingspage,clickHosts.
4. ClickAddroutetoopentheAddmailroutescreen.
5. Enterthefollowing:
EnterZixCorpGAMEintheblankfield.
ChooseSinglehostfromthemenu.
Dooneofthefollowing:
FoetheU.S.versionoftheGAMEAdminTool,enter
smtp.appsmessageencryption.com.
FortheEUversionoftheGAMEEUAdminTool,enter
smtp.appsmessageencryptionEU.com.
Afterthecolon,enter25astheport.
CheckRequireTLSdelivery.
Note:GmailautomaticallydefaultstousingTLS.
ClickSave.
6. Note:DontcheckthePerformMXlookuponhostbox.

Setupencryptionforcontentcompliance

1. Signintothe
GoogleAdminconsole .
2. ClickApps>GoogleApps>Gmail>Advancedsettings.
3. ScrolldowntotheContentcompliancesection.
4. ClicktheConfigurebuttontoaddanewfilter.Or,ifyoualreadyhaveaContent
compliancefilter,clickAddanother.
5. Note:TheAddanotherbuttondoesntdisplayunlessyouhoveroverContent
compliance.
6. EnterZixEncryptastheshortdescription.
7. ForEmailmessagestoaffect,checkOutbound.
8. ForAddexpressionsthatdescribethecontentyouwanttosearchforineach
message,selectIfANYofthefollowingmatchthemessage.
9. IntheExpressionssection,clickAdd.
10. SelectAdvancedcontentmatchinthefirstdropdownmenu.
ForLocation,selectSubject.
 ForMatchtype,selectContainstext.
ForContent,typeZixEncrypt.
11. ClickSave.
12. ForIftheaboveexpressionsmatch,dothefollowing,selectModifymessagefromthe
dropdownmenu.
13. IntheRoutesection,clickChangeroute.
14. FromtheSelectaroutedropdownmenu,selectZixCorpGAME.
15. ClickAddSettingorSavetoclosethedialogbox.
16. ClickSavechangesatthebottomoftheEmailsettingsscreen.

TestingGAMEconfiguration:

AfterwehavehadyourGAMEservicedeployedandsetuptheGAMEAdminConsoletoroute
secureemail,wewilltestournewservicestoensuretheyaresendingencryptedemailproperly.

Toconfirmthatencryptionisworkingproperly:

1. SignintotheGAMEAdminTool.
2. FromyourGmailaccount,sendanencryptedemailtoanoutsideaccount(for
example,hotmail.com,yahoo.com)bytypingZixEncryptintheSubjectlineofthe
message.
3. Onceyoureceivethesecuremessagenotificationinyouroutsideemailaccount(for
example,hotmail.com,yahoo.com,etc.),signintothesecureportalfollowingthe
instructionsinthenotificationemail.
4. Replytothemessagefromwithinthesecuremessageportal.
5. YouwillreceivearesponsefromtheportalinyourGmailinboxwithadisclaimer
withinthemessageensuringthatitwasSecuredbyZix.

Note:Whenyoureceivetheportalnotification,contactZixCorpsupporttoactivatethe
decryptionserver.

HerearesomedetailsaboutOrder:
Encryption(GAME)ordersarealwaysoffline,whichmeansyouwillreceiveaninvoice.Ifwecan
createyourGoogleAppsorderasanonlineorder,welldoso,buttheencryptionorderis
alwaysoffline.
TheminimumorderforeachGAMEaccountis100seats.Ifwehavefewerthan100seatsin
anydomain,orhavemultipledomainssharinga100minimumseatlicenseinPostini,youllstill
bebilledfor100seatsperGAMEaccount.

Toavoidbeingbilledforseatsyouarentusing,weencourageyoutochooseoneprimary
domain duringtransition,tohelpensureaminimumof100seatsperGAMEaccount.
Note:The100seatminimumappliestoGAMEaccountsonly,notGoogleAppsaccounts.Ifyou
transitionaPostinidomaincontainingfewerthan100seatstoGoogleApps,youpayforonly
thenumberofseatstransitioned.
InadditiontotheGAMEorder,GooglewillapproachyoutosignaGAMEservicelevel
amendment(SLA).Thiscanoccureitherbeforeorafteryourtransition,andyoumustcomplete
theSLAnolaterthanyournextrenewalofencryptionservice.