Fix: Your Digital ID Name Cannot Be Found by The Underlying Security System

Many readers have complained about getting the Your Digital ID name cannot be found by the underlying security system issue while opening S/MIME encrypted emails. The error usually occurs when Outlook users try to decrypt an encrypted message. Let’s discuss how to fix the problem in a few minutes.

How can I fix the Your Digital ID name cannot be found by the underlying security system issue?

1. End all Outlook processes

1. Press Ctrl + Shift + Esc to open the Task Manager app.
2. Under the Processes tab, look for Outlook-related processes, then select them one by one and click End task.
3. Restart your computer.

2. Outlook in Safe mode

1. Press Windows + R to open the Run window.
2. Type the following command and click OK: Outlook.exe /safe
3. From the Choose Profile pop-up, select Outlook and click OK.

3. Check the Outlook certificate

1. Press the Windows key, type outlook, and click Open.
2. Go to File.
3. Select Options.
4. From the Outlook Options window, click Trust Center.
5. Click Trust Center Settings.
6. Go to the Email Security tab on the left pane.
7. Locate Encrypted mail, select a certificate, then click Settings.
8. Go to the Certifications and Algorthrims section, click the Choose button.
9. You will see a certificate, then click OK. And, click OK three times to close the window.
10. If they are blank, then you need to buy a new certificate.

4. Modify the server timeout setting

1. Press the Windows key, type outlook, and click Open.
2. Go to File.
3. Select Account Settings, and click Account Settings from the drop-down.
4. Click Change.
5. Now click the More Settings option.
6. Go to the Advanced tab and move the slider to the right to adjust the server timeout time.
7. Click OK to save the changes.
8. Click Next, then Finish to close the window. Restart Outlook to let the changes take effect.

Read more about this topic

• Outlook’s Work Hours and Location statuses will become optional
• You’ll soon be able to see directly in Outlook if you have permission to open mailboxes and folders

5. Turn off Windows Firewall

1. Press the Windows key, type control panel, and click Open.
2. Select View by as Category, then click System and Security.
3. Click Windows Defender Firewall.
4. From the left side, click the Turn Windows Defender Firewall on or off option.
5. Next, under Private and Public network settings, select Turn off Windows Defender Firewall (not recommended), then click OK.

You can also temporarily disable your security software to resolve this problem. Once you can access the mail, don’t forget to reverse engineer these steps to turn on the Windows Defender Firewall and enable security software if it is disabled.

6. Enable Client authentication and Secure Email

1. Press the Windows key, type internet options, and click Open.
2. Go to the Content tab and click the Certificates button.
3. Click the Advanced button.
4. On the Advanced Options window, under Certificate purposes, look for Client Authentication & Secure Email.
5. Click the checkbox next to it, then click OK to save the changes.

7. Delete unwanted certificates

1. Press the Windows key, type mmc, and click Open to open Microsoft Management Console. 
2. Click Yes on the UAC prompt.
3. Go to File, then select Add/Remove Snap-in.
4. Under Available snap-ins, double-click Certificates.
5. On the next window, select My user account and click Finish.
6. Under Select snap-ins, select any unwanted certificate, then click Remove.
7. Click OK to close the window.

8. Using the Registry Editor

8.1 Add a registry entry

1. Press Windows + R to open the Run window.
2. Type regedit and click OK to open the Registry Editor.
3. Before making any changes, you should backup registry entries. Go to File, then click Export. Save the .reg file
4. Navigate to this path: Computer\HKEY_CURRENT_USER\Software\Microsoft\Office\16.0\Outlook\Security
5. Right-click the right side of the screen, and choose New>DWORD(32-bit) Value.
6. Name the newly created DWORD as UseAlternateDefualtEncryptionAlg.
7. Double-click it, change the Value data from 0 to 1, then click OK.
8. Right-click the right side of the screen again, and choose New>DWORD(32-bit) Value.
9. Name the newly created DWORD as DefaultEncryptionAlgOID.
10. Double-click it, change the Value data to 1.2.840.113549.3.7, and then click OK.
11. Close Registry Editor and reboot your PC.

Enable Encrypt message contents and attachments

Once your computer is up, open Outlook and follow these steps:

1. Locate the email that has encrypted content and double-click it to open it in a separate window.
2. Go to File.
3. From the left pane, select Info, then click Properties.
4. On the Properties window, remove the checkmark next to Encrypt message contents and attachments.
5. Click Close and save the changes if prompted.

To conclude, the Your Digital ID name cannot be found by the underlying security system issue can be resolved quickly by checking the certificates, running Outlook in safe mode, turning the firewall off or changing the Registry Entries.

If you are unable to open Outlook in Windows 11, the problem could be the outdated Outlook app, third-party interference, corrupted Outlook data files, or other issues; read this to learn the solutions.

This isn’t the only common problem and many reported that the Outlook app is not syncing emails at all.

As for other syncing issues, many reported that Outlook Calendar is not syncing while others reported that Teams Calendar is not syncing with Outlook. Luckily, we covered both issues in separate guides.

If you have any suggestions or concerns about this issue on Outlook, feel free to mention them in the comments section below.