Copyright: RPK InvisiMail International Ltd
Citation: Copyright RPK InvisiMail International Ltd 1997


Getting started with RPK™ InvisiMail™

Congratulations on choosing RPK InvisiMail, the global high strength solution for secure e-mail communications on the Internet.  With RPK InvisiMail, you get high strength security for all your e-mail messages and attachments.  You don’t need to know anything about encryption.  RPK InvisiMail handles everything for you.  All you need to do is choose and remember a password.  Then just send and receive e-mail as you normally do.

Installing RPK InvisiMail

RPK InvisiMail is provided for download via the www.InvisiMail.com web page and then Setup or it may be Setup from a floppy disk normally obtained from one of our distributors around the world.

To install from floppy disk:

To install under Windows 95:

- select Run from the Taskbar Start menu

- type "a:\invisimail.exe" and Press Enter

To install under Windows NT

- activate the Windows Program Manager

- choose Run from the file menu

- type “a:\invisimail.exe” and press Enter

The setup program will guide you through the installation Process.

You will be offered the opportunity to proceed with the Setup or Cancel this

installation.

***If you wish to proceed click on the "Setup" button.

***If you do not wish to proceed click on the "Exit Setup" button.

You may select "Exit Setup" at any time during the installation

process by clicking on any button with the label “Exit Setup” on it.

***The "About" button provides information on the version of

RPK InvisiMail which you are installing from this floppy disk.

 	Setup will unzip the application files and present the RPK InvisiMail

license for your consideration.

We recommend that once you have installed RPK InvisiMail, you send a FREE copy of InvisiMail Intro to everyone in your e-mail address book.  This will allow your correspondents to communicate with you securely when sending and receiving e-mail. They will be able to receive and decrypt any message that you send to them.  They will be able to use Strong (but not Extreme) encryption.  Tthey will not be able to compress or authenticate messages unless they upgrade to RPK InvisiMail Professional.  You can send the software by selecting “Send to Friends” from the RPK InvisiMail Programs menu or from the RPK InvisiMail Control Panel.

Note:  For those that use RPK InvisiMail  in countries where export of strong encryption is restricted or regulated, please note that the RPK InvisiMail Intro Download program that you will send to others contains no cryptography software.


Encryption and Decryption

The means by which information is secured is called encryption.  Decryption is the process of restoring information to its original format.  The information about the underlying technology used in RPK InvisiMail is here for informational and educational purposes only.  The good news with RPK InvisiMail is that you do not need to learn this material to be able to use the product. Therefore, there will definitely not be a test on this information!

The way in which RPK InvisiMail deals with encryption and decryption is simple in principle.  Unlike doors with deadbolt locks where only one key is used to lock and unlock the door, with e-mail encryption there are two related keys.  One is used to encrypt (lock) the message, and the other to decrypt (unlock) the message.  The one used to encrypt is known as the “Public Key” since it is the one that is made known publicly and used by others to encrypt messages being sent to you.  This is also where the technology gets its common name “Public Key Encryption.”  The second key, which is used to decrypt messages sent to you, is called the “Private Key.”  It is called “private” because it is known only by you.  RPK InvisiMail keeps track of keys for you.  All you need to do is remember your RPK InvisiMail password and keep it to yourself.

With RPK InvisiMail, whenever you send a message to someone else who is using any version of RPK InvisiMail (Intro or Professional), the message will automatically be encrypted prior to sending, using the correct public key of the recipient.  When that person receives the message, RPK InvisiMail will automatically use the correct private key for that person which will decrypt the message so they can read it again.  You never have to worry about sending a message to someone they cannot read.  If they do not have a copy of RPK InvisiMail, the program will not be able to encrypt before sending.   In these cases you can easily send anyone a FREE copy of RPK InvisiMail Intro so you can send them secure messages.

Please see Creating New Keys


Public Key Private Key Pairs
Public Key / Private Key Pairs

Your Public Key/Private Key pair is created at random when you Setup RPK InvisiMail.  There is no specific meaning to the values that could be traced to you.  This is done to maximize the security of the system.  By default, this key pair has no expiration date.  However, you can change the keys to new random selected values at any time using a command in the RPK InvisiMail Control Panel.  If you ever change your encryption key pair, the new one is automatically communicated to your existing RPK InvisiMail correspondents.

Please see Creating New Keys


Public Keys

You, as an RPK InvisiMail user, have a unique code which is circulated with each e-mail message that you send.  This code is your public key. Whenever you send an e-mail message, the recipient receives this public key, which is automatically stored in their RPK InvisiMail Control Panel, if they are a user of RPK InvisiMail.  Each time they send a message to you, this key is used to encrypt the message.  The message is then secure, and cannot be read by anyone but you.

By the same method, you will accumulate a collection of public keys that belong to other RPK InvisiMail users that you are in contact with, and they will be used to decrypt any e-mail messages that you send to them.  Your collection of public keys can be found in the Recipients section of your RPK InvisiMail Control Panel.

RPK InvisiMail automatically collects public encryption keys.  However, in the absence of a fully verified certificate from a qualified Certification Authority, it is recommended that you verify the public keys by manually comparing (by phone, fax or mail) the Public Key ID for a given correspondent as displayed in the RPK InvisiMail Control Panel.  The easiest and quickest method to verify that the public key has been received correctly is to open the RPK InvisiMail Control Panel, click on the Recipients button in the RPK InvisiMail Toolbar.  Then select the Recipient from the left hand side of the window.  Call the recipient on the phone and have them read their Public Key ID to you from the Personal page of their RPK InvisiMail Control Panel.  If the values match, you have the correct Public Key for that recipient.  You only need to do this for correspondents where you want to be absolutely sure that all messages are sent securely.

Please see Creating New Keys


Compression and Decompression

One common complaint about sending large attached files in e-mail messages is that they take a long time to send and receive.  RPK InvisiMail solves this problem by automatically compressing messages and attachments prior to sending.  This enhances the security of the system and also usually dramatically reduces the size of the messages being sent, and the time it takes to send them.  Many RPK InvisiMail users enjoy this feature of the product as much as the security.


The RPK InvisiMail Control Panel
The RPK™ InvisiMail™ Control Panel

The RPK InvisiMail Control Panel holds all information relating to your installation of RPK InvisiMail, your e-mail settings, your Public and Private Keys, the public keys of others, credit card details for E-commerce, and Certificates.

In addition to storing information, the RPK InvisiMail Control Panel is used to configure settings.  The RPK InvisiMail Control Panel is split into separate sections:

Personal

The Personal section allows you to configure your personal private keys and public keys, Generate Passwords and obtain Certificates

Usage

The Usage section allows you to modify general operational settings for RPK InvisiMail, such as password timeout, auto decrypt and other options.

Utilities

The Utilities section allows you to Send a Test Message to yourself to test that installation has been successful.

Technical

The Technical section allows you to configure new e-mail software and new e-mail addresses (for example if you add a new e-mail client to your system) for use with RPK InvisiMail.

Distribute

The Distribute section allows you to Distribute Your Public Key to others, so that secure communications can take place, and also provides the recipient with the option to download the FREE Intro version of RPK InvisiMail.

Recipients

The Recipients section contains all information regarding your and other people’s Public Key, Authentication Token/Digital Signatures and Certificates.

C.A.Info

The C.A.Info section provides information on Certificates that have been received in the RPK InvisiMail Control Panel and allows you to assign Trust Levels to each certificate.

Payments

The Payments section stores all information regarding your credit cards or other payment methods for use in E-Commerce.


Certificates

The requirements of a technically sound security system are: strong encryption, a means to prove that messages have not been changed during transit and that the sender is actually who he or she claims to be.

Strong encryption is provided by the RPK™ Fast Public Key Encryption algorithm, which provides very strong and importantly very fast encryption of messages and files. Authentication proves that messages have not been changed during transit.  The authentication token, an attachment with every secure message through RPK InvisiMail, provides this information.  Finally, X509 style certificates are used to provide a means by which the user can judge whether or not to trust that sender is who they purport to be.

Certificates are provided by Certification Authorities such as Thawte or Verisign and are a means by which e-mail users can provide assurance of their identity.  There are varying levels of certificates available, some simply include the user name and e-mail address.  Others include more detailed information.  Each certificate issuer applies differing levels of verification on the information included in a certificate depending on the purpose and amounts paid for the certificate.  The actual level of certification performed is defined by each Certification Authority.  Therefore, RPK InvisiMail allows you to attribute your own level of trust for each certificate received.


Authentication - Digital Signature / Authentication Message
Authentication – Message and Sender

The requirements of a technically sound security system are: strong encryption, the ability to prove that messages have not been changed during transit and the mechanism to identify the sender and that they are who they claim to be.

Strong encryption is provided by the RPK™ Fast Public Key Encryption algorithm, which provides very strong and importantly, very fast encryption of messages and files.

Authentication that messages have not been changed during transit, is provided using a secure hashing algorithm known as SHA-1 and an Authentication Token.  The result of the authentication process appears as a text attachment included with each received message, which can be read by a viewer, such as Notepad or Wordpad, and provides confirmation that the message has been authenticated and confirms who the message was from.


Authentication Token
Authentication Tokens

Once an automatic exchange of public keys has taken place between two RPK InvisiMail users, the two users’ software then exchange Authentication Tokens.  These are values that are generated at random and are used by one party to authenticate themselves to the other.  This is done by generating information (based on the received Authentication Token) that is newly calculated and different with each message.  Therefore, my RPK InvisiMail software uses the Authentication Token that your RPK InvisiMail software has sent to mine to calculate a value that your software can use to verify that it was actually me who sent the message.  This all happens automatically and transparently.

A Practical Example

Steve sends Lyn a message.  Lyn’s copy of InvisiMail extracts Steve’s Public Key from the header of the message and stores it in the Secure Address Book in her InvisiMail Control Panel.  The next time Lyn sends a message to Steve, her copy of InvisiMail uses the Public Key, that it extracted from Steve’s initial message, to encrypt the message she is sending.  It also includes a new, randomly generated Authentication Token that will identify Steve to Lyn in the future.  When Steve receives the message, his copy of InvisiMail extracts Lyn’s Public Key, puts it in his Secure Address Book and also stores the Authentication Token that was issued by Lyn.  The next time Steve sends a message to Lyn, his copy of InvisiMail automatically uses the Public Key that was extracted from Lyn’s message and uses the Authentication Token to calculate a value that is included in the message.  Prior to encrypting the message, InvisiMail, using a Secure Hashing Algorithm known as SHA-1, to create a value that is unique to that message.

When Lyn receives this message from Steve, she is the only one who can decrypt it and her InvisiMail will be able to calculate the same value that Steve’s InvisiMail created from the Authentication Token and thus verify that Steve was the sender of the message.    In addition, her software can calculate the same SHA-1 value to verify that the message was not changed in transit.

Once the message has been decrypted and authenticated, InvisiMail adds an attachment to the message that you see in the in-box called Digital Signature.txt.  In that attachment is a synopsis of the results of the authentication process.  When everything authenticates properly, the message indicates that the message was received encrypted, that it successfully authenticated the sender and verified the contents of the message.  If it did not successfully authenticate, that will be indicated, as well.  In that case, the message would be suspect.

The Authentication Token is used to verify the sender, the Hashing Algorithm is unique to the message and is used to verify that the contents of the message have not been changed in transit.


Private Keys

The concept of Private and Public Keys is one of the major forces that makes RPK InvisiMail as safe and secure as it is.   Your Public Key is used by others to encrypt messages that they send to you for you.  Your Private Key is a unique code which allows you to decrypt messages that have been sent to you by other RPK InvisiMail users.  Your key remains with your copy of RPK InvisiMail and should never be communicated to anyone else, thereby maintaining  the high level of security that RPK InvisiMail  provides.

Please see Creating New Keys


Viewing Your E-Mail  Account Settings

The RPK InvisiMail Control Panel Contains all information relating to your Certificates (Proof of identity) and the RPK InvisiMail  password in the Personal Section.

To review your e-mail account details:

1.	From the RPK InvisiMail Control Panel, click on the Personal button in the Toolbar.

2.	Your Personal details of e-mail Accounts that are configured for operation with RPK InvisiMail  will be provided in the Personal E-Mail Section.

3.	If you have multiple e-mail accounts, you may view the details for each by selecting it in the Personal E-Mail pane. The corresponding details will then be displayed in the Account Details pane.

Please Note it is not possible to change e-mail account details from the Personal section. If you wish to change or add an e-mail account Please See Technical Settings.


Creating New Keys

It is possible to create a new encryption key pair for any given E-mail account that is configured in the RPK InvisiMail Control Panel. We strongly recommend that you not use this option unless you are sure that your security has been compromised by someone else obtaining your Private Key information. This is highly unlikely and therefore you should never have to change the original key pair that was generated for you.  When you change your Public Key, it will also be necessary to communicate this change to your correspondents by sending an e-mail message.  This e-mail message will contain your new Key information, which will be updated in the recipient’s RPK InvisiMail Control Panel, to secure future e-mail correspondence.

If you choose to create a new Key it will also be necessary to obtain a new certificate from your Certification Authority to enable proof of your identity.

To Create New Keys:

1.	From the RPK InvisiMail Control Panel, click on the Personal button in the Toolbar.

2.	Choose the e-mail account in the Personal E-mail pane for which you wish to create a new key pair.

3.	In the Account Details pane click on the “New Key” Button.

4.	RPK InvisiMail will now display a windows requesting that you select a key size of either 607 or 1279 bits and click on the desired key size. Please note: selection of a 1279 Bit key length may  affect performance on some systems.

5.	RPK InvisiMail will now create a new key and then take you to the RPK InvisiMail Certificate Registration screen so that a new certificate can be requested for this new key

*** Please Note, You may be requested to move your mouse so as to provide random data for the Key generator.


Saving Your Public Key

To be absolutely sure that your Public Key is installed correctly in a recipient’s RPK InvisiMail Control Panel, it is possible to physically exchange Public Key information.  Public Keys can be saved to a floppy disk or on a shared network drive.  A correspondent can add your Public Key to their Recipient’s list in their RPK InvisiMail Control Panel from the file that you created.  See Adding a Recipient’s Public Key.

To Save Public Keys

1.	From the RPK InvisiMail Control Panel, Click on the Personal button in the Toolbar.

2.	Click on the E-mail Account in the Personal E-mail pane whose Public Key you wish to save.

3.	Click on the Save Key Button in the Account Details pane.  RPK InvisiMail will then suggest where to save the key and the “filename.RPK”. We recommend that you change the filename to something that is meaningful to you while keeping the “.RPK” extension. You may then choose to browse where to save the key on your hard drive or network or alternatively you may save the Public Key to floppy disk.


Printing Your Public Key

If you wish to ensure that your communications with an individual are secure from the first message sent, it is possible to exchange Public Key information through a saved copy on a shared network drive, or a floppy disk copy can be exchanged. Additionally, you may print your Public Key information so that your intended recipient can manually type in the information. We do not recommend this approach as a typical Key length is over 500 characters, providing room for error while typing the Public Key information.

To Print your Public Key

1.	From the RPK InvisiMail Control Panel, click on the Personal button in the Toolbar.

2.	Click on the E-mail Account in the E-mail pane whose Public Key you wish to print.

3.	Click on the “Print Key” Button in the Account Details pane.

RPK InvisiMail will now open your computer’s default text viewer, such as Notepad or Wordpad and display the Public Key information.  Now print this file as normal.


Changing the RPK InvisiMail Control Panel Password

The RPK InvisiMail Control Panel contains all information regarding e-mail configuration, Certificates and Public/ Private Keys.  Therefore, it is imperative that the password for the RPK InvisiMail Control Panel be kept secure and never forgotten.  If you think someone else knows your RPK InvisiMail Control Panel password, you must change your password immediately, generate new Public/Private Keys for each e-mail client and request new certificates.

To Change the RPK InvisiMail Control Panel Password.

1.	From the RPK InvisiMail Control Panel, click on the tools menu and select Password.

2.	Click on the Password tab.

3.	Type in your Old Password where prompted.

4.	Then type in your New Password underneath.

5.	Now confirm your new Password.

6.	Click the Change Password button.  You will then be asked if you wish to save the new password. It is recommended that you save the password to a floppy disk and keep it in a secure place. If you forget your password it will be impossible to receive e-mail as your correspondents will continue to send mail encrypted using your old Public Key!!!  The only solution will be to manually remove RPK InvisiMail and re-install.

See Also:	Creating New Keys and Obtaining Certificates


Obtaining Certificates

RPK InvisiMail uses X.509 type certificates from independent Certification Authorities and the RPK InvisiMail Certification Server to provide proof of identity/origin for electronic communications.  There are numerous Certification Authorities, some of which simply request a payment for a certificate to be issued and do not verify the data provided, while others require the user to prove their identity.  We strongly recommend careful consideration in selecting a Certificate Authority to prove your identity for electronic communications.

***Please note, if you have changed your Public Key, it is necessary to notify your Certification Authority to obtain a new Certificate and update their directory.

Obtaining A New Certificate:

1.	From the RPK InvisiMail Control Panel, Click on the Personal button in the Toolbar.

2.	Click on the “Personal Certificates” Tab

3.	Click on the “Request Certificates” Button

RPK™ InvisiMail™ Certificate Registration Screen

4.	RPK InvisiMail will now take you to the RPK InvisiMail Certificate Screen.

Click on the pull down box to select an e-mail address where your certificates will be sent.

5.	Click on the “Get Certificates” button.

6.	RPK InvisiMail will now ask that you identify the “Certificate Type” that is being applied for by clicking on the pull down box and selecting the appropriate option. By default this will be Standard InvisiMail Certificate.

RPK InvisiMail will now proceed to request a certificate for all the e-mail clients configured in the RPK InvisiMail Control Panel, which will subsequently be returned to your chosen e-mail address.


Changing Auto Decrypt Options

It is possible to change the Auto Decrypt option so messages over a certain size are sent directly to your e-mail software In-Box in the encrypted format.  This may be used for two purposes:

When downloading large encrypted files you may find that your PC is unable to cope with the additional processing demands generated by downloading, decompressing, decrypting and then forwarding messages.  To ease this burden it is a good idea to set a maximum file size that will be automatically decrypted, so that large files are delivered in an encrypted format direct into your In-Box.  It is less taxing for your PC to decrypt and open a large file directly from your In-Box than during the receiving process.  This will also minimize your connection time.

Also for security reasons you may wish to force all message to be delivered encrypted to your In-Box so that they are only decrypted when you open them.

 To Change Auto Decrypt Message Size Default:

1.	From the RPK InvisiMail Control Panel, click on the, “Usage” button in the Toolbar.

2.	Click on the, “Modify” button.

3.	In the Message Auto Decrypt section click the “Put big messages encrypted in the Inbox” box and set a message size threshold above which all messages will be delivered in an encrypted format directly to the In-Box.

4.	Click on the “Apply” button to confirm your changes.

To Force All e-mail to be Delivered in an Encrypted Format

1.	From the RPK InvisiMail Control Panel, click on the, “Usage” button in the Toolbar.

2.	Click on the, “Modify” button

3.	In the Message Auto Decrypt section click the “Put all messages encrypted in the Inbox” box.

4.	Click on the “Apply” button to confirm your changes.


Changing RPK InvisiMail Control Panel Auto Close Default

The RPK InvisiMail Control Panel is set by default to automatically close after five minutes of inactivity. This feature protects the information stored in your RPK InvisiMail Control Panel such as Private Keys, and credit card details, in the event of that it is accidentally left open after you have finished using it.  For this reason we recommend that the default setting be kept as low as possible.

To Change RPK InvisiMail Control Panel Close Default time

1.	From the RPK InvisiMail Control Panel, Click on the “Usage” button in the Toolbar.

2.	Click on the “Modify” button.

3.	In the “Control Panel” pane, adjust the time in minutes, as desired.

4.	Click the “Apply ” button to confirm your changes.


Changing Send/Receive Progress Display Options

It is possible to change the system settings for the Send/Receive progress animation window forcing it always to be displayed in the forefront.  Alternatively, it is possible to hide the window display so as to be unobtrusive.  If you choose to “hide” the display by having the windows minimized, simply clicking on the tile in the Task Bar will make the window display itself.

By default, the Progress Display is shown but not always on top.

To Change Send/Receive Progress display settings

1.	From the RPK InvisiMail Control Panel, Click on the “Usage” button in the Toolbar.

2.	Click on the “Modify” button.

3.	In the “Progress Display” section click in the desired check box option.

4.	Click the “Apply” button to confirm your changes.

***Please Note - It is also possible to change display settings from within the Send/Receive Progress Display window by clicking the “Hide Display” action box.


Idle Password Timeout
Change Password Logon Options & Idle Timeout

It is possible to change the Password logon and timeout options for RPK InvisiMail.  By default, RPK InvisiMail asks you to enter your password at system start-up, when your computer is turned on.  You may not wish to enter your password at that time.  In this case, RPK InvisiMail gives you the option of entering your password on the first request to send/receive e-mail.

To Change the Password Logon Option:

1.	From the RPK InvisiMail Control Panel click on the “Usage” button.

2.	Click on the “Modify” button.

3.	From the PRK InvisiMail First Logon Pane click on the “Logon at RPK InvisiMail software start up” radio button to log on to RPK InvisiMail at system start up.

Or

4.	Click on the “Logon at the first send/receive request from e-mail software” to log on to RPK InvisiMail when you’re ready to send and receive e-mail.

To Change RPK InvisiMail Idle Password Timeout Setting

By default, RPK InvisiMail never times out your password.  If others have access to your computer, you may wish to increase your security settings by requiring a password every time a message or file is encrypted or decrypted.

1.	From the RPK InvisiMail Control Panel click on the “Usage” button.

1.	Click on the “Modify” button.

3.	Click to remove the “Never Timeout” and set your desired password idle timeout in minutes.

Or

4.	Click the Never Timeout option if desired.

Please note: the time out only operates for idle periods, i.e. when messages are not being sent or received. It will not terminate a connection in the middle of sending any messages.!!!


Changing Default Security Level

The Default Security level for all RPK InvisiMail communication is 607 bits (Strong Encryption). This level should be sufficient for the vast majority of all e-mail communications.  However, there is an option for Extreme Encryption set at 1279 bits.  Should you wish to change the default security setting, it will be necessary to generate a new set of keys at this setting and to notify your Certification Authority of these new Public Keys.

***Please note, that should you choose to use the Extreme setting this is likely to impact on the performance of some PCs when sending and receiving mail

To Change Default Security Setting/ Generating New Key:

1.	From the RPK InvisiMail Control Panel, Click on the “Personal” Button in the Toolbar.

2.	Click on the “New Key” button in the “Personal Keys” pane.

RPK InvisiMail will now display the “Select a Key Size” window

3.	Click on the appropriate Security setting for the new key you wish to generate (Strong or Extreme)

RPK InvisiMail will now prompt you to obtain a new Certificate for this Public Key.


Testing Settings
Send Test Message

When you have installed RPK InvisiMail you may wish to test that the installation has been successful by sending a secure message to yourself from your e-mail client(s).  You will receive a confirmation from RPK InvisiMail the next time you collect your e-mail.

Please note -- due to the speed of the Internet it may take some time for your test message sent from RPK InvisiMail to arrive in your In-Box for collection.

Send Test Message:

1.	From the RPK InvisiMail Control Panel, Click on the “Utilities” button in the Toolbar.

2.	In the “Test RPK InvisiMail Configuration” pane Click on the “Send Test Message” button.

RPK InvisiMail will send a test message in an encrypted format to all your RPK InvisiMail secured

e-mail clients the next time you send a message.


Changing E-mail Configuration Settings
Changing E-mail Configuration Settings/Adding Clients

RPK InvisiMail is a standards based e-mail encryption product that integrates with SMTP/POP3 Internet e-mail software.  During the installation process, RPK InvisiMail searches your PC to identify which e-mail software you have installed.  Once your software has been identified, RPK InvisiMail integrates with them so that the SMTP/POP3 addresses which are used for sending and receiving  mail now point to the “Secure Host” (RPK InvisiMail).  Installation support to automate this process is provided for the major e-mail clients including:

Calypso

Eudora Lite

Eudora Pro

Microsoft Exchange E-mail Client (In-Box)

Microsoft Internet Mail (from Internet Explorer 3.x)

Microsoft Outlook

Microsoft Outlook Express (from Internet Explorer 4.x)

Netscape Communicator

Netscape Navigator

Pegasus Mail

If you are using an alternative SMTP/POP3 e-mail client, it will be necessary for you to manually configure your settings both in RPK InvisiMail and in the e-mail client directly.

As there are many different e-mail clients available, it is impossible to provide configuration instructions for each and every one.  However, below is a guide to the configuration which should be used together with the original installation guidelines that were provided with your e-mail client.

RPK InvisiMail

1.	From the RPK InvisiMail Control Panel click on the, “Technical” button in the Toolbar

2.	Click on the “Add Client” Button

3.	RPK InvisiMail will activate the setup process.  Please follow the Instructions provided, If you are adding a supported e-mail client, RPK InvisiMail will identify this during the setup procedure.  If you are adding an alternative SMTP/POP3 compliant e-mail package click the “Add More…” button.

4.	The Add Mail Client screen will now be displayed.  Complete the “User Name” for your e-mail account.  This is the display name that others see when they receive e-mail from you.

5.	Now provide the e-mail address for your e-mail account. This is usually the address where others would normally send you e-mail.

6.	Complete your POP User ID to identify this e-mail account to your mail server.

7.	Now enter appropriate SMTP/POP3 server names or IP addresses as described by your Internet Service Provider in the appropriate fields.

8.	Click the Apply Changes Button and follow the instructions provided by the setup procedure which will generate new Public/Private Keys and obtain Certificates (depending on your version of RPK InvisiMail).

9.	Go into the InvisiMail Control Panel, click the “Technical” button, and you will see a new e-mail client: “Secure#”.  This should be the last one on the list.  Remember this number for use in configuring your e-mail client software.

Your E-mail Client Software

1.	First, the entry labeled “E-mail address” needs to be modified in your e-mail client software.  Add the “Secure#” from the process above to your normal e-mail address.  For example: If “Secure#” is Secure1 and your e-mail address is example@somewhere.com, then change the e-mail address to Secure1.example@somewhere.com

2.	In your e-mail client software, DO NOT change your existing Return, Reply or Reply-to address.  This is your normal e-mail return address and must be the same as the one you entered in the RPK InvisiMail Control Panel (step 5 above).

3.	Replace both of the SMTP and POP3 server (also known as outgoing mail or incoming mail) entries with “localhost” all in lower case and without the quote marks.  These are likely to be set to a server name such as mail.enterprise.net or a TCP/IP address such as 192.168.255.5.

4.	Add “Secure#” to the beginning of the POP User Account Name (also known as the mail server user name) entry that your e-mail account uses for receiving mail.  E.g. If your POP account is “steve” add  “Secure#” at the beginning to make it “Secure5.steve” (without the quote marks).


Distributing Your Public Key
Distribute My Public Key / Send Key

For secure communication to occur, both the sender and recipient need to be RPK InvisiMail users.  Therefore, it is a good idea to send your Public Key to everyone in your address book.

If the recipient is an RPK InvisiMail user, your public key will be automatically passed to them with each message that is sent.  Once your public key has been captured and entered into their RPK InvisiMail Control Panel, all future messages which they send to you will be encrypted using your Public Key. If the recipient is not an RPK InvisiMail user, they will be provided with an opportunity to download the FREE RPK InvisiMail Intro version.  It is in your interest and that of those with whom you communicate, to use RPK InvisiMail to ensure security, privacy and trust in all of your electronic communications.

To Distribute My Public Key

1.	From the RPK InvisiMail Control Panel, Click on the “Distribute” button in the Toolbar.

2.	RPK InvisiMail will provide a list of all the e-mail addresses identified in your e-mail client address books at the time of installing RPK InvisiMail.  Select which of your Public Keys (if you have more than one account in the RPK InvisiMail Control Panel) you wish to distribute by clicking on the arrow of the “Send key for this e-mail address” drop down box and selecting the desired account.

3.	Click on the e-mail accounts from the list provided by RPK InvisiMail to select those that  you wish to distribute your Public Key to.  This will also provide the recipient with the opportunity to download the free Intro version of RPK InvisiMail.

4.	Select the e-mail addresses to whom you wish to communicate your key information, by clicking on the “>” button for each of those addresses.  RPK InvisiMail will copy each selection to the distribute pane.  To select all e-mail addresses, click on the  “>>” button.

5.	Now click the  “Send these people my public key button”

RPK InvisiMail will distribute your public key and notify your correspondents that you are able to send and receive secure e-mail.

If you have added e-mail addresses to your client address books since installing RPK InvisiMail, it is possible to update the RPK InvisiMail Control Panel by clicking on the “Search computer for e-mail addresses” button.  Then proceed with the instructions, above, to send these people your public key and the free RPK InvisiMail Intro version.


Removing Others From the RPK InvisiMail Control Panel

In addition to storing your e-mail settings and configuration, the RPK InvisiMail Control Panel also holds the Public Keys of your correspondents.  Whenever you send a secure message to someone, the RPK InvisiMail Control Panel uses the intended recipient’s Public Key to encrypt the message so that only they can read it with their corresponding Private Key.

In certain circumstances, such as if the recipient has uninstalled their copy of RPK InvisiMail, it may be necessary to remove their Public Key, so that future messages are no longer sent encrypted to this individual.

To Remove a Public Key:

1.	From the RPK InvisiMail Control Panel, Click on the “Recipients” button in the Toolbar.

2.	A list of all e-mail addresses and Public Key information will be displayed in the pane.  Click on the e-mail address for which you wish to remove the Public Key information.  The Public Key information for the selected e-mail address will now be displayed.

3.	To remove the selected information Click on the “Remove from RPK InvisiMail Control Panel” button.

***Please note: if a user re-installs RPK InvisiMail, their new Public Key information will automatically be added to your RPK InvisiMail Control Panel when they send you their first message with the new key.


 Viewing / Adding Payment Details

The RPK InvisiMail Control Panel stores your credit card details for use in secure Internet transactions with InvisiMail enabled merchants.

To use RPK InvisiMail to perform credit card transaction via the Internet, it is necessary to provide your credit card details which will be stored in an encrypted format within the RPK InvisiMail Control Panel.

How to enter credit card Payment details

1.	From the RPK InvisiMail Control Panel, click on the “Payment” button in the Toolbar.

2.	In the Options Pane click on the “New Payment Method” button.

3.	RPK InvisiMail will now request that a name for the payment method be entered such as Visa or Mastercard or provide a reference to your bank account from which the funds will be drawn.

4.	In the Payment Method Details Pane use the pull down menu to select the appropriate card type. If your card is not represented on this list simply type the card type in the card type field.

5.	In the “Card No:” field, enter your credit card number omitting any spaces that may be present

6.	Now enter your credit card expiration date as shown on your credit card where requested.

7.	Now enter your name as it appears on the credit card in the “Name” field.

8.	Finally click on the “Apply Changes” button.

***Similarly if you wish to amend credit card details for an existing Payment Method in such cases as where a new card has been issued simply follow simply follow points 4 through 8

RPK™ InvisiMail™ will now create an association between the payment method description and the corresponding card details provided.


Removing Payment Details

RPK InvisiMail provides users with a means for secure electronic commerce via the Internet with RPK InvisiMail merchants.  Within the RPK InvisiMail Control Panel is a section for payment which stores Payment Method details and associated credit card details.  Please note that all information stored within the RPK InvisiMail Control Panel is stored in an encrypted format.

If you choose to remove a Payment Method, this will also remove the credit card details associated with that payment method.  With each Payment Method there is a corresponding set of credit card details.  Therefore, if a credit card account is closed it will be necessary to remove or change every “Payment Method” that used this card.

Removing Payment Details

1.	From the RPK InvisiMail Control Panel click on the, “Payments” button in the Toolbar.

2.	In the Options pane click on the “Remove Payment Method” Button.

3.	RPK InvisiMail will ask you to confirm the removal of this method.  If you are certain that you wish to remove this option click “Yes”

RPK InvisiMail will now remove the payment method as requested.

See also Viewing/Adding Payment Details


Viewing RPK InvisiMail Settings

The RPK InvisiMail Control Panel contains all settings related to the InvisiMail system, such as:

E-mail client settings

Passwords

Certificate Information

Payment Information for E-Commerce

To View the RPK InvisiMail Control Panel:

1.	Click on the, “Start” button in the Task Bar.

2.	Select the “Programs” menu item .

3.	Select the “RPK InvisiMail” menu item.

4.	Select the “RPK InvisiMail Settings” menu item.

5.	You will now be asked to Logon to the RPK InvisiMail Control Panel.  Type your RPK InvisiMail password and confirm by clicking on the “Logon” button.


Removing RPK InvisiMail

It is possible to uninstall RPK InvisiMail through the “Add/Remove Programs” function of Windows95. However, by doing so you will no longer be able to automatically send or receive secure e-mail.  If you choose to uninstall RPK InvisiMail, you should notify everyone who you presently correspond with, so that they can remove your Public Key information from their RPK InvisiMail Control Panel.  (See below for instructions).

The uninstall process will reset your e-mail software settings back to the way they were prior to setting up RPK InvisiMail.  If you have since manually configured additional e-mail accounts, you will need to manually change back your settings in your e-mail software.

As a safety precaution, the uninstall function does not delete the InvisiMail program files from your hard drive.  This ensures that if you happen to receive an encrypted message, you will still be able to read it.  If an encrypted message shows up in your In-Box, double click on it, enter your InvisiMail password or pass phrase and then you can read the message.  To delete the InvisiMail software, just delete the entire directory where it was installed.  Note: If you delete the InvisiMail software, you will no longer be able to decrypt any encrypted messages you receive.

To Remove RPK InvisiMail:

Note:  You should close all e-mail software before running the uninstall process.

1.	Double click on the “My Computer” icon on the Windows 95 Desktop

2.	Double click on the “Control Panel” icon

3.	Double click on the “Add/Remove Programs” icon

4.	From the “Install/uninstall” tab, use the scroll bar in the view pane and select RPK InvisiMail icon.

5.	Click the “Add/Remove” button

6.	The Automatic uninstaller will now ask whether you are sure you wish to remove RPK InvisiMail.  If you do not wish to remove RPK InvisiMail,  click the “No” button, if you wish to proceed, click the “Yes” button.

How to Have Others Stop Sending You Encrypted Messages:

1.	In their RPK InvisiMail Control Panel, they should click the “Recipients” button, select your e-mail address and

2.	Toggle the “Send to this person” button to “plain text”

Or

1	Press the “Remove from SAB” button.  (Note: if they press this button by mistake, don’t worry.  The next time they receive an e-mail message from you, InvisiMail will automatically add you back into their Secure Address Book).


About RPK InvisiMail

The About RPK InvisiMail screen provides information on the version of RPK InvisiMail you have installed on your system as well as contact information, and Technical Support information (web site, e-mail address) for support purposes, should they be required.  The About RPK InvisiMail screen also lists developers of this product.

To view the About RPK InvisiMail Screen

1.	From the InvisiMail Taskbar Click on the RPK InvisiMail Icon with the right button on the mouse.

2.	A Menu of options will appear.  Click on the “About InvisiMail” and press “OK” when you have finished reading the information provided.

Or

1.	Open the RPK InvisiMail Control Panel by clicking the Start button.  Then select Programs.  Then select RPK InvisiMail.  Then select Settings.   Enter your RPK InvisiMail password and click Logon.   Select Help from the menus bar.   Then select About.


The Encrypt A File Option

In addition to providing e-mail security, RPK InvisiMail allows you to encrypt files on your PC or network using the Encrypt A File option.  Files encrypted in this way will be very secure and you should be aware that if you forget your password or delete then re-install RPK InvisiMail, it will be impossible to decrypt these files.

To Encrypt a file:

1.	Right click the RPK InvisiMail  icon in the Windows Tray (small lock and keys icon)

2.	You will be provided a pop-up menu, click “Encrypt a File”

3.	You will be presented with a browse screen. Browse as normal until you are able to select the file for encryption.  Do not attempt to encrypt the whole C: drive as the RPK InvisiMail application files are stored on this drive.  If you encrypt this drive, it will be impossible to decrypt it as the unique Private key which is needed to perform this process will now have been encrypted, rendering it useless.

4.	When you have selected the file to be encrypted by clicking on it once, click the “Open” button.

5.	You will now be asked which public key to use for this encryption.  By clicking on the pull down arrow, you will be able to select the public key associated with one of your chosen e-mail addresses.  When you have selected which key to use, click encrypt.

6.	An animation display will appear to notify you that RPK InvisiMail is encrypting.  When this disappears, the encryption will be complete.

When RPK InvisiMail has finished encrypting it will remove the original file.

It is also possible to encrypt files with the Send To menu choice found on the right mouse button pop-up menu in the Windows Explorer.

1.	Click on the file you wish to encrypt.

2.	Click on this selected file again with the Right Mouse button, which will display the available menu options.

3.	Click on the Send To menu item.

4.	Click on the RPK InvisiMail menu item.

5.	You will now be asked to enter your Password.  Before clicking “Open” be sure that the appropriate e-mail account is shown, so that the correct Private key will be used to decrypt the file.

6.	A dialog box will appear to confirm the name of the file and its type.  By default, the ”Save As” option will be the original file name, before it was encrypted.  Change or accept the file name and click the “Open” button.


The decrypt a file option
Decrypting a file

In addition to providing e-mail security RPK InvisiMail may be used to encrypt and decrypt files stored on your PC or network which can only be opened with your RPK InvisiMail Private Keys.

To Decrypt a file:

1.	Right click the RPK InvisiMail icon in the Task Bar

2.	You will be provided a list of options, click “Decrypt a File”

3.	You will be provided a browse screen.  Browse as normal until you are able to select the file you wish to decrypt.

4.	When you have selected the file to be decrypted by clicking on it once, click the “Open” button.

5.	You will now be asked to enter your Password.  Before clicking “Open” be sure that the appropriate e-mail account is shown, so that the correct Private key will be used to decrypt the file.

6.	An action box will appear to enable you to name the saved file.  By default, the “save as” option will be the original file name before it was encrypted.  Change or accept the file name and click the “Open” button.

When RPK InvisiMail has finished decrypting it will remove the old .RPK encrypted file.


Show The RPK File Icon

The RPK File Icon may be placed on the desktop and used to drag and drop files/folders for encryption/decryption.  This RPK File Icon performs the same task as Encrypt a File and Decrypt a File options in the RPK InvisiMail icon in the Windows Tray.

To show RPK File Icon

1.	Right click the RPK InvisiMail icon in the Windows Tray

2.	You will be provided a list of options, click “Show RPK File Icon”.

Please Note - The RPK File Icon will now be displayed permanently on-top of any applications. See also “Hiding  the RPK File Icon”


Hiding the RPK File Icon

The RPK File Icon may be placed on the desktop and used to drag and drop files for encryption/decryption. This RPK File Icon performs the same task as Encrypt a File and Decrypt a File options in the RPK InvisiMail icon in the Windows Toolbar.  The RPK File icon is permanently on top of your desktop which may sometimes be inconvenient, therefore, it possible to hide the icon.

To hide RPK File Icon:

1.	Right click the RPK InvisiMail icon in the Windows Tray

2.	You will be provided a list of options, click “Hide RPK File Icon”.

The RPK File Icon will now be hidden. Should you wish to reactivate the file icon See also “Show RPK file Icon”


Viewing Certification Details & Setting Authority Trust

RPK InvisiMail accepts X.509 style certificates from independent Certification Authorities.  There are numerous Certification Authorities, some of which simply request a payment for a certificate to be issued and do not verify the data provided, while others require the user to prove their identity.  As such, it is impossible for RPK InvisiMail to automatically determine which certificates to trust and which should be described as un-trusted.  Therefore, it is the responsibility of the user to view the certificates held in the RPK InvisiMail Control Panel and decide which they believe should be trusted and which should be treated with suspicion.  To assist you in this decision we would recommend that you visit the Certification Authority’s web site to see just how much information is required to obtain each level of certificate issued.

To automate the process of displaying trust details for various Certification Authorities, the RPK InvisiMail Control Panel allows the user to qualify each certificate.  In so doing, the level of trust associated with the certificate is communicated whenever a message containing a certificate is received.

To Set Authority Trust Levels

1.	From the RPK InvisiMail Control Panel, click on the “C.A. Info” button in the Toolbar.

2.	In the “Certificate Types” pane click on the certificate type that you wish to assign a trust level.

3.	In the “Authority Details” Pane click on the Radio button which best describes the trust you associate with the chosen certificate.


Load A Public Key >From A File
Load A Public Key From File

To improve security, it is possible to physically exchange Public Keys by saving them to floppy disk and personally delivering them into the hand of the intended recipient.  Or by selecting the Public Key from a shared drive within a network.  This system may also be useful if you if you wish to correspond with others who use the encryption features of RPK InvisiMail for securing documents but choose not to use RPK InvisiMail for securing all e-mail communication, instead attaching an RPK secured file and sending it with their e-mail client as normal.

Loading a Public Key

1.	From the RPK InvisiMail Control Panel click on “Recipients” in the Toolbar.

2.	Click on the “Load from file” button.

3.	InvisiMail will bring up the standard Windows file navigation window from which you must select the location of the Public Key file you wish to load into the RPK InvisiMail Control Panel.  Then click “Open”.

RPK InvisiMail will now load the selected Public Key information into the RPK InvisiMail Control Panel so that future messages or files may be encrypted with the intended recipient’s Public Key.


Contacting Us

Should you wish to contact InvisiMail International Ltd., please send an e-mail message to our support service at info@InvisMail.com.

Online Trouble Shooting and Frequently Asked Questions are available from our website www.InvisiMail.com

If you wish to be notified about Product Updates and Patches, send us e-mail at info@InvisiMail.com.


RPK InvisiMail Overview
RPK™ InvisiMail™ Overview

RPK™ InvisiMail™ is a standards-based e-mail security and commerce add-in for POP3/SMTP Internet e-mail clients and gateway servers.  Tested and certified by the International Computer Security Association, RPK InvisiMail automatically and transparently encrypts e-mail messages and attachments, authenticates the sender and verifies the contents of each message have not been changed in transit.

RPK InvisiMail is easy to use because it is completely transparent as it integrates with your existing e-mail packages.  E-mail is sent and received without having to learn anything about cryptography, yet with total privacy, security and trust.

As an InvisiMail user, you can send the FREE InvisiMail Intro version to anyone worldwide, providing compatibility and security for all your e-mail messages, without requiring others to purchase anything. RPK InvisiMail is globally available with high strength encryption because the underlying RPK encryption algorithm and the product were both developed outside the United States.  Therefore, InvisiMail is not subject to the well publicized U.S. export restrictions.

InvisiMail uses the RPK Fast Public Key Encryptonite™ Engine, developed by RPK New Zealand Ltd., the strongest cryptography available worldwide today.  This method creates two unique codes: a public key, which securely locks messages, and a private key, which unlocks them.  RPK InvisiMail automatically creates a private and corresponding public key for you.  RPK has been analyzed by world class cryptographers who have issued reports on the security and integrity of the technology.

RPK InvisiMail works automatically with your e-mail applications, in the background, so there is no need for you to set configurations, system settings or application preferences.   If you are already using one of the major e-mail software products such as Netscape (Navigator or Communicator), Microsoft Internet Explorer (Internet Mail or Outlook Express), Microsoft Exchange or Outlook, Eudora (Lite or Pro), or Pegasus you simply install RPK InvisiMail and everything is taken care of automatically.  Should you be using a different SMTP/POP3 compliant system it is still possible to install RPK InvisiMail but it is necessary to manually configure the settings in both your e-mail software and the RPK InvisiMail Control Panel.

RPK InvisiMail Features

•	Automatically:

•	Encrypts messages including attachments

♦	Authenticates the sender of each message

♦	Validates that the contents of each message have not changed in transit

•	Maintains encryption keys, signature tokens and authentication tokens

•	Uses patented high-strength encryption, available on a worldwide basis for all e-mail messages and attachments

•	Two levels of security:

•	Strong (607 bits)

♦	Extreme (1279 bits)

♦	Compression to reduce message size, transmission time and increase security

•	MIME Internet standard compatible

1.	Supports X.509 style certificates

2.	Supports 3rd party Certification Authorities

3.	Supports Self Certification

•	Seamlessly works with:

•	Netscape Navigator 2 and 3

•	Netscape Communicator

•	Microsoft Internet Mail and Outlook Express (Internet Explorer)

•	Microsoft Exchange and Outlook

•	Eudora Light and Eudora Pro

•	Pegasus

•	Calypso

•	Independently reviewed by communications security experts

•	Internationally available in:

•	English

•	German

•	Japanese

•	French

•	Spanish

•	RPK InvisiMail has been tested and certified by the International Computer Security Association

Legend

•	All Versions

♦	Professional Edition Only