We're trying to roll out S/MIME using Certificate Services, Exchange 2007 and
Outlook 2003 - the last one is proving problematic.

If a person renews a certificate, then OWA continued to be able to send them
encrypted email fine, but Outlook 2003 doesn't pick up the new one. Hence,
user receives an encrypted message they cannot open (get the digital id not
found error).

We cannot find a reliable way to force the new key to be used;
clearing/resetting OAB and removing old key from AD works, as does not
working in cached mode; neither is practical for us.

Can't find a known error on this - has anyone seen this and got a solution?

Thanks,
--
Steve Durbin