Configuring your Google Workspace Outbound Gateway for EntrustedMail

In order to begin using the EntrustedMail e-mail encryption services for Google Workspace, you must configure Workspace to send outbound e-mail though the EntrustedMail encryption gateway. 

1. Point your browser to admin.google.com. The URL redirects you to the Google accounts sign-in page.
   
   
2. Enter your super administrator account email address and password. (If you are not an Administrator, you will be redirected to the user hub. The user hub provides quick access to  the services they have permission to use, but will not allow access administration features. You will need to contact your Administrator)
   
   
3. Click Sign in. The Admin console appears.
   
   
4. Click Apps.
   
   
   
   

5. Next, click on Google Workspace

   
   
   

   
   
   
6. Then, click Gmail.
   
   
   
7. Scroll down and click on Hosts. 

   
   
   

   
   
   
8. Next, click on Add route.

   
   

   
   
   
9. Enter a description (can be anything, we chose to use EntrustedMail), and then select multiple hosts.
10. Enter first Outbound Gateway Host, listed in your “Welcome E-mail”, as a Primary Host, type in the number 25 after the colon and enter 50 under load %.
11. Next, Click the Add Button and enter the second Gateway Host, listed in your “Welcome E-mail”, as a Primary Host, type in the number 25 after the colon and enter 50 under load %.
12. Then, enter the third Gateway Host, listed in your “Welcome E-mail”, as a Secondary Host, type in the number 25 after the colon and enter 100 under load %.
    
    
    
     
    
    
13. Check both the “Require TLS delivery” and the Require CA signed certificate boxes. Uncheck Validate Certificate Hostname.  (EntrustedMail uses CA signed certificates but uses a custom name for each customer gateway addresses, that causes the full validation to fail.)
    
    
14. Then click the Save button.

    
    

15. Go back to Settings for Gmail, scroll down and click on “Spam, Phishing and Malware”.
    
    
16. Click to the “Inbound Gateway” section.
    
    
    
17. Check the Enable box, then click on the Add link and add the Inbound Gateway IP ranges listed in your “Welcome E-mail”  (this setting will ensure that certain replies to your encrypted messages do not get blocked).
    
    

    
    

    
    
18.   Go back to Settings for Gmail, scroll down and click on “Routing”.
    
    
19. Scroll to the “Routing” section and click on CONFIGURE.
    
    
    
    
    
20. Enter a description (can be anything, we chose to use "EntrustedMail".)
    
    
21. Under “Email messages to affect” check Outbound.
     

    
    
    

22. Under Route, check the Change route box, and then select the new EntrustedMail mail route we created in Step 12. Then click on SAVE.
    
    

    Changes normally take effect in 5 – to 10 minutes. E-mail will continue to use your previous settings until the changes take effect.