End-to-end encryption for one-to-one Microsoft Teams calls now Generally Available

Published Dec 14 2021 08:00 AM 24.3K Views
Microsoft

In October, we announced the public preview of end-to-end encryption (E2EE) support for Microsoft Teams calls. Today, we are happy to announce that E2EE for Teams calls is now generally available. IT admins will have the option to enable and control the feature for their organization once the update has been received.

One-to-one Teams call using end-to-end encryptionOne-to-one Teams call using end-to-end encryption

 

Multiple enterprise customers in the US and Europe across industries such as aerospace, manufacturing, telecommunications, and professional services are in the process of rolling out E2EE for Teams calls.


Making E2EE for Teams one-to-one calls available for the organization

As a reminder, by default end-to-end encryption will not be available to all users within the tenant. Once IT has configured the policy and enabled it for selected users, those selected users will still need to turn on end-to-end encryption in their Teams settings. IT retains the ability to disable E2EE for one-to-one Teams calls as necessary.


When using E2EE for Teams one-to-one calls, certain features listed below will be unavailable. If these features are needed for a call, the user can go into their settings and turn end-to-end encryption off the same way it was turned on.

  • Recording
  • Live caption and transcription
  • Call transfer (blind, safe, and consult)
  • Call Park
  • Call Merge
  • Cal Companion and transfer to another device
  • Add participant to make the one-to-one call a group call

E2EE calls for Teams is generally available on the latest version of the Teams desktop client for Windows or Mac.


Resources

For more details on how E2EE for Teams calls works, the IT management controls, and implementation please see our prior blog on E2EE for Teams calls. For more information on encryption in Microsoft 365, please see Encryption in Microsoft 365.

 

4 Comments
Microsoft

@Christopher Hoard awesome blog!! Thanks for writing this up :smile:

Occasional Visitor

This feature is really awsome!
But "once the update is received" means obviously that our organisation has not received the update yet. We used these support-docs:
https://docs.microsoft.com/en-us/MicrosoftTeams/teams-powershell-install
and

https://docs.microsoft.com/en-us/microsoftteams/teams-end-to-end-encryption
and this
https://microsoft365pro.co.uk/2021/12/04/teams-real-simple-with-pictures-lets-deploy-end-to-end-encr... 

After we installed all the needed powershell-extensions none of the appropriate commands did work. Even  
Get-CsTeamsEnhancedEncryptionPolicy did not show anything else than the same error-message like all the other commands:

The argument "commandInfo" is NULL.
+ Get-CsTeamsEnhancedEncryptionPolicy -Identity Global
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidArgument: (:) [Get-CsTeamsEnhancedEncryptionPolicy], PSArgumentNullException
+ FullyQualifiedErrorId : ArgumentNull,Microsoft.Teams.ConfigApi.Cmdlets.GetCsTeamsEnhancedEncryptionPolicy

After we switched our teams to the public preview inside the admin-web-backend these commands worked as expected. But even if we use the public preview version (and also the developer preview) the clients do not show up the switch for using E2EE. This is even more suspicious, because it is the newest version installed (1.4.00.32771) on all clients, but SOME have the switch. The most of them do not show it in the settings/privacy tab:

Birkicht_1-1642131925373.png

 


Birkicht_0-1642131832210.png

 

Is there a possibility to find out, when our tenant will receive the update here (we are german school) without polling every day by getting error messages or missing E2EE Switch or do we did some mistake?

 

Thanks in advance
Bernd

Occasional Contributor

i think it is still not available

%3CLINGO-SUB%20id%3D%22lingo-sub-3037697%22%20slang%3D%22en-US%22%3EEnd-to-end%20encryption%20for%20one-to-one%20Microsoft%20Teams%20calls%20now%20Generally%20Available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3037697%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20October%2C%20we%20announced%20the%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-teams-blog%2Fuse-end-to-end-encryption-for-one-to-one-microsoft-teams-calls%2Fba-p%2F2867066%22%20target%3D%22_blank%22%3Epublic%20preview%20of%20end-to-end%20encryption%20(E2EE)%3C%2FA%3E%20support%20for%20Microsoft%20Teams%20calls.%20Today%2C%20we%20are%20happy%20to%20announce%20that%20E2EE%20for%20Teams%20calls%20is%20now%20%3CSTRONG%3Egenerally%20available%3C%2FSTRONG%3E.%20IT%20admins%20will%20have%20the%20option%20to%20enable%20and%20control%20the%20feature%20for%20their%20organization%20once%20the%20update%20has%20been%20received.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22One-to-one%20Teams%20call%20using%20end-to-end%20encryption%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F333608iEA30C8DF655CB3FC%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22e2ee.png%22%20alt%3D%22One-to-one%20Teams%20call%20using%20end-to-end%20encryption%22%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-caption%22%20onclick%3D%22event.preventDefault()%3B%22%3EOne-to-one%20Teams%20call%20using%20end-to-end%20encryption%3C%2FSPAN%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMultiple%20enterprise%20customers%20in%20the%20US%20and%20Europe%20across%20industries%20such%20as%20aerospace%2C%20manufacturing%2C%20telecommunications%2C%20and%20professional%20services%20are%20in%20the%20process%20of%20rolling%20out%20E2EE%20for%20Teams%20calls.%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId-332896979%22%20id%3D%22toc-hId-338285301%22%20id%3D%22toc-hId-338285301%22%20id%3D%22toc-hId-338285301%22%3E%3CBR%20%2F%3E%3CSTRONG%3EMaking%20E2EE%20for%20Teams%20one-to-one%20calls%20available%20for%20the%20organization%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3EAs%20a%20reminder%2C%20by%20default%20end-to-end%20encryption%20will%20not%20be%20available%20to%20all%20users%20within%20the%20tenant.%20Once%20IT%20has%20configured%20the%20policy%20and%20enabled%20it%20for%20selected%20users%2C%20those%20selected%20users%20will%20still%20need%20to%20turn%20on%20end-to-end%20encryption%20in%20their%20Teams%20settings.%20IT%20retains%20the%20ability%20to%20disable%20E2EE%20for%20one-to-one%20Teams%20calls%20as%20necessary.%3C%2FP%3E%0A%3CP%3E%3CBR%20%2F%3EWhen%20using%20E2EE%20for%20Teams%20one-to-one%20calls%2C%20certain%20features%20listed%20below%20will%20be%20unavailable.%20If%20these%20features%20are%20needed%20for%20a%20call%2C%20the%20user%20can%20go%20into%20their%20settings%20and%20turn%20end-to-end%20encryption%20off%20the%20same%20way%20it%20was%20turned%20on.%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ERecording%3C%2FLI%3E%0A%3CLI%3ELive%20caption%20and%20transcription%3C%2FLI%3E%0A%3CLI%3ECall%20transfer%20(blind%2C%20safe%2C%20and%20consult)%3C%2FLI%3E%0A%3CLI%3ECall%20Park%3C%2FLI%3E%0A%3CLI%3ECall%20Merge%3C%2FLI%3E%0A%3CLI%3ECal%20Companion%20and%20transfer%20to%20another%20device%3C%2FLI%3E%0A%3CLI%3EAdd%20participant%20to%20make%20the%20one-to-one%20call%20a%20group%20call%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EE2EE%20calls%20for%20Teams%20is%20generally%20available%20on%20the%20latest%20version%20of%20the%20Teams%20desktop%20client%20for%20Windows%20or%20Mac.%3C%2FP%3E%0A%3CH2%20id%3D%22toc-hId--1474557484%22%20id%3D%22toc-hId--1469169162%22%20id%3D%22toc-hId--1469169162%22%20id%3D%22toc-hId--1469169162%22%3E%3CBR%20%2F%3E%3CSTRONG%3EResources%3C%2FSTRONG%3E%3C%2FH2%3E%0A%3CP%3EFor%20more%20details%20on%20how%20E2EE%20for%20Teams%20calls%20works%2C%20the%20IT%20management%20controls%2C%20and%20implementation%20please%20see%20our%20prior%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fmicrosoft-teams-blog%2Fuse-end-to-end-encryption-for-one-to-one-microsoft-teams-calls%2Fba-p%2F2867066%22%20target%3D%22_blank%22%3Eblog%20on%20E2EE%20for%20Teams%20calls%3C%2FA%3E.%20For%20more%20information%20on%20encryption%20in%20Microsoft%20365%2C%20please%20see%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoft-365%2Fcompliance%2Fencryption%3Fview%3Do365-worldwide%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EEncryption%20in%20Microsoft%20365%3C%2FA%3E.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-3037697%22%20slang%3D%22en-US%22%3E%3CP%3EIn%20October%2C%20we%20announced%20the%20public%20preview%20of%20end-to-end%20encryption%20(E2EE)%20support%20for%20Microsoft%20Teams%20calls.%20Today%2C%20we%20are%20happy%20to%20announce%20that%20E2EE%20for%20Teams%20calls%20is%20now%20generally%20available.%20IT%20admins%20will%20have%20the%20option%20to%20enable%20and%20control%20the%20feature%20for%20their%20organization%20once%20the%20update%20has%20been%20received.%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22e2ee.png%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F333609i0B1C6729F8494F15%2Fimage-size%2Flarge%3Fv%3Dv2%26amp%3Bpx%3D999%22%20role%3D%22button%22%20title%3D%22e2ee.png%22%20alt%3D%22e2ee.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-3037697%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EMicrosoft%20Teams%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3042304%22%20slang%3D%22en-US%22%3ERe%3A%20End-to-end%20encryption%20for%20one-to-one%20Microsoft%20Teams%20calls%20now%20Generally%20Available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3042304%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F169605%22%20target%3D%22_blank%22%3E%40Christopher%20Hoard%3C%2FA%3E%26nbsp%3Bawesome%20blog!!%20Thanks%20for%20writing%20this%20up%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Fhtml%2F%408341BD79091AF36AA2A09063B554B5CD%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3042061%22%20slang%3D%22en-US%22%3ERe%3A%20End-to-end%20encryption%20for%20one-to-one%20Microsoft%20Teams%20calls%20now%20Generally%20Available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3042061%22%20slang%3D%22en-US%22%3E%3CP%3ENice%20one%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F6026%22%20target%3D%22_blank%22%3E%40John%20Gruszczyk%3C%2FA%3E%26nbsp%3BI%20did%20a%20blog%20on%20it%20recently%3A%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Fmicrosoft365pro.co.uk%2F2021%2F12%2F04%2Fteams-real-simple-with-pictures-lets-deploy-end-to-end-encryption-e2ee-for-1-to-1-voip-calls%2F%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3ETeams%20Real%20Simple%20with%20Pictures%3A%20Let%E2%80%99s%20deploy%20End%20to%20End%20Encryption%20(E2EE)%20for%201%20to%201%20VOIP%20Calls%20%E2%80%93%20%40Microsoft365Pro%3C%2FA%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-3060291%22%20slang%3D%22de-DE%22%3ESubject%3A%20End-to-end%20encryption%20for%20one-to-one%20Microsoft%20Teams%20calls%20now%20Generally%20Available%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-3060291%22%20slang%3D%22de-DE%22%3E%3CP%3EThis%20feature%20is%20really%20awsome!%3CBR%20%2F%3EBut%20%22once%20the%20update%20is%20received%22%20means%20obviously%20that%20our%20organisation%20has%20not%20received%20the%20update%20yet.%20We%20used%20these%20support-docs%3A%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FMicrosoftTeams%2Fteams-powershell-install%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2FMicrosoftTeams%2Fteams-powershell-install%3C%2FA%3E%3CBR%20%2F%3E%20and%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-end-to-end-encryption%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fmicrosoftteams%2Fteams-end-to-end-encryption%3C%2FA%3E%3CBR%20%2F%3E%20and%20this%20%3CBR%20%2F%3E%3CA%20href%3D%22https%3A%2F%2Fmicrosoft365pro.co.uk%2F2021%2F12%2F04%2Fteams-real-simple-with-pictures-lets-deploy-end-to-end-encryption-e2ee-for-1-to-1-voip-calls%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Ehttps%3A%2F%2Fmicrosoft365pro.co.uk%2F2021%2F12%2F04%2Fteams-real-simple-with-pictures-lets-deploy-end-to-end-encryption-e2ee-for-1-to-1-voip-calls%2F%3C%2FA%3E%26nbsp%3B%3CBR%20%2F%3E%3CBR%20%2F%3E%20After%20we%20installed%20all%20the%20needed%20powershell-extensions%20none%20of%20the%20appropriate%20commands%20did%20work.%20Even%20%3CBR%20%2F%3EGet-CsTeamsEnhancedEncryptionPolicy%20did%20not%20show%20anything%20else%20than%20the%20same%20error-message%20like%20all%20the%20other%20commands%3A%3CBR%20%2F%3E%3CBR%20%2F%3EThe%20argument%20%22commandInfo%22%20is%20NULL.%3CBR%20%2F%3E%20%2B%20Get-CsTeamsEnhancedEncryptionPolicy%20-Identity%20Global%3CBR%20%2F%3E%2B%20~~~~%3A)~%3CBR%20%2F%3E~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~%20%5BGet-CsTeamsEnhancedEncryptionPolicy%5D%2C%20PSArgumentNullException%3CBR%20%2F%3E%2B%20FullyQualifiedErrorId%20%3A%20ArgumentNull%2CMicrosoft.Teams.ConfigApi.Cmdlets.GetCsTeamsEnhancedEncryptionPolicyAfter%3CBR%20%2F%3E%3CBR%20%2F%3E%20we%20switched%20our%20teams%20to%20the%20public%20preview%20inside%20the%20admin-web-backend%20these%20commands%20worked%20as%20expected.%20But%20even%20if%20we%20use%20the%20public%20preview%20version%20(and%20also%20the%20developer%20preview)%20the%20clients%20do%20not%20show%20up%20the%20switch%20for%20using%20E2EE.%20This%20is%20even%20more%20suspicious%2C%20because%20it%20is%20the%20newest%20version%20installed%20(1.4.00.32771)%20on%20all%20clients%2C%20but%20SOME%20have%20the%20switch.%20The%20most%20of%20them%20do%20not%20show%20it%20in%20the%20settings%2Fprivacy%20tab%3A%3C%2FP%3E%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Birkicht_1-1642131925373.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F339581i3B11BC78C6214A6A%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Birkicht_1-1642131925373.png%22%20alt%3D%22Birkicht_1-1642131925373.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CBR%20%2F%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20image-alt%3D%22Birkicht_0-1642131832210.png%22%20style%3D%22width%3A%20400px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F339580i309940EF7CE4A6F9%2Fimage-size%2Fmedium%3Fv%3Dv2%26amp%3Bpx%3D400%22%20role%3D%22button%22%20title%3D%22Birkicht_0-1642131832210.png%22%20alt%3D%22Birkicht_0-1642131832210.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20there%20a%20possibility%20to%20find%20out%2C%20when%20our%20tenant%20will%20receive%20the%20update%20here%20(we%20are%20german%20school)%20without%20polling%20every%20day%20by%20getting%20error%20messages%20or%20missing%20E2EE%20Switch%20or%20do%20we%20did%20some%20mistake%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advanceBernd%3CBR%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E
Co-Authors
Version history
Last update:
‎Dec 13 2021 04:33 PM
Updated by:
We support Ukraine and condemn war. Push Russian government to act against war. Be brave, vocal and show your support to Ukraine. Follow the latest news HERE