Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base: 322756 How to back up and restore the registry in Windows
Outlook 2007
This issue is fixed in the Outlook 2007 hotfix package that is dated August 25, 2009. For more information, click the following article number to view the article in the Microsoft Knowledge Base:
973404 Description of the Outlook 2007 hotfix package (Outlook-x-none.msp): August 25, 2009
To resolove this issue in Outlook 2007, follow these steps:
- Apply the hotfix package that is described in the following Microsoft Knowledge Base article:
973404 Description of the Outlook 2007 hotfix package (Outlook-x-none.msp): August 25, 2009
- Configure the MaxCertsSize registry entry. To do this, follow these steps:
- Start Registry Editor.
- In Windows Vista, click Start
, type regedit in the Start Search box, and then press ENTER.
If you are prompted for an administrator password or for confirmation, type the password, or provide confirmation.
- In Windows XP, click Start, click Run, type regedit in the Open box, and then click OK.
- Locate and then click the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\Office\12.0\Outlook\Security
- On the Edit menu, point to New, and then click DWORD Value.
- Type MaxCertsSize, and then press ENTER.
- Right-click MaxCertsSize, and then click Modify.
- In the Value data box, type any DWORD value to restrict the maximum certificate size, and then click OK.
- Exit Registry Editor.
Outlook 2010
To resolve this issue in Outlook 2010, follow these steps:
- Configure the MaxCertsSize registry entry. To do this, follow these steps:
- Start Registry Editor.
- In Windows Vista, click Start, type regedit in the Start Search box, and then press ENTER.
If you are prompted for an administrator password or for confirmation, type the password, or provide confirmation.
- In Windows XP, click Start, click Run, type regedit in the Open box, and then click OK.
- Locate and then click the following registry subkey:
HKEY_CURRENT_USER\Software\Microsoft\Office\14.0\Outlook\Security
- On the Edit menu, point to New, and then click DWORD Value.
- Type MaxCertsSize, and then press ENTER.
- Right-click MaxCertsSize, and then click Modify.
- In the Value data box, type any DWORD value to restrict the maximum certificate size, and then click OK.
- Exit Registry Editor.
The following table contains all the possible results based on the value that you specify for the MaxCertsSize registry entry and the actual size of the certificate data for the contact.
| MaxCertsSize value (x) | Actual size of the certificate data (y) | Result |
|---|
| x = 0 | y >0 | No certificate data is saved with the contact. There is no error message. |
| 0 <= x <= 32768 | y < x | All certificate data is saved with the contact. |
0 <= x <= 332768
| x < y <= 32768 | No certificate data is saved with the contact. There is no error message. |
| x > 32768 | y <= 32768 | All certificate data is saved with the contact. |
| x > 32768 | 32768 < y < x | You cannot save items (Online mode) or sync items (Cached mode). You experience the symptoms that were described earlier. This scenario is the same as not having applied the hotfix at all. |
| x > 32768 | y >= x | No certificate data is saved with the contact. There is no error message. |
The value of the MaxCertsSize registry entry should be less than or equal to 32 kilobytes. We recommend that you not set the value of the MaxCertsSize registry entry to a figure larger than 32,768. This is because you can never save more than 32 kilobytes of certificate data.
Additionally, if this change prevents you from saving certificate data with the contact, Outlook still uses a certificate for users if the users have their certificates published to the global address list (GAL).
To remove certificates that are not for e-mail use, apply the following hotfix:
For more information, click the following article number to view the article in the Microsoft Knowledge Base:
945014 Error message when you try to add an Active Directory user account as a contact in Outlook: "There is not enough memory to perform the operation"
After you apply this hotfix, you must set the value of the StripCertsNotValidForMail registry entry to
1 to remove the certificates that are not for e-mail use. You can use the MaxCertsSize registry entry and the StripCertsNotValidForMail registry entry together to resolve this problem.