New in G Suite: Hosted S/MIME Adds Advanced Controls for Root CAs, More

Gmail administrators using Hosted S/MIME can upload additional root certificates from within the Admin Console.

Share online:

In situations, where G Suite users receiving a link to a file in Team Drive for which they don't have access, Google will now send the Request Access notification to only the "creator of file," or a" limited group of individuals," who had relevant interaction with the Team Drive. Thus, no longer it is send to all members of the Team Drive.

This change ensures members of Team Drives don't receive unnecessary emails, as well it also prevents unwanted oversharing of Team Drive content.

Google is now enabling users to begin searching in the new Google Sites —going forward, users can simply click the magnifying glass in the top right corner of their screen and search across an entire site.

In addition, Google Cloud Search users will now see content from the new Google Sites in their Cloud Search results.

See this screenshot of Search feature in new Google Sites:

Google Sites Search

Google is rolling out a set of restrictions on what content people can interact with and share on Google+.

Requested by G Suite admins, Google is adding new content restriction settings in Google+, and allow you to now change sharing settings for a specific organizational unit (OU).

Since these settings can be customized at the OU level, you'll have the opportunity to differentiate permissions.

To change sharing setting, go to Apps -> G Suite -> Google+ -> Advanced Settings in the Admin console, and then select appropriate OU. And, then pick from the following three options as per your need:

Public Mode allows users to view/share/interact with content that is both inside and outside of the domain.

Private Mode offers the most control over Google+ activity, as it restricts users to viewing/sharing/interacting with only people inside their domain. G Suite users can still view content outside of their domain if they get a direct link or had joined/followed an external community/person/collection prior to being placed into this mode.

Hybrid Mode setting offers moderate control over Google+ activity, as it allows G Suite users to view content outside their domain, but only share/interact with it internally.

Screenshot of new Google+ sharing settings:

New Google+ sharing settings in G Suite

The table below outlines what G Suite users can do under each setting:

G Suite Google+ content sharing settings table outlines users functions

Lastly, Google has announced that Gmail's Hosted S/MIME solution requires certificates to be from certain trusted root Certificate Authorities (CAs) — can now upload additional root certificates that you want Hosted S/MIME to trust from within the Admin Console.

Accepting additional Root Certificates

Google has a set of requirements for acceptable S/MIME encrypted messages which follow strict security guidelines; however, you may have noticed that recipients that don't meet these requirements appear as not "trusted" and can't be sent those messages. Once this new admin console control is available, you will be able to upload additional root certificates to ensure the email you want to have trusted by Gmail servers are designated as such for your users.

Please note: While accepting additional root certificates will remove the 'not trusted' indicator in Gmail.

For more details on how to get started, see this Help Center, and to evaluate current certificate, check out the best practices as outlined here.