How can I implement my e-mail certificate (S/MIME) in iOS and sign/encrypt my e-mails?



For the implementation, please ensure that you have the certificate in PKCS12 format (.pfx). If you need to convert the certificate, you can use our certificate converter for this. You can find further helpful information on converting your certificate in our FAQ article "How can I create a PFX file?".

How to import your certificate under iOS

1

Call up the file (.p12) that contains your personal certificate. Click on the button Install to call up the import wizard.


2

Select Install Now.


3

Now enter the password that you set when exporting the certificate.


4

Once the password is accepted, iOS will automatically import the certificate. You should receive a confirmation similar to the screenshot as feedback.


5

Select Done to exit the wizard.

The certificate can now be used for digital signing and/or encryption of your messages.


Activate S/MIME for your e-mail account

1

Go to the Settings of iOS and open Passwords & Accounts.

2

Select the account for which you want to activate S/MIME and click on Advanced.


3

In the advanced settings, scroll to S/MIME and enable the option. This will display the additional items Sign and Encrypt.

  • The signature authenticates and confirms the integrity of your email by ensuring that the recipient knows that the email is from you and by notifying them if the email has been changed since it was sent.
  • Encryption ensures the privacy of your email by ensuring that only the recipient can decipher and view the email content. To encrypt e-mail messages, you must have the recipient's digital certificate installed on your device, and their certificate must be associated with the corresponding entry in your address book.




Activate digital signature and/or encryption


Unfortunately it is not possible to encrypt and/or sign individual messages. If you activate S/MIME for this account, all outgoing messages will be transmitted encrypted and/or digitally signed.

Signing messages digitally

1

Once S/MIME is enabled, you can set the digital signature. Click on Sign in the advanced account settings under S/MIME and activate the signature.



2

Your certificate is automatically selected and marked with a check mark. If you have installed several certificates, you can select your certificate from the list below.


Encrypt messages and attachments

1

As soon as S/MIME is activated you can set the encryption of your messages. In the advanced account settings under S/MIME click on Encrypt and activate the encryption.



2

Your certificate is automatically selected and marked with a check mark. If you have installed several certificates, you can select your certificate from the list below.


If encryption is enabled, it is advisable to also enable signing so that new recipients can receive your public key and send encrypted e-mails to you.