Using individual S/MIME certificates

iQ.Suite Crypt is normally used in conjunction with S/MIME for management of global company certificates. But individual certificates issued by official trust centres can be used too. And this is how you do it:

Step by Step:

• You first need to have your individual certificate as a .pfx file.
• Now create a sub-directory under ...grpdata/smimedata/derived_certs for your individual certificate. The name of the directory must always be the first 2 letters of the e-mail address. The character "_" must always appear both before and after the name.
  Example: Email address frederic.test@test.com = directory name "_fr_")

• Now copy the individual certificate to the directory you have just created. If need be, rename the certificate to "_firstname.secondname_40domain.com.pfx" (e.g._frederic.test_40test.com.pfx).

• Now create a copy of the existing S/MIME crypt engine that you use for the company certificate.

• The paths to "root certificate" and "company certificate" can stay as they are.
• In the "company password" field, enter the password of the individual certificate.
• In the "parameter" field of the "S/MIME Options" tab, you now need to delete the entries "--issuer=[f_issuer_cert]" and "--issuerpassword=[f_issuer_password]".

• Now add the value "--recipients=[p_ENCRYPTORS]" to the variable "I_OP_MIME_DECRYPT" in the "variables" tab.

• You can now assign the new crypt engine to the respective crypt job (e.g. decryption).