{"id":3942,"date":"2025-05-28T18:35:11","date_gmt":"2025-05-28T13:05:11","guid":{"rendered":"https:\/\/www.navohosting.com\/blog\/?p=3942"},"modified":"2025-08-21T17:22:22","modified_gmt":"2025-08-21T11:52:22","slug":"setup-secure-multipurpose-internet-mail-extension","status":"publish","type":"post","link":"https:\/\/www.navohosting.com\/blog\/setup-secure-multipurpose-internet-mail-extension\/","title":{"rendered":"How to Setup S\/MIME (Secure Multipurpose Internet Mail Extension)?"},"content":{"rendered":"

How to Setup S\/MIME in Google Workspace?<\/strong><\/h3>\n

Setup S\/MIME : Google Workspace offers a business version of applications like Gmail, Calendar, Sheets, Meet,etc.\u00a0 E-mails are used by business organizations for their communication with clients. To improve the security of the google workspace emails your organization set up S\/MIME. The secure multipurpose Internet mail extension improves email security. S\/MIME encrypts messages and adds a digital signature to the emails. This mail extension protects users from phishing, harmful software, and email threats. Both sender and recipient must be enabled to use S\/MIME. The google workspace version supports the S\/MIME features are Enterprise, Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus.<\/p>\n

How to Turn on Hosted S\/MIME<\/strong><\/h4>\n
    \n
  1. Log in to the Admin console, go to Menu > Apps >Google > Workspace><\/li>\n<\/ol>\n

     <\/p>\n

    \"Setup<\/p>\n

     <\/p>\n

    2. On the left, under Organizations, select the domain or organization you want to configure.<\/p>\n

     <\/p>\n

    \"Setup<\/p>\n

     <\/p>\n

    3. Gmail >User settings.<\/p>\n

    \"Setup<\/p>\n

     <\/p>\n

    4. Scroll to the S\/MIME setting<\/p>\n

    \"Setup<\/p>\n

    5. Check the Enable S\/MIME encryption for sending and receiving emails box.<\/p>\n

    \"Setup<\/p>\n


    \n<\/strong>
    \n6. Allow users to upload their certificates.<\/p>\n

    \"Setup<\/p>\n


    \nAdditional controls:<\/strong><\/h5>\n

    If you want to let users upload certificates, check the\u00a0Allow users to upload their own certificates\u00a0box. If you want to upload and manage root certificates, use the S\/MIME trusted certificates controls:<\/p>\n

      \n
    1. Next to\u00a0Accept these additional Root Certificates for specific domains, click\u00a0Add.<\/li>\n
    2. Click Upload Root Certificate.<\/li>\n
    3. Browse to select the certificate file and click Open.<\/li>\n<\/ol>\n

      (A verification message appears for the certificate, which\u00a0includes the subject name and expiration date. If there\u2019s a problem with the certificate, an error message appears)<\/p>\n

        \n
      1. Under\u00a0the Encryption level,\u00a0select the encryption level to use with this certificate.<\/li>\n
      2. Under\u00a0the Address list, enter at least one domain that will use the root certificate when communicating. Domain names<\/a> can include wildcards that meet\u00a0the\u00a0RFC standard. Separate multiple domains with commas.<\/li>\n
      3. Click\u00a0Save.<\/li>\n
      4. Repeat for additional certificate chains.<\/li>\n
      5. Check the Allow SHA-1 globally (not recommended) box only if your domain or organization must use Secure Hash Algorithm 1 (SHA-1)<\/li>\n
      6. Click Save.<\/li>\n<\/ol>\n

        After enabling the hosted S\/MIME encryption, S\/MIME end-user certificates must be uploaded to Gmail. After reloading gmail, a lock icon appears in the subject line of email messages. If a message is encrypted with hosted S\/MIME the icon will be green. (Important: If you\u2019re configuring advanced controls on S\/MIME to upload and manage root certificates, you must select to enable SMIME at the top-level organization, typically your domain). Changes you made in the Google console can take up to 24 hours but usually happen more quickly.<\/p>\n

        Steps to upload certificates in their Gmail settings<\/strong><\/h4>\n

        The user certificates should meet the current cryptographic standards and use the public key cryptography standards archive file format.<\/p>\n

          \n
        1. Go to\u00a0Gmail.<\/li>\n
        2. Choose Settings<\/li>\n
        3. See all settings.<\/li>\n<\/ol>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

          4. Select the Accounts tab.<\/p>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

           <\/p>\n

          5. Next, to send mail as, select Edit info.<\/p>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

          6. The Edit email address and encryption settings window appears. (If you don’t have this option, contact your administrator)<\/p>\n

          7. Click Upload a personal certificate.<\/p>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

          8. Select the certificate and click Open. You’ll be prompted to enter a password for the certificate.<\/p>\n

          9. Enter the password and click Add certificate.<\/p>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

          10. Your message will be secure during delivery displays.<\/p>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

          11. Message security displays recipients that support enhanced encryption.<\/p>\n

          12. Click OK.<\/p>\n

           <\/p>\n

          \"Setup<\/p>\n

           <\/p>\n

          It is recommended to upload certificates with the Gmail S\/MIME API. Also, use the Gmail S\/MIME API to manage some tasks like viewing, deleting, and setting default user keys. The list of trusted certificates provided and maintained by Google applies only to Gmail for S\/MIME API.<\/p>\n

           <\/p>\n

          How to override sub-organization SMIME Settings<\/strong><\/h4>\n

          To override SMIME settings:<\/p>\n

            \n
          1. In the Admin console, go to Menu\u00a0Apps > Google > Workspace > GmailUser settings.<\/li>\n
          2. On the left, under\u00a0Organizations, select the organizational unit\u00a0you want to configure.<\/li>\n
          3. Scroll to the S\/MIME setting, and click to expand it.<\/li>\n
          4. The label\u00a0under the S\/MIME setting label will indicate either\u00a0Inherited from (organization or domain name) or\u00a0Overridden.<\/li>\n
          5. Click\u00a0Override\u00a0to save changes to the sub-organization inheriting SMIME settings.<\/li>\n<\/ol>\n

            Hope you learn about how to Setup S\/MIME by reading our tips.<\/p>\n

            Navohosting provide world-class services to our customers. We offer the following services to our clients.<\/p>\n