Configuring email digital signature

A digital signature attached to an email message increases security by providing the recipient with assurance that you, and no one else, signed the contents of the email message. Your digital signature, which includes your certificate and public key, is part of your digital ID. This digital ID identifies your unique digital mark and signals the recipient that the content hasn’t been altered in transit.

Secure/Multipurpose Internet Mail Extensions (S/MIME) is a method of exchanging emails securely. With the S/MIME technology, a digital signature can be appended to emails to ensure non-repudiation and data integrity. OpenKM, since v7.1.14, can sign email messages using S/MIME.

These are the dynamic configuration properties:

Field / Property	Type	Description
mail.smime.certificate.file	String	The location of the S/MIME certificate.
mail.smime.certificate.password	String	The password to access the S/MIME certificate.

Once these configuration properties are set, the emails from OpenKM will be signed.

More info

• Getting an S/MIME certificate
• Wikipedia S/MIME

Caution

Self-signed certificates are not recommended because they won’t be automatically validated at the destination. You can find more information at:

• Can I create my S/MIME certificate for email encryption?
• Create Self-Signed S/MIME Certificates