SMIME Toolkit: S/MIME Setup

SMIME Toolkit simplifies S/MIME setup on iPhone, iPad, and Mac. Create RSA-2048 or ECC P-384 identities for secure mail.

SMIME Toolkit: S/MIME Setup - Secure Email Certificates

SMIME Toolkit guides you through S/MIME setup on iPhone and iPad in clear steps. Generate keys on-device, request certificates from your organisation or SMIME Toolkit's backend, and export identities for manual installation in iOS Settings.

Sign and encrypt email in Apple Mail while keeping your private keys under your control.

WHAT THIS APP DOES SMIME Toolkit guides you through the full S/MIME enrolment process:

• Generates cryptographic keys securely on your device (RSA-2048 default, optional ECC P-384)
• Builds standards-compliant certificate signing requests (CSRs)
• Requests signed certificates from your organisation's secure backend
• Exports PKCS#12 (.p12) identities for manual installation in iOS Settings
• Optionally generates both RSA and ECC identities for compatibility targets

The app never configures Mail automatically and never accesses your email content.

KEY FEATURES

• On-device key generation (Keychain-backed)
• Standards-compliant CSR with email address (subjectAltName)
• Secure HTTPS requests to your organisation's issuer
• PKCS#12 (.p12) export with a password you choose
• Face ID / Touch ID for sensitive actions
• Manual install flow (required by iOS)
• CA certificate export and optional trust profile for easier setup
• Optional ECC P-384 support and dual-identity export flow

HOW IT WORKS

• Enter your email address
• Generate a key pair and CSR on your device
• Request a certificate from your signing service
• Export your identity (.p12) or trust profile
• Install manually in Settings > Mail > Accounts > Advanced

Once installed, enable S/MIME signing and encryption in Apple Mail.

PRIVACY & SECURITY

• Your private key never leaves your device
• Only your CSR and email address are sent for certificate issuance
• No access to Mail, messages, or accounts
• No ads or tracking

IMPORTANT NOTES

• This app cannot configure Apple Mail automatically
• Manual installation is required by iOS
• Certificate issuance depends on your organisation's backend
• Private CAs must be trusted in Certificate Trust Settings

FOR TEAMS & ENTERPRISES

SMIME Toolkit is designed for organisations that want a simple, user-driven S/MIME enrolment flow:

• Works with internal CAs and private trust roots
• Predictable, auditable issuance workflows
• Pluggable backend interface for partner CA integrations
• Enterprise bulk generation supports RSA default, ECC opt-in, or both

TROUBLESHOOTING

• Ensure your network can reach the signing service
• Certificate chain errors usually indicate issuer misconfiguration
• If Mail doesn't show encryption, confirm CA trust and recipient certificates

COMPATIBILITY

• Works with Apple Mail on iOS after manual installation
• Compatible with clients that support PKCS#12 identities once installed

SMIME Toolkit is a certificate utility. It does not provide email hosting, account management, or message delivery. Apple Mail remains controlled by iOS settings and your email provider.