Sign and Encrypt Messages - Take Control of Apple Mail (1.0) - page 100

Sign and Encrypt Messages in iOS 7
iOS 7 Mail supports S/MIME in much the same way Mavericks Mail does. Unfortunately,
even in the best cases, S/MIME is rather complicated for the average user—and iOS 7 has
the most confusing, opaque implementation of S/MIME I've ever seen. Apple's iPhone User
Guide , whose iOS 6 version contained only three sentences about S/MIME, omits the topic
entirely in the iOS 7 version, perhaps because the design is so poorly thought out that docu-
menting it would only make Apple look bad.
Relatively few people need to use S/MIME on an iOS device, and those who do won't find
it anywhere near as convenient as on a Mac. So, fair warning: If you're not sure this is
something you'll need to do, you'll be happier skipping all these steps!
Set Up S/MIME in iOS 7
First, you'll need to turn on S/MIME for each account you want to use it with and get your
own certificate onto your iOS device so you can sign outgoing messages. (Unfortunately, I
haven't been able to retrieve new certificates directly from providers like InstantSSL on my
iOS devices, so part of this process assumes you already have a certificate on your Mac, as
described in Get a Personal Certificate .)
You must turn S/MIME support on, for any given account, to be able to see whether an in-
coming message received by that account was signed; to add a sender's certificate to your iOS
keychain; or to sign or encrypt outgoing messages. Turning S/MIME on, without changing
any other settings, causes no harm and may be helpful, so I suggest that you go ahead and do
so for each account. Here's how to do it:
1. Go to Settings > Mail, Contacts, Calendars > Account Name > Account > Ad-
vanced (or, for iCloud accounts, Settings > Mail, Contacts, Calendars > iCloud
Account Name > Account > Mail > Advanced; for Exchange accounts, Settings >
Mail, Contacts, Calendars > Account Name > Account > Advanced Settings).
2. At the bottom of this view, tap the switch next to S/MIME to turn on or off
S/MIME support for that account; when on, you see the Sign and Encrypt op-
tions covered below. When exiting the account settings, be sure to tap Done,
rather than Cancel, in order to save any changes you've made.
3. On your Mac, where you've already installed a personal certificate (see Get a Per-
sonal Certificate ), open Keychain Access (which is located in /Applications/
Utilities ). Select Login in the Keychains list, select My Certificates in the Cat-
egory list, and select the certificate with your email address on the right.