Email digital signature

A digital signature attached to an email message offers another layer of security by providing assurance to the recipient that you—not an imposter—signed the contents of the email message. Your digital signature, which includes your certificate and public key, originates from your digital ID. Current implementation is using SHA256WITHRSA algorhitm.

How to enable digital signature

In order to enable digital signature of the emails in Veridium we need to go to Email settings under Messaging

First step is to enable the toggle for Enable Digital Signature, and after that there is need to upload the JKS file that will contain the public and private key of the trusted certificate generated for the digital signature.

With the JKS file there is need to introduce also the password of the certificate if any.

In order to convert pfx files directly to JKS we can use the following command:
keytool -importkeystore -srckeystore [path]/cert.pfx -srcstoretype pkcs12 -destkeystore [pathTo]/cert.jks -deststoretype JKS

As a result, the emails should reflect that are digitally signed: