Google G Suite - Secure E-mail

Google started support for hosted S/MIME with the start of 2017, for their Enterprise version of G suite. This feature allows for sending and receiving encrypted email, with the use of Secure/Multipurpose Internet Mail Extensions (S/MIME) certificates. To make use of this feature, your certificate has to be uploaded to your G Suite account. To do so, you need to have your certificate available in a Public-Key Cryptography Standards (PKCS) #12 format, which contains both your certificate and private key. Creating the PKCS#12 (PFX) export is explained in full in our manual on Installation Code Signing Certificate or Client Certificate

Upload your certificate and private key

1. When logged in on Gmail, click on the Settings wheel in the upper right corner and then on Settings.
2. At the top, click on the Accounts tab, and then the Import or Accounts tab.
3. In the Send mail as section, click edit info next to your work account.
4. Click Upload a personal certificate. A window opens showing the files available on your system. You might not have this option if your organization doesn’t allow it.
5. Select the PFX file containing the email address for this account.
6. Enter the password for the PFX file and click Add Certificate.

The certificate is now active and can be used directly.