Skip to main content

Mail Client Automatic Configuration Scripts iOS and S/MIME

binco
Hello there, I would like to understand if it's expected that when I set up an email account on iOS the S/MIME set up is locked and I'm unable to correctly enable email signatures using my certificates. Thanks

Comments

21 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! That is correct - currently this isn't something that cPanel supports, although there is an older feature request here:
    0
  • binco
    I see, but why not allow users to enable and disable it and using their S/MIME certificates on their devices. As I tried on Apple Cofigurator this is easily manageable even without issuing an S/MIME certificate but I don't know if that's the same on your end.
    0
  • cPRex Jurassic Moderator
    Can you let me know specifically what you would like to be enabled or disabled?
    0
  • binco
    Actual profile settings and wanted configuration, so any user can manage email signature: Here is code: SMIMEEnableEncryptionPerMessageSwitch SMIMEEnablePerMessageSwitch SMIMEEnabled SMIMEEncryptByDefault SMIMEEncryptByDefaultUserOverrideable SMIMEEncryptionCertificateUUIDUserOverrideable SMIMESigningCertificateUUIDUserOverrideable SMIMEEncryptionEnabled SMIMESigningEnabled SMIMESigningUserOverrideable
    0
  • cPRex Jurassic Moderator
    Unfortunately I don't have a way to offer that on my end as it isn't built-in to the product. It would be best to comment on that feature request to let the developers know that people are still interested in having that option.
    0
  • binco
    The certificate I got is form cPanel Mail Client Automatic Configuration Scripts how do you manage it ? So I could provide more complete information for development team.
    0
  • cPRex Jurassic Moderator
    The SSL is part of cPanel's AutoSSL system, as that gets applied to every host associated with the domain.
    0
  • binco
    That's not an SSL certificate that's a .mobileconfig file the one that I showed before, could you maybe tag someone of the team involved in this ops?
    0
  • cPRex Jurassic Moderator
    Can you let me know how you got to the screens in the earlier screenshots that show the options greyed out in the client? Once I know that I can do some additional testing.
    0
  • binco
    That's Apple Configurator App Apple Configurator - Official Apple Support
    0
  • cPRex Jurassic Moderator
    Thanks for that information. Since cPanel doesn't create or issue S/MIME certificates we wouldn't have a way to let you manually apply those to the application as they just don't exist.
    0
  • binco
    I can confirm you that even without providing S/MIME certificates with this few lines in .mobileconfig file it will work fine, of course an user have to use its own certificate. SMIMEEnableEncryptionPerMessageSwitch SMIMEEnablePerMessageSwitch SMIMEEnabled SMIMEEncryptByDefault SMIMEEncryptByDefaultUserOverrideable SMIMEEncryptionCertificateUUIDUserOverrideable SMIMESigningCertificateUUIDUserOverrideable SMIMEEncryptionEnabled SMIMESigningEnabled SMIMESigningUserOverrideable
    0
  • cPRex Jurassic Moderator
    Is there something we can do on our end to improve this behavior for you? At this time, we just don't have any support in the product for that tool, and from what I am seeing it is unlikely we will be adding that.
    0
  • binco
    If you could investigate on how the .mobileconfig file is generated on your end. So I can help to implement this thing in your current workflow.
    0
  • cPRex Jurassic Moderator
    I reached out to the mail team and they confirmed there is not a good way to modify the templates to add or remove information. If you wanted to try and manually work around that limitation you could do something similar to the following: -create a custom directory outside of /usr/local/cpanel where your content will be stored, so it is not overwritten by the system -copy all the mobileconfig template files you want to work with from /usr/local/cpanel/base/backend to your custom directory -make your changes -create a post-upcp script to copy your modified files back to the /usr/local/cpanel/base/backend directory after each nightly update There may be additional work required for this as this is unsupported territory.
    0
  • binco
    Could you please provide me current template ?
    0
  • cPRex Jurassic Moderator
    All the template files are located in /usr/local/cpanel/base/backend/ so you'll find them there.
    0
  • binco
    Unfortunately, I don't have access to them right now, if you could provide them so I can see then discuss with IT team.
    0
  • cPRex Jurassic Moderator
    There isn't a great way for me to do that - it's a template file, so it also references other files in the same directory (much like a PHP script would look).
    0
  • binco
    I see, maybe I can share link to this conversation to IT team so maybe they could figure out. Maybe a zip of the folder could work just to have some confidence with files.
    0
  • cPRex Jurassic Moderator
    I tried including the zip here, but our Forums security didn't like that file. It would be best to just have them review the directory structure on a server.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post