Making Certificate Encryption Easier

Digital certificates, essential for establishing trust, have become a logistical headache at scale. Enter Echoworx. By leveraging DigiCert’s API, it generates S/MIME credentials on demand—no pre-existing private key required. In a world where speed and security are non-negotiable, this is how you stay ahead.

Key Benefits

Auto-generated S/MIME credentials

By leveraging DigiCert’s API, Echoworx automatically generates credentials for senders without private keys.

  • Seamlessly integrated with your DigiCert account, Echoworx automates S/MIME certificate creation, cutting IT workload and streamlining operations.
  • For organizations plagued by high employee turnover, this eliminates manual onboarding steps, minimizing errors and inefficiencies.
  • Outbound encrypted emails and notifications are signed with trusted S/MIME credentials, guaranteeing secure, reliable corporate communication.

Integrated Solution

Combine DigiCert’s API with Echoworx’s email encryption service, no pre-existing private keys required

For organizations grappling with high employee turnover, the Echoworx Encrypted Mail Gateway (EMG) automates the creation of trusted sender credentials, eliminating the inefficiencies of manual key management.

Every encrypted email is authenticated with valid S/MIME credentials tied to the sender’s corporate address, ensuring security and trust.

Technical Note

Domain Ownership Validation: Certificates can only be issued for email domains you own and pre-validate with DigiCert. External domains like Gmail or Outlook are not supported for trusted credentials.

Overview of Echoworx S/MIME Process

Overview of Echoworx S/MIME Process

Configuring your DigiCert Account

An active DigiCert One subscription is required

Step 1: Configure
Set up your DigiCert account. Create your certificate profile for REST API. Obtain your API key.

Step 2: Setup
During onboarding, Echoworx will configure your tenant, profile, and set up your signing mode.

Step 3: Enable
Echoworx activates S/MIME encryption in your console.

Step 4: Test
Validate your profile.

DigiCert + Echoworx

Customer success story

The Challenge

A leading private banking and asset management firm faced the pressing need to automate certificate management for its encryption platform users. The manual process of issuing and renewing certificates was inefficient and incompatible with the demands of modern security. Integration with an external PKI following strict standards (e.g., RFC2797) was essential.

The Solution

By deploying Echoworx’s encrypted cloud service alongside DigiCert’s API, the firm achieved seamless automation. Credentials were instantly generated for any sender—even those without pre-existing private keys—allowing real-time processing of every S/MIME message.

The Results

Instant credential creation ensured all emails were securely signed by senders, streamlining communication and driving user adoption. The automated system simplified certificate management, enhanced efficiency, and reinforced the organization’s cybersecurity framework.