Digital Signatures (SMIME) in Marketing Cloud

How to enable Digital Signatures (SMIME)

Digital Signature activation requires a manual update made by our support team, so please submit a Case with Marketing Cloud support via the Salesforce Help Portal to make request it for your account.

When this feature is enabled, you can upload your key into Marketing Cloud and then attach that key to a delivery profile. The signature is generated and inserted into the body of the email at the time of the Send.
 

As an Administrator

1. Create and download your S/MIME certificate.*
   1. Note: Make sure to remember the PIN you create for installing your certificate.
2. Once your certificate is saved to your workstation, log in to Marketing Cloud and select your business unit.
3. Navigate to Email Studio, click the Admin tab.
4. In the folder tree on the left, click the + (plus sign) next to Data Management, and then select Key Management.
5. In the Key Management tool, click Create.
6. Under "Key Type", select the Certificate radio button.
7. In the "Name" field, enter a name for your certificate.
   1. Note: If your business unit uses multiple sender profiles, you should give your certificate a name that corresponds to the sender profile with which you intend to use it.
8. For the "Key" field, click Browse to locate and select the S/MIME certificate saved on your workstation.
9. In the "Passphrase" field, enter the PIN you created for your certificate.
10. Click Save.
11. On the Admin tab, under Send Management, select Delivery Profiles, and then click the delivery profile you want to use to send digitally signed email.
12. Scroll to the bottom of the screen, and then, under "SMIME", click the checkbox to select "Include SMIME detached signature using this certificate" and use the drop-down list to select your certificate.
13. Click Save.
    1. Note: Since the digital signature is intended to confirm who sent an email message, you should create and import a separate certificate for each sender profile your business unit uses. Your "Send From" email address must match the email address attached to your digital signature. Repeat the above steps as needed.
       
       

Note: S/MIME certificates are issued by third-party vendors. For steps to generate S/MIME certificates, please refer to your vendor's documentation.