I got some questions regarding S/MIME in Outlook and certificates in general. Some questions arrised about the possibility to digitally sign emails in my company. As I'm new to the topic I had to do some research first.
I found out that you can use the S/MIME option in Outlook to digitally sign your emails with it. The problem lies with the user-certificates. I only have a wildcard certificate available, which we use for webservices. I found out that it won't do good to use this certificate for S/MIME purposes since the recipient can't really verify the signature with the senders-email (don't know the exact statement) and therefore the email could be dropped/rejected. And I don't think it would be good to use only 1 certificate for all users in the company.
What are the best practices to get S/MIME certificates for about 100 users? Do I have to buy them or may I derive new certificates from the existing wildcard certificate if that's even possible? The certificates have to be trusted for internal and external users.
Thank you in advance!