Own Certificate Authorities

Create own certificate authorities for internal S/MIME certificates.

Conbool allows you to create and manage your own certificate authorities (CAs) to issue self-signed certificates internally.
This is particularly useful for test environments, isolated systems, or organizations that want to build an internal chain of trust.

Create Your Own CA

Open S/MIME → Certificate Authority icon in the menu.
Select "Own MPKI".
Press "+".
Fill in general information and cryptographic settings.
Confirm the creation.
The new CA then appears in the overview and can be used for certificate issuance.

Issue Certificates with Your Own CA

Select the certificate authority icon again in the S/MIME section.
Select the previously created own CA.
Click "Open".
Click "+".
Enter email address, name, password, and validity period.
The certificate is issued immediately and is available in the system.

Usage and Limitations

Self-signed certificates are not automatically recognized as trusted by external recipients.
For internal communication within the same tenant or with trusted partners, they can be used without any issues.
Own CAs can be exported if needed (root certificate in .cer format) to install them in clients or gateways.

Recommended:
Use internal CAs only for tests, internal communication, or isolated systems.
For productive, external communication, official certificates via SwissSign or D-Trust should be used.