Get started with ISEC7 MAIL and your YubiKey
Hardware-backed S/MIME for mobile email. Two steps and you can sign and encrypt mail on iOS and Android with the certificate stored on your YubiKey, independent of your MDM vendor.
Before you begin: the Yubico Authenticator app is required
ISEC7 MAIL does not talk to the YubiKey directly. The Yubico Authenticator app sits in between and exposes the YubiKey PIV store to ISEC7 MAIL, on iOS through the system CryptoTokenKit interface. Install it first, otherwise S/MIME signing and encryption have nothing to connect to.
What you need
- A YubiKey with your S/MIME certificate in the PIV slot
- A smartphone running iOS or Android
- The Yubico Authenticator app, which acts as the broker
- The ISEC7 MAIL app
Install the Yubico Authenticator app
- Download Yubico Authenticator from the Apple App Store (iOS) or Google Play (Android).
- Open it and check that your YubiKey is recognised, plug it in via USB-C / Lightning or hold it to the phone over NFC.
- Leave the app on the device. It is what hands the PIV certificate to ISEC7 MAIL for S/MIME.
Install ISEC7 MAIL and set up S/MIME
- Download ISEC7 MAIL from the Apple App Store or Google Play.
- Add your corporate mailbox and finish the normal account setup.
- Open the S/MIME settings and pick your certificate from the YubiKey PIV store, reached through the Yubico Authenticator app.
- Turn on Sign, and Encrypt if you need it.
- Send yourself a signed test email to check it works.
More than a mobile email client
ISEC7 MAIL secures mail, calendar, contacts, and public folders with modern encryption and on-device classification. Functional and substitute mailboxes work without shared passwords, on iOS and Android, and none of it depends on your MDM vendor.
Questions about setup?
If a step does not behave the way it should, our team will help you get ISEC7 MAIL and your YubiKey working together.
Catalog use case: Security · Smart Card / PIV