# Set up your S/MIME certificate on Android

Open the account's settings in the XgenPlus app, go to End-to-end encryption and tap Fetch certificate from server. When it succeeds, turn on Enable S/MIME certificate. You can then sign and encrypt mail in Compose. The certificate is issued through your organisation's XgenPlus setup.

## How to set up your S/MIME certificate on Android

1. Open the account's settings and go to **End-to-end encryption**.
2. Under **S/MIME certificates**, tap **Fetch certificate from server**.
3. Wait until the screen says the certificate is available.
4. Turn on **Enable S/MIME certificate**.
5. Optionally turn on **Digitally sign outgoing mail** or **Encrypt outgoing mail** to use them by default.

## When to use it

> Priya's organisation issues S/MIME certificates. She fetches hers on her phone once, switches S/MIME on and then signs mail from Compose.

## Options

| Option | What it does |
|---|---|
| **Enable S/MIME certificate** | Master switch. Turning it off also turns off signing and encryption. |
| **Digitally sign outgoing mail** | Signs mail by default. |
| **Encrypt outgoing mail** | Encrypts mail by default. |
| **Import recipient certificate** | Adds a colleague's or partner's public certificate. |
| **Manage recipient certificates** | Lists and removes them. Removing one stops encrypted mail to that person. |
| **Export public certificate** | Saves your public certificate for sharing. |
| **Remove S/MIME certificate** | Deletes the certificate from this phone. |

## Good to know

- The certificate is set by your organisation. This page covers XgenPlus accounts.
- Fetching needs internet.
- Removing a certificate means signing, encryption and reading old encrypted mail stop until you fetch it again.

## Common questions

**Why does fetching the certificate fail?**

The app tells you the reason, for example no certificate has been issued, signing or encryption is not allowed for you, or the certificate is not valid right now. Ask your administrator.

**What other S/MIME actions are there?**

You can view the certificate details, export the public certificate, and remove it from the phone. A removed certificate can be fetched again. You can also import recipient certificates and trusted certificates.


Source: https://docs.xgenplus.com/mobile/android-smime-certificate/