You can make a difference in the Apple Support Community!

When you sign up with your Apple Account, you can provide valuable feedback to other community members by upvoting helpful replies and User Tips.

Looks like no one’s replied in a while. To start the conversation again, simply ask a new question.

Apple Mail - Email Certificate: Untrusted Signature

When I send emails to other people, they are getting a notice that my S/MIME certificate is an "Untrusted Signature." I've already gone round and round on this. My hosting provider says it's not them, not their problem, "you have to talk to Apple."


I found what looked like a solution to a similar problem here on the Apple Discussions Board, and followed the instructions, and it did not fix the problem. The problem persists. I HAVE TO FIX THIS. I am a freelancer, and I use this email address for professional communications.


Posted on Jan 4, 2024 4:20 PM

Reply

Similar questions

16 replies

Jan 4, 2024 7:39 PM in response to Chris Grayson

Chris Grayson wrote:

I have no idea what any of this means. Until this incident, I'd never heard of a S/MIME certificate in my life, and I've been on email since the 90s.

I don't know what an "intermediate certificate" is.

I'm just trying to send emails.


If you’ve never heard of S/MIME, then you’ve somehow gotten a certificate loaded and sending enabled.


If your intent is to not send encrypted mail messages, then maybe disable sending those by default.


See: Use S/MIME to send and receive encrypted messages in the Mail app in iOS - Apple Support



Jan 5, 2024 5:52 PM in response to Chris Grayson

The original posting looked like an iPhone screenshot, and no platform was mentioned.


You or someone else with access to this Mac have previously installed a personal certificate, or potentially have a certificate present on a connected security key.


Do NOT delete any certificates located during the following


Do you have a security key (USB-A or USB-C device) installed in your Mac?


Do you have an identity preference selected in Keychain?

Create an identity preference in Keychain Access on Mac - Apple Support


Jan 5, 2024 7:16 PM in response to Chris Grayson

Chris Grayson wrote:

> Do you have an identity preference selected…

Yes.

> …in Keychain?

I guess this is stored in Keychain.…


Did you check for any email-associated certificates (not?) present in Keychain, per the provided link?


I have two accounts. I think I see where this is headed.

It looks like THIS is probably causing the problem?


Family Sharing is away for using the apps and subscriptions from two Apple IDs.


Family Sharing is independent of a per-user identity setting.


And no, Apple won’t merge Apple IDs.


Jan 5, 2024 8:37 PM in response to Chris Grayson

Okay, and to confirm, you have no externally-connected identity devices present?


With no certificate identities and no identity devices, there shouldn’t be any reason to even activate S/MIME here.


Which leads to the possibility of some sort of corruption related to that login and mail.


Or maybe there’s something screwy with the mail server you’re sending to, or via.


Is this a private organization’s own mail server?

Jan 5, 2024 1:32 PM in response to MrHoffman

THANK you so much for assisting me.


The information on that support page appears to be dated. I have the latest MacOS 14.1.1, and it appears slightly differently… provided I'm following correctly.


Screenshot from link:


So I assume I would just do the reverse to turn encryption off?


  1. Open "Settings app" …? Presumably that means the "System Settings" app (best to always use the exact name, but ok)…


2. Chose "Mail > Accounts" there's nothing in Systems Settings called "Mail" and then "Accounts" but there are "Internet Accounts" where mail accounts are found (see image).


…continued below…



3. I'm in the email account. I see nothing anywhere that says "Advanced" settings. I click on "Details…" and it shows:





OR … Am I looking in the wrong place?



.

Jan 5, 2024 6:53 PM in response to MrHoffman

> The original posting looked like an iPhone screenshot, and no platform was mentioned.


I explained that other people were getting errors when they received my emails. I thought it was clear that this was an error that someone sent me as a screenshot.


> You or someone else with access to this Mac have previously installed a personal certificate,

> or potentially have a certificate present on a connected security key.


Ok.


> Do NOT delete any certificates located during the following


Ok.


> Do you have a security key (USB-A or USB-C device) installed in your Mac?


No.


> Do you have an identity preference selected…


Yes.


> …in Keychain?


I guess this is stored in Keychain.

I have two accounts. I think I see where this is headed.


Apologies for the long explanation below, but the next obvious question is going to be to ask why I have two Apple IDs, so I'm just going to get this all out of the way…


——————————————————————————————————


Decades ago I got an early iPod Gen 3 (2003).

I was set up with an Apple ID.




For a long time I carried three devices:

An iPod, a Motorola Razr, and a PalmPilot… but I digress.


Then my first iPhone was an iPhone 4 (2011).



When I went to my appointment at the Apple Store, they just set up a NEW Apple ID. The hard drive the iPhone 4 could not handle all the songs on my then current (later) iPod. So it was only many, many years latter, when iPhone hard drives were larger, that I went to move all my music from my iPod to my iPhone (2014 I think).


ONLY THEN did I realize that the two Apple IDs I'd been set up with could not run on the same phone, at the same time. So I would have to switch back and forth between two IDs, to use my Apps (bought on my iPhone Apple ID) and my Music (bought on my iPod Apple ID). This was a HUGE pain in the rear.


Over the years, I would periodically ask if Apple was ever going to allow merging two Apple IDs into one. The answer was always NO. Apple does not, and will never allow two Apple IDs to be combined into one.


Sooo… about a year ago, an Apple tech suggested I could solve the problem:

I could set up one Apple ID as the Main account on a "Family Plan," and set up the other Apple ID as a family member, and I could share all my songs. So some devices are default to one account, some to the other, but they're both sharing music and apps.


It looks like THIS is probably causing the problem?

Jan 6, 2024 2:51 PM in response to MrHoffman

Firstly— Thank you so much for taking the time to assist.


I was sitting here writing a reply to you from this post from last night, and decided to test it, and on my **desktop**, the error was gone!


I didn't know why, or what fixed it.


But now the emails were coming in as Signed,

with a checkmark security seal, and everything (see image)… [not so fast]



When I went to bed last night, they were still giving errors. 👀

I have no idea. Maybe something took time to propagate?


-----


Then, my enthusiasm dropped.


I checked the EXACT SAME EMAIL from my iPhone (sent to myself), from the same email address, and it has the Untrusted Signature warning!!!




-----


Same email account—same exact email, even—simply opened on another device.


WTF?


Jan 4, 2024 4:47 PM in response to Chris Grayson

Your certificate may be issued by an organization that does not have its certificate authority recognized globally.


If you know your certificate issuer's signing certificates, try to send it to one of your recipients and ask them to install it on their computer, and then try sending them an email -- the email signature should no longer be tagged as "untrusted".


If you can afford it, refrain from signing the email using your certificate, then it won't be validated by the recipients' mail server.


good luck.

Jan 5, 2024 4:47 PM in response to Chris Grayson

Thank you.


Recipients of my emails have pointed out to me that they get an all-caps, red-type scare alert:


ALERT: ** UNTRUSTED SIGNATURE **


…at the header of every email they get from me.


Sometimes with additional copy like:

🛑 'The signature on this email is not authenticated, and the email may have been altered in transit.'


I fear some may be filtering into junk mailboxes (?), to never be seen at all. I'm pitching for new project work right now. Solving this is existential, and NOTHING IS WORKING.


In your prior reply, you suggested to simply turn off encryption.

Is not having my emails encrypted going to trigger a different scare alert?

ALERT: ** THIS IS AN UNENCRYPTED MESSAGE **

…or some such?


Because if I can just figure out how to turn encryption off, that may be the best immediate solution.

Apple Mail - Email Certificate: Untrusted Signature

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.