1. Service Overview
ZTmail S/MIME Automation Service automatically handles the application, configuration, backup, and renewal of S/MIME certificates. No understanding of certificate technology or manual operation is required. Users only need to select the appropriate edition. The system handles everything automatically.
ZTmail, an email client combining automatic encryption with autonomous AI integration. Based on S/MIME standards, it uses RSA certificates and interoperable encrypted email communication with all email clients worldwide. The open AI platform allows users to connect independently to any AI model.
2. S/MIME Automation Service Workflow
ZTmail S/MIME Automation Service automatically handles the complete certificate management process:
For users, everything happens automatically in the background. There is only one action: click “Request Certificate”. This authorizes the automated process rather than adding an extra task. One click starts the process; the system handles everything.
3. Three Product Editions
ZTmail S/MIME Automation Service provides three product editions to meet different user needs. Once an edition is selected, the system automatically configures the corresponding certificates.
The edition determines the certificates, and the certificates are configured automatically. Users only need to select the appropriate edition; ZTmail App automatically applies for, configures, and renews the corresponding certificates.
4. Trusted Identity Edition — Three Sub-Products
The Trusted Identity Edition is designed for senders who want ZTmail App to display their trusted identity level to recipients when an email is received. It is divided into three sub-products according to identity validation level. The higher the identity level, the higher the level of trust displayed to the recipient.
Notice: Trusted Identity validation is performed by selected independent professional identity verification providers. ZTmail does not store users' identity verification documents or supporting materials.
Users are purchasing “identity display eligibility,” not merely an identity certificate. The system uses automated, tamper-resistant digital signatures to present the sender's trusted identity to the recipient.
After the corresponding sub-product is selected, ZTmail App automatically applies for and configures the trusted-identity signing certificate at the selected level.
5. Global Ecosystem Edition — Two Certificate Strategies
ZTmail App provides two trust models within this Edition. Both provide a Public CA-issued MV certificate for global S/MIME interoperability. The key difference is who issues the IV / OV / SV identity certificate.
One Product. Two Trust Models. One Optimized Certificate Strategy.
Global Trust
Notice: Identity validation is performed by selected public CA, ZTmail does not store users' identity verification documents or supporting materials.
Optimized — Global Trust MV + ZTmail Trust IV/OV/SV
Notice: ZTmail Identity validation is performed by selected independent professional identity verification providers. ZTmail does not store users' identity verification documents or supporting materials.
The standard edition uses Public CA-issued MV / IV / OV / SV certificates, providing globally trusted identity. The Optimized option combines a Public CA-issued MV certificate with ZTmail-issued IV / OV / SV identity certificates, providing global interoperability at a lower certificate cost for users who primarily rely on the ZTmail Trust Domain.
Users only need to select one edition. ZTmail App automatically applies for and configures certificates, with no user intervention.
6. Technical Architecture
ZTmail adopts an integrated client-cloud zero-trust architecture based on minimizing client dependence on the cloud:
- Private keys never leave the local device: the client generates keys locally and submits only a CSR to automatically request a certificate. Private keys never leave the device.
- Automated certificate issuance: after the ZTmail Cloud CA system receives the user's CSR certificate request, it sends a verification code to the user's mailbox. ZTmail App intelligently identifies the validation email and, based on RFC 8823 and the Automated Certificate Management Protocol, automates issuance of RSA or SM2 algorithm S/MIME certificates.
- Automatic retrieval and deployment: ZTmail App automatically retrieves issued certificates and deploys them for use.
- User-controlled backup: confidential user data, including private keys, contacts, calendar items, and tasks, is automatically encrypted and backed up to the user's own mailbox and can be manually synchronized to ZTmail App on other devices.
7. Get Started Now
Users do not need to understand certificates, only need to choose the service edition that suits you.
- Individuals / SMBs → Choose the Free Edition or Trusted Identity Edition, download ZTmail App, and enable automatic encryption with one click.
- Medium and large enterprises → Choose the Global Ecosystem Edition, or deploy ZTmail Gateway, and achieve fully automated encryption with no changes to the existing email environment.
Download ZTmail App | Learn more about the ZTmail S/MIME Automation Gateway
8. Global Ecosystem Edition — Certificate Strategy Details
Standard — Global Trust + Globally Trusted Identity
The Standard Edition uses an international Public CA for both mailbox validation and identity validation.
- RSA MV certificate — International Public CA
- RSA IV / OV / SV certificate — International Public CA
- Global S/MIME interoperability
- Globally trusted identity validation
- T1 / T2 / T3 / T4 Trusted Identity display in ZTmail
Optimized — Global Trust + ZTmail Trusted Identity
The Optimized Edition combines an international Public CA-issued RSA MV certificate with ZTmail CA-issued RSA IV / OV / SV identity certificates. It provides global S/MIME interoperability while reducing identity certificate costs for users who primarily rely on the ZTmail Trust Domain.
- RSA MV certificate — International Public CA
- RSA IV / OV / SV certificate — ZTmail CA
- Global S/MIME interoperability
- T1 / T2 / T3 / T4 Trusted Identity display in ZTmail
- Optimized certificate cost through ZTmail's selected CA supply
ZTmail Optimized Certificate Pricing
ZTmail negotiates volume pricing with selected Certificate Authorities and passes competitive certificate costs to users through our automated certificate service.
The prices shown on this page apply to ZTmail's selected CA service.
Prefer another Certificate Authority? Choose from available CAs through AutoCert Marketplace. Pricing is determined by the selected CA and certificate type.