Deployment of digital signatures and certificates in an azure environment

Question

Hello folks!

I've been asked to implement personal certificates company-wide in order to digitally sign mails for internal and external verification. In a second step these certificates might be used to encrypt mails as well.

Now I'm not understanding the procedure at all and was hoping to find answers here.

We're using Itune for deployment in an Cloud-only (Azure) environment. So far we're not having a PKI platform or anything like that.

• How can I automatically issue certificates for all users?

--- Do I need an external PKI like digicert?

--- What roles / connectors do I need in Azure?

• How would I revoke and re-issue certificates that become obsolete?
• How can I deploy these certificates to the clients?

Thank you very much for every hint.

Kind regards

Lukas CNEXT

Answer 1

Have you seen the Azure Key Vault’s certificate management service?

• https://learn.microsoft.com/en-us/azure/key-vault/certificates/about-certificates
• https://learn.microsoft.com/en-us/azure/key-vault/certificates/certificate-scenarios