---
id: os_exchange_SMIME_encryption_per_message_disable
title: Disable Encryption Selection Option per Mail Message
discussion: |
  The iOS device needs some specific configurations for the Exchange setup to meet the minimum requirements.

  The user _MUST_ not be enabled to have the option to decide wether to encrypt a mail communication. Encryption _MUST_ be the default.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95623-5
      ios_18:
        - CCE-94528-7
      ios_17:
        - CCE-93480-2
  bsi:
    indigo:
      ios_26:
        - ANNEX D (Section 5.6.1 - Mail)
      ios_18:
        - ANNEX D (Section 5.6.1 - Mail)
      ios_17:
        - ANNEX D (Section 5.6.1 - Mail)
platforms:
  iOS:
    '27.0': {}
    '26.0':
      benchmarks:
        - name: indigo_high
          severity: medium
    '18.0':
      benchmarks:
        - name: indigo_high
          severity: medium
    '17.0':
      benchmarks:
        - name: indigo_high
          severity: medium
    introduced: '12.0'
mobileconfig_info:
  - PayloadType: com.apple.mail.managed
    PayloadContent:
      - EmailAccountType: EmailTypeIMAP
      - SMIMEEnableEncryptionPerMessageSwitch: false
