| Public | Private | Public | Private | Public | Private | Public | Private |
| Digital signature trusted by email apps automatically | Y | | Y | | Y | | Y | |
| Digital signature trusted by email apps requires root cert import | | Y | | Y | | Y | | Y |
| Dual use and individual use digital signature & encryption key | Y | Y | | Y | Y | Y | | Y |
| Harvest existing Microsoft CA issued certs and reissue replacement from Cloud CA | Y | Y | | | | | | |
| Separate digital signature & encryption key, non-repudiation of digital signature | Y | Y | | Y | | | | Y |
| Encryption key archival with self-service web portal enrollment. In the event encryption key destroyed, can recover to decrypt existing emails | Y | Y | Y | Y | | | | |
| Encryption key archival with all enrollment methods | 1Q19 | 1Q19 | | Y | | | | Y |
| Encryption key history provided to mail app, to be able to decrypt emails using an older key | 1Q19 | 1Q19 | | Y | | | | Y |
| Automatic certificate enrollment for Windows outlook | Y | Y | | Y | Y | Y | | Y |
| Enrollment to MDM email applications using SCEP for auth & signing Intune, AirWatch, Blackberry, Mobile Iron, IBM, Citrix | Y | Y | | Y | Y | Y | | Y |
| Automatic certificate enrollment for Apple Mail on iOS & optionally automatically provision email account in apple mail with SMIME configured. | 1Q19 | 1Q19 | | | | | | |
| Automatic certificate enrollment for Samsung Mail & optionally automatically provision email account in Samsung mail with SMIME configured. | 1Q19 | 1Q19 | | | | | | |
| Automatic certificate enrollment for Nine Mail | TBD | TBD | | Y | | | | |
| Automatic certificate enrollment for Ciphermail | TBD | TBD | | | | | | |
| Automatic encryption certificate enrollment for Airwatch Boxer mail | In Progress | In Progress | | Y | | | | Y |
| Automatic encryption certificate enrollment for Blackberry Work mail | In Progress | In Progress | | Y | | | | Y |
| Automatic encryption certificate enrollment for Mobile Iron mail | In Progress | In Progress | | Y | | | | Y |
| Automatic encryption certificate enrollment for Citrix mail | TBD | TBD | | Y | | | | Y |
| Automatic certificate provisioning to Microsoft GAL, recipient using Exchange ActiveSync can automatically find recipient with no user involvement | 1Q19 | 1Q19 | | Y | | | | Y |
| Certificate enrollment for users via browser interface (often for external users) | Y | Y | | Y | | | | Y |
| Automatic configure Windows Outlook to use encryption & sign certificate(s) | 1Q19 | 1Q19 | | Y | | | | Y |
| API which allows secure email gateway to obtain encryption and sign key, to allow for content scanning of encrypted emails | 1Q19 | 1Q19 | | | | | | |
| Utility for company Admin to recover employee encryption key in the event employee has left company | Y for self service 1Q19 for other | Y for self service 1Q19 for other | | ProSvcs | | | | |
| Optionally host directory for certificates issued, to allow for sender’s in community to send emails to the enterprise. | On request | On request | | | | | | |
| Encryption key archive optionally located at customer premise | Planned for 2019 | Planned for 2019 | | | | | | Y |
