Class C – Group mailbox certificates
Here you will find information on the class C group mailbox certificate.

Description
Group mailboxes support organisational units in handling their business processes (eGovernment). They are primarily used for the encrypted exchange of data as part of public service dealings between citizens and public administrations.
In technical terms, they are soft certificates that can be installed on clients. To enable the certificates to be used on the PrivaSphere or IncaMail platform as well, the certificates offer encryption, signature and authentication functions.
Validity
- Group mailbox certificates are valid for 3 years.
- The customer is responsible for certificate renewal, and this must be requested in the same way as initial issuance (Submission mailbox).
Publication
- The authorities themselves are responsible for publication and installation.
- In addition/as an alternative, you can request the Swiss Government PKI to publish the public key and the contact address on the www.pki.admin.ch/eingabe webpage.
Ordering
- The Swiss Government PKI checks the validity of the email address in the request, issues the certificate and publishes the associated public key in the Federal Administration's AdminDirectory.
- The requester receives the P12 (certificate and key) via encrypted emails.
- The SG PKI does not archive any private keys for group mailbox certificates. The responsibility for archiving these lies with the customer.
- Please place your requests and orders using the appropriate DWP.
- If you do not have the appropriate authorisation, please contact your superuser in your office or MAC-Manager@BIT.admin.ch and send the following details:
- Name of the mailbox
- Address of the mailbox
- Owner of the mailbox
- Mail address of the owner
You can find more information on requesting special «submission mailboxes» under Submission mailbox.
Renewal
For renewing a group mailbox certificate, the procedure is the same as for initial issuance (Submission mailbox).
Revocation
- Please submit your revocation request using the appropriate DWP.
- If you do not have the appropriate authorisation, please contact your superuser in your office or MAC-Manager@BIT.admin.ch and send the following details:
- Name of the mailbox
- Address of the mailbox
- Owner of the mailbox
- Mail address of the owner