Microsoft Cloud PKI launches as a new addition to the Microsoft Intune Suite

owime 

There are 2 certs involved with S/MIME .. a signing cert and an encryption cert.   I wont go into all the details related to S/MIME here.. Much too long a response 🙂

Intune supports S/MIME with the Outlook app using App configuration profiles.  In addition to other mail clients -  more details here: Sign and encrypt email using S/MIME - Microsoft Intune | Microsoft Learn

For the signing cert – Both PKCS and SCEP Intune config profiles can be used.  Cloud PKI can be used for the SCEP config profile if desired.

For the encryption cert – you need to use PKCS cert profile .. as this cert needs to be available on all devices wishing to read encrypted email.  Intune supports the importing of these encryption certs – see:  Use imported PFX certificates in Microsoft Intune | Microsoft Learn

Hope this helps!