Hi, @Jacky Lai
Yes, using S/MIME to encrypt e-mail communication between the Domino server and M365 is a viable approach. This involves the following steps:
- Make sure that both your Domino and M365 users have a valid S/MIME certificate from a trusted certificate authority.
- In M365, you need to publish the S/MIME certificate to a user profile in Azure Active Directory. Configure M365 to send and receive encrypted and signed email using S/MIME.
- Use Azure AD Connect or a similar tool to synchronize the appropriate user attributes, including S/MIME certificates, from Azure Active Directory to the local Active Directory (AD). Ensure that the attributes used to map the S/MIME certificates stored in Azure AD to the correct attributes in the local AD.
- Configure your Domino server to query your local LDAP server for S/MIME certificates. Ensure that your Domino server can access and use the S/MIME certificate from the LDAP server to encrypt and decrypt e-mail.
More information can be found Configure S/MIME in Exchange Online | Microsoft Learn
If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".