>>Actually, there is a regedit "trick" for Win7 but that is beyond the ability >>of our customers to apply, and that doesn't help the older Apple device users.
You could build a .reg file with the trick inside, and then distribute it to your users. However it wont solve the Apple problem.
smime.p7s
Description: S/MIME Cryptographic Signature