It's recently been brought up here the possible need to encrypt email
going out over the internet.

I'm wondering the easiest / best way to do this. I've looked in the
documentation about using s/mime encryption, but this might be a
massive PITA with users having to keep track of certs on whatever
machines they use to access their GW account. I was told to bring this
up in this forum and ask about at the gwia level.

We have a cert we purchased from digicert. It's a wildcard for our
email/web domain. I use this cert on our GW webaccess server. Could
this same cert be used on my gwia?