Announcement

Collapse
No announcement yet.

Help needed to setup ESA with Cert Authentication

Collapse
X
  • Filter
  • Time
  • Show
Clear All
new posts

  • Help needed to setup ESA with Cert Authentication

    I need help setting up EAS with certificate based authentication. Currently running a single server exchange setup with SSL & Form based authentication. I can turn off FBA if that's much of an issue. I'm also using my own CA on the network, so possibly looking to integrate instead of buying root certificates from external CA's.
    I'm looking for a step by step guide to do this setup. I tried looking up for microsoft's 'msfpdep guide' on technet but that link is dead now. There are various articles on google but they conflict with each other. Could someone here help me with this guide please? Any help would be higly appreciated.
    Last edited by crazyleo_EA; 18th July 2008, 00:20.

  • #2
    Re: Help needed to setup ESA with Cert Authentication

    ESA? Do you mean EAS? Exchange ActiveSync?

    If you do, then the first thing I would suggest is buying a certificate. You will save yourself so much hassle by doing so. The certificate will also work for OWA and Outlook RPC over HTTPS.

    As for setup guide, I have one here: http://www.amset.info/exchange/mobile-setup.asp
    That page also includes a link to my guide on setting up this feature while still having forms based authentication enabled on the /exchange virtual directory.

    Simon.
    --
    Simon Butler
    Exchange MVP

    Blog: http://blog.sembee.co.uk/
    More Exchange Content: http://exchange.sembee.info/
    Exchange Resources List: http://exbpa.com/
    In the UK? Hire me: http://www.sembee.co.uk/

    Sembee is a registered trademark, used here with permission.

    Comment


    • #3
      Re: Help needed to setup ESA with Cert Authentication

      Originally posted by Sembee View Post
      ESA? Do you mean EAS? Exchange ActiveSync?

      If you do, then the first thing I would suggest is buying a certificate. You will save yourself so much hassle by doing so. The certificate will also work for OWA and Outlook RPC over HTTPS.

      As for setup guide, I have one here: http://www.amset.info/exchange/mobile-setup.asp
      That page also includes a link to my guide on setting up this feature while still having forms based authentication enabled on the /exchange virtual directory.

      Simon.
      Thanks for your input. I have already been to the website link you provided. however it doesn't clarify what steps are needed for certificate based authentication. I also know how to create an alternative virtual directory to redirect OMA and EAS request. However i'm not sure on the certification implementation part for which i need a step-by-step guide. I'd really appreciate if i could get any help here.
      BTW I'd really want to try and get our own certificates to work. If i get into much trouble I'll look into external root certificates.
      Last edited by crazyleo_EA; 18th July 2008, 00:39.

      Comment


      • #4
        Re: Help needed to setup ESA with Cert Authentication

        any help.. guys??

        Comment


        • #5
          Re: Help needed to setup ESA with Cert Authentication

          http://support.microsoft.com/kb/816794

          Comment


          • #6
            Re: Help needed to setup ESA with Cert Authentication

            The reason there is little assistance is that certificate authentication is hardly used now. I don't think I have even been asked about it for at least two years. The main reason being the hassle involved with setting it up and then maintaining it. To do it correctly isn't straight forward to ensure the security of the network - the major problem being the need to have the root offline, which basically means a machine switched off somewhere.

            Tokens are more common now, although support on mobile devices for those is mixed, particularly with push.

            Simon.
            --
            Simon Butler
            Exchange MVP

            Blog: http://blog.sembee.co.uk/
            More Exchange Content: http://exchange.sembee.info/
            Exchange Resources List: http://exbpa.com/
            In the UK? Hire me: http://www.sembee.co.uk/

            Sembee is a registered trademark, used here with permission.

            Comment

            Working...
            X