ActiveSync & CA (Full Version)

All Forums >> [Microsoft Exchange 2007] >> Mobility



Message


mahermcse -> ActiveSync & CA (9.Jun.2008 6:30:01 AM)

    hi
Should I use CA [ Certificate Authority ] with ActiveSync or it's optional ,
and how could I install  it on mobile  ?
please help me




mark@mvps.org -> RE: ActiveSync & CA (9.Jun.2008 7:37:46 AM)

You should really use a certificate to secure the messages going between server and client. Whether you install your own CA to do this or whether you buy a certificate is entirely up to you. If you don't know how to implement one or manage the infrastructure or indeed have no real need of a CA for anything else you're probably as well just buying a cert.




Sembee -> RE: ActiveSync & CA (9.Jun.2008 6:52:09 PM)

If you don't use a certificate then your username and password is going across the internet in the clear, frequently. You also have to open port 80 on your firewall.
You should already have a commercial certificate in place for your Exchange 2007 deployment. If you don't then you need to get one. Choose the right certificate and you will have nothing else to install on the majority of Windows Mobile devices.

A lot of people seem to be having problems with the preferred SAN/UC certificates, so I have blogged a brief how to on the process:
http://www.sembee.co.uk/archive/2008/05/30/78.aspx

My preference is to use a commercial SSL certificate for external facing interfaces that are being accessed over the internet by devices that are out of my control. If I want to use SSL internally then an internal CA will do the job.

Simon.




Page: [1]