Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1401
  • Last Modified:

Accepting Exchange 2010 ActiveSync Basic Authentication OR Certificate Based Authentication

Hey,

I would like to implement Exchange 2010 EAS Certificate Based Authentication along with still being able to use Basic Authentication. Reason being is we are testing CBA and a small subset of people will use it at first.  When configure CBA, Certificates need to be set to accept or require in the EAS properties of the CAS server along with unchecking Basic Authentication which would prohibit EAS from accepting the basic usernames and passwords. What is the best way of me trying to accomplish having both authentication methods work?  Would I need a second ActiveSync virtual directory, one with a URL pointing the virtual directory that accepts BASIC authenticaiton, and another URL pointing to a second virtual direction that accepts Certificates only?
0
digitalhitman00
Asked:
digitalhitman00
Advertise Here
  • 2
  • 2
1 Solution
 
Simon Butler (Sembee)ConsultantCommented:
That is probably the only way you can do it.
You can only ignore or accept client certificates.

You would need two web sites, two host names. The one with basic authentication should be left on the default web site.

However clients would need to be configured manually because you have no way of telling Exchange which clients use which address.

Simon.
0
 
digitalhitman00Author Commented:
Ok,  I just tried creating a second EAS website, but it yelled at me.  I tried running:

New-ActiveSyncVirtualDirectory -websiteName "EAS CBA" - Error: The web site doesnt Exist.
New-ActiveSyncVirtualDirectory  - Error, the AD Configuration for virtual directory 'Microsoft-Server-ActiveSync' already exists, please fremote this AD config manually.

I saw this listed: Only one Exchange ActiveSync virtual directory can exist in each Exchange ActiveSync website. Microsoft Site

Any ideas on adding a second eas instance on a computer that already has a first one?
0
 
Simon Butler (Sembee)ConsultantCommented:
I presume you have created the web site in IIS manager? Did you run IISRESET after doing so?

Is the name of the site exactly as you have put in the command?

You can only have one ActiveSync virtual directory per web site, but you can multiple web sites on the server.

Simon.
0
 
digitalhitman00Author Commented:
Ah, no I did not.  Ok I have to create a completely second website outside of the Default.  I think I get it now. let me try.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

More Information
  • 2
  • 2
Advertise Here
Tackle projects and never again get stuck behind a technical roadblock.
Join Now