Exchnage 2016 Active Sync Certificate based and user password authentication

Question

Hi,

Is there a way to configure both authentication with user certificates and authentication with username and password for the ActiveSync-VirtualDirectory only? (connection of mobile devices, iphones). I would like to migrate iphones to intune authenticated users with SCEP certificates. I was able to get certified authentication to work on a test exchange node but cannot enable both. For me it is crucial for migration.

A thousand thanks

Answer 1

I dont think that is possible since the supported documentation disables other authentication methods when you enable certificate based auth:

https://learn.microsoft.com/en-us/exchange/plan-and-deploy/post-installation-tasks/configure-certificate-based-auth?view=exchserver-2019#step-4-use-the-exchange-management-shell-to-disable-authentication-other-authentication-methods-on-the-outlook-on-the-web-exchange-admin-center-and-activesync-virtual-directories

Answer 2

@Marco Milone

The function of “certificate based authentication” is used to replace username and password:

For IIS, if one authentication works, it will not use another one. So, for one Exchange organization, you need to make users use the same authentication.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

---