Exchnage 2016 Active Sync Certificate based and user password authentication

Marco Milone 51 Reputation points


Is there a way to configure both authentication with user certificates and authentication with username and password for the ActiveSync-VirtualDirectory only? (connection of mobile devices, iphones). I would like to migrate iphones to intune authenticated users with SCEP certificates. I was able to get certified authentication to work on a test exchange node but cannot enable both. For me it is crucial for migration.

A thousand thanks

Exchange Server Management
Exchange Server Management
Exchange Server: A family of Microsoft client/server messaging and collaboration software.Management: The act or process of organizing, handling, directing or controlling something.
7,227 questions
{count} votes

2 answers

Sort by: Most helpful
  1. KyleXu-MSFT 26,201 Reputation points

    @Marco Milone

    The function of “certificate based authentication” is used to replace username and password:


    For IIS, if one authentication works, it will not use another one. So, for one Exchange organization, you need to make users use the same authentication.

    If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments