Mail Gateway Integration X: User Based Certificate Authentication

Last updated
Save as PDF

Requirements

Accomplished Mail Gateway Integration Parts I - VI
Accomplished Certification Authority Integration
Exported Root CA Certificate
Exported Intermediate CA Certificate (optional)

Import Root CA Certificate

Open certlm.msc on your Mail Gateway server
Expand Trusted Root Certificate Authorities
Right-Click Certificates
Select All Tasks
Select Import
Click Next
Click Browse
Select your Root CA Certificate
Click Next
Click Next
Click Finish
Confirm with Yes
Close with OK

Import Intermediate Certificate (Optional)

Expand Intermediate Root Certificate Authorities
Right-Click Certificates
Select All Tasks
Select Import
Click Next
Click Browse
Select your Intermediate CA Certificate
Click Next
Click Next
Click Finish
Confirm with Yes
Close with OK

Enable Certificate Authentication

Open Internet Information Services (IIS) Manager
Expand your Server
Expand Sites
Click on Default Web Site
Double Click on SSL Settings
Enable Require SSL
Change Client certificate to Require
Click Apply
Restart IIS

Check Connection

Try to open the following URL from a workstation or from a mobile device
- https://smg.imagoverum.com/Microsoft-Server-ActiveSync/HealthCheck.htm
You should be prompted for a certificate
Enroll a device and assign an Tag which will distribute a certificate to the device
On the mobile device try to open e.g.
- https://smg.imagoverum.com/Microsoft-Server-ActiveSync/HealthCheck.htm
You should be prompted for a certificate
Select the user certificate
You should now see the same results as described in Mail Gateway Integration VI: Connection Check