Hi James You need an Exchange specific Unified communications certificate. You want a certificate that supports Subject Alternative names. I can strongly recommend www.digicert.com. Check out the website and also check out the following link:
http://www.msexchange.org/articles_tutorials/exchange-server-2007/mobility-client-access/securing-exchange-2007-client-access-server-3rd-party-san-certificate.html If you have any questions feel free to drop a line either through the forum or directly Regards Peter Johnson I.T Architect United Kingdom:+44 1285 658542 South Africa: +27 11 252 1100 Swaziland: +268 442 7000 Fax:+27 11 974 7130 Mobile: +2783 306 0019 peter.john...@peterstow.com This email message (including attachments) contains information which may be confidential and/or legally privileged. Unless you are the intended recipient, you may not use, copy or disclose to anyone the message or any information contained in the message or from any attachments that were sent with this email, and If you have received this email message in error, please advise the sender by email, and delete the message. Unauthorised disclosure and/or use of information contained in this email may result in civil and criminal liability. Everything in this e-mail and attachments relating to the official business of Peterstow Aquapower is proprietary to the company. Caution should be observed in placing any reliance upon any information contained in this e-mail, which is not intended to be a representation or inducement to make any decision in relation to Peterstow Aquapower. Any decision taken based on the information provided in this e-mail, should only be made after consultation with appropriate legal, regulatory, tax, technical, business, investment, financial, and accounting advisors. Neither the sender of the e-mail, nor Peterstow Aquapower shall be liable to any party for any direct, indirect or consequential damages, including, without limitation, loss of profit, interruption of business or loss of information, data or software or otherwise. The e-mail address of the sender may not be used, copied, sold, disclosed or incorporated into any database or mailing list for spamming and/or other marketing purposes without the prior consent of Peterstow Aquapower. No warranties are created or implied that an employee of Peterstow Aquapower and/or a contractor of Peterstow Aquapower is authorized to create and send this e-mail. -----Original Message----- From: James Bensley [mailto:jwbens...@gmail.com] Sent: 28 June 2010 11:56 To: MS-Exchange Admin Issues Subject: ActiveSync Certificates? Hey List, We're new to ActiveSync in our company. We have a single exchange2k7 SP1 server running MB, HT & CAS (no edge server). I am trying to set up certificate based authentication on a Windows Mobile 6.5 device (HTC Touch Pro 2). I am using the desktop ActiveSync software and according to this article (http://technet.microsoft.com/en-us/library/cc182295.aspx) I can browse certificates issued under my domain and install this onto my device, except we don't have any certificates deployed in the domain; how can I deploy a certificate and what sort of certificate should it be? (The Certification Authority MMC was not installed on our DC and so I had to set that up, hence we have no certificates deployed and need some guidance). Many thanks for reading. -- Regards, James. http://www.jamesbensley.co.cc/ There are 10 kinds of people in the world; Those who understand Vigesimal, and 9 others...?