Multiple Exchange accounts and client certificates not working...?

Question

Level 1

0 points

Multiple Exchange accounts and client certificates not working...?

Hi all,

I have a problem with my company iPad's. I'm trying to configure 2 Exchange accounts with certificate based authentication on my iPad with the iPhone config utility. For that i have created 2 client certificates.

When I configure just 1 mailbox, does not matter which one of the 2, with the iPhone config util, it al works ok with client authentication.

When I configure 2 mailboxes, on the iPad, without client certificate authentication it al works ok.

When I configure 2 mailboxes with the 2 client certificates with the iPhone config util, both exchange accounts have the same mailbox. When I configure for example mailbox Jim and Harry with the corresponding certificates and I load it into the iPad. The exchange account of Jim has Jim his mailbox, but the exchange account of Harry also has the mailbox of Jim. And sometimes it is vice versa.....

Can anybody help me in this, we are using 4th gen iPad with MS Exchange ActiveSync 2003 SP2 en MS Forefront TMG with Kerberos delegation.

Please advice.

Cheers,

Eddy

iPad (4th gen) Wi-Fi + Cellular (MM), iOS 6.0.1

Posted on Jan 11, 2013 4:55 PM

Reply

Answer 1

Alex_Z

Level 1

0 points

Feb 18, 2013 8:53 PM in response to EddyW

I can confirm that i am experiencing the exact same behaviour in more than one environment.

Any solutions?

Reply

Answer 2

IhalpsU

Level 1

0 points

Feb 18, 2013 9:35 PM in response to EddyW

Hi Eddy,

I have the feeling that the SSL connection after being established is only using the first authenticated certificated to connect to the exchange server.

Have you had a look over this Microsoft page:

http://technet.microsoft.com/en-us/magazine/ff472472.aspx

Are you able to test 2 accounts on one pad in a test environment preferably with SSL inspection off?

Do you have any information in the Forefront logs of the users being authenticated from the iPad? Or is one user authenticated twice?

Cheers,

IhalpU

Reply

Answer 3

EddyW Author

Level 1

0 points

Feb 18, 2013 11:54 PM in response to IhalpsU

Problem is already solved. We are using a maximum of 3 mailboxes per iPad. So I have created 3 listeners in TMG. Every listener it's listening to the same ip behind our nokia firewall but i use a different port for every listener.

Thanks!!

Reply