locked
ActiveSync Authentication RRS feed

  • Question

  • Hi all,

    I'm having a problem getting Activesync working on one of my IAGs.  One of the devices is working fine, but the other device is having problems.  I compared the IAG configs for the ActiveSync trunk between the 2 and they are setup identically with the exception of IPs.  I get the messages below.  The iPad I'm testing with says the connection to server failed.  I use the same auth group for other trunks and they work fine.  I get the messages below.

    Warning 01/31/2011 09:57:36 24 ApplicationAuthenticationFailed"Application Authentication Failed Security"Security testsync(S)"testsync (S) Request failed, failed to reply to application's authentication request (HTTP 401 request). Trunk: testsync; Secure=1; User Name: <domain/user>; Application Name: Microsoft ActiveSync; Application Type: Activesync; Source IP: x.x.x.x; Session ID: 030CD8D9-8C5D-4FA4-89C7-F044A75AD453

    Information 01/31/2011 09:56:11 13 SuccessfulLogin"Successful Login Security"Security testsync(S)"testsync (S) The following user logged into trunk "testsync" (secure=1): User: <domain/user; Source IP: x.x.x.x; Authentication Server: ga; Session: 18A60341-8F03-464A-9761-3773A4E3A580.

    Thanks in advance.

    Monday, January 31, 2011 3:13 PM

Answers

  • Hi,

    I'm marking your question as answered, even though it hasn't been. It appears no one has been able to provide an answer. If the topic is still a concern, I would suggest you open a support case with Microsoft CSS, and an engineer will help you investigate the issue.


    Ben Ari
    Microsoft CSS UAG/IAG Support
    Sammamish, WA
    • Marked as answer by Erez Benari Tuesday, May 17, 2011 11:09 PM
    Tuesday, May 17, 2011 11:09 PM

All replies

  • ***Updated info from logs

    ** 02.02.11 10:03:16.218 INTERNALSITE:GENERAL T3476
    ERROR: Failed to access [https://x.x.x.x:443/Microsoft-Server-ActiveSync] [A certificate is required to complete client authentication]
    * at line 0, file "ActiveSyncLogin.asp".

    What certificate is it looking for?

    Wednesday, February 2, 2011 3:44 PM
  • A user certificate installed on the device probably...
    Jason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk
    Wednesday, February 2, 2011 11:59 PM
  • If its a windows mobile phone then you might need to install the intermediary certificate manually on the phone.  I believe Iphone and Androids dont care.   My HTC HD2 requires that certificate to present or else activesync wont work.

    Thanks

    Saturday, February 5, 2011 12:14 AM
  • ...or even the Root CA if the cert is from a Root CA that is not included in the mobile device by default (like a private/internal Root CA).
    Jason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk
    Saturday, February 5, 2011 12:32 AM
  • I have 2 IAGs setup.  The one IAG is working fine and I didn't have to do anything with certs on the IPad.  When I point it  to the other IAG is when I get the cert error.  I believe I have both IAGs set up identically.

    Thursday, February 10, 2011 8:16 PM
  • Hi,

    I'm marking your question as answered, even though it hasn't been. It appears no one has been able to provide an answer. If the topic is still a concern, I would suggest you open a support case with Microsoft CSS, and an engineer will help you investigate the issue.


    Ben Ari
    Microsoft CSS UAG/IAG Support
    Sammamish, WA
    • Marked as answer by Erez Benari Tuesday, May 17, 2011 11:09 PM
    Tuesday, May 17, 2011 11:09 PM