locked
ActiveSync Authentication RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi all,

    I'm having a problem getting Activesync working on one of my IAGs.  One of the devices is working fine, but the other device is having problems.  I compared the IAG configs for the ActiveSync trunk between the 2 and they are setup identically with the exception of IPs.  I get the messages below.  The iPad I'm testing with says the connection to server failed.  I use the same auth group for other trunks and they work fine.  I get the messages below.

    Warning 01/31/2011 09:57:36 24 ApplicationAuthenticationFailed"Application Authentication Failed Security"Security testsync(S)"testsync (S) Request failed, failed to reply to application's authentication request (HTTP 401 request). Trunk: testsync; Secure=1; User Name: <domain/user>; Application Name: Microsoft ActiveSync; Application Type: Activesync; Source IP: x.x.x.x; Session ID: 030CD8D9-8C5D-4FA4-89C7-F044A75AD453

    Information 01/31/2011 09:56:11 13 SuccessfulLogin"Successful Login Security"Security testsync(S)"testsync (S) The following user logged into trunk "testsync" (secure=1): User: <domain/user; Source IP: x.x.x.x; Authentication Server: ga; Session: 18A60341-8F03-464A-9761-3773A4E3A580.

    Thanks in advance.

    Monday, January 31, 2011 3:13 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I'm marking your question as answered, even though it hasn't been. It appears no one has been able to provide an answer. If the topic is still a concern, I would suggest you open a support case with Microsoft CSS, and an engineer will help you investigate the issue.

    Ben Ari
    Microsoft CSS UAG/IAG Support
    Sammamish, WA
    • Marked as answer by Erez Benari Tuesday, May 17, 2011 11:09 PM
    Tuesday, May 17, 2011 11:09 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    ***Updated info from logs

    ** 02.02.11 10:03:16.218 INTERNALSITE:GENERAL T3476
    ERROR: Failed to access [https://x.x.x.x:443/Microsoft-Server-ActiveSync] [A certificate is required to complete client authentication]
    * at line 0, file "ActiveSyncLogin.asp".

    What certificate is it looking for?

    Wednesday, February 2, 2011 3:44 PM
  • Question
    Sign in to vote
    0
    Sign in to vote
    A user certificate installed on the device probably...
    Jason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk
    Wednesday, February 2, 2011 11:59 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    If its a windows mobile phone then you might need to install the intermediary certificate manually on the phone.  I believe Iphone and Androids dont care.   My HTC HD2 requires that certificate to present or else activesync wont work.

    Thanks

    Saturday, February 5, 2011 12:14 AM
  • Question
    Sign in to vote
    0
    Sign in to vote
    ...or even the Root CA if the cert is from a Root CA that is not included in the mobile device by default (like a private/internal Root CA).
    Jason Jones | Forefront MVP | Silversands Ltd | My Blogs: http://blog.msedge.org.uk and http://blog.msfirewall.org.uk
    Saturday, February 5, 2011 12:32 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    I have 2 IAGs setup.  The one IAG is working fine and I didn't have to do anything with certs on the IPad.  When I point it  to the other IAG is when I get the cert error.  I believe I have both IAGs set up identically.

    Thursday, February 10, 2011 8:16 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I'm marking your question as answered, even though it hasn't been. It appears no one has been able to provide an answer. If the topic is still a concern, I would suggest you open a support case with Microsoft CSS, and an engineer will help you investigate the issue.

    Ben Ari
    Microsoft CSS UAG/IAG Support
    Sammamish, WA
    • Marked as answer by Erez Benari Tuesday, May 17, 2011 11:09 PM
    Tuesday, May 17, 2011 11:09 PM