Next, we’ll go ahead and request certificates on behalf of the end users we wish to deploy mobile devices that utilize certificate-based authentication for, using the Enrol On Behalf Of option in the Certificates snap-in:įigure 1: Enrolling a certificate on behalf of a user

When prompted, select to manage certificates for the Current User.

Select Certificates from the list of Available Snap-Ins.

From the file menu of the MMC, choose Add/Remove Snap-In.

Open a blank MMC using Start>Run and entering mmc.exe.

Just to recap, we’ll open that MMC snap-in using the following steps: A user can perform this task themselves, but using the Enrollment Agent certificate we created for our Administrative user in part one of this article, we can request the certificate from an administrative workstation ready to deploy to the device itself.įirst, we’ll open up the Certificates MMC snap-in as used in part one of this article, from the same administrative workstation we used to request the Enrollment Agent certificate (or a workstation or server that’s had that certificate imported). Next, in this final part of the series, we’ll examine how to request and issue certificates on behalf of end-users, then look at how to configure two common mobile devices – iOS devices from Apple and Android devices using NitroDesk’s Touchdown for certificate-based authentication.īefore we can configure mobile devices for certificate based authentication, we need to enrol and issue certificates to end-users. In part one of this article, we configured our certificate authority to allow an Administrative user to request certificates on behalf of users, then configured ActiveSync on Exchange 2010 to accept certificate-based authentication from users. If you would like to read the first part in this article series please go to Configuring Certificate-Based Authentication for Exchange 2010 ActiveSync (Part 1).

Adavaned purevpn app