What certificate based authentication is not:īy itself, CBA is not two-factor authentication. The certificate is used in place of the user entering credentials into their device. What is certificate based authentication? CBA uses a user certificate to authenticate the user/client (in this case, to access EAS).
To recap some of the common questions administrators and IT decision-makers have regarding CBA: In this post, we will discuss how to configure CBA for EAS for Exchange 2010 in deployments without TMG or UAG. Certificate based authentication for OWA only can also be accomplished using ForeFront Unified Access Gateway. In previous posts, we have discussed certificate based authentication (CBA) for Outlook Web App, and Greg Taylor has covered publishing Outlook Web App and Exchange ActiveSync (EAS) with certificate based authentication using ForeFront TMG in this whitepaper. Note: For official documentation on this subject, please go to this page on TechNet. Update: Exchange Server 2013 Cumulative Update 5 and later supports certificate-based authentication with ActiveSync.
