I am looking at Activesync authentication and want to know if

  • Certificate Authentication ignores a client username and password


  • Certificate Authentication requires a username and password

For what it's worth, Android Activesync client setup requires a username and Password to proceed even when a certificate is installed

And Exchange server offers 3 different modes of authenticating:

enter image description here

In Activesync, is the certificate optional, or does it provide value to the password authentication? (e.g. mutual auth TLS/prevent MITM)

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.