howto://connect your iphone to exchange with activesync

by Ed Fisher on 2010-07-30

in Infrastructure

exchangeI almost titled this post "Connecting iPod-ish devices to ActiveSync" since the instructions will work for iPhones, iPod Touch, and iPads, but I decided to go for SEO and just used iPhone in the title. I do have an iPod Touch, which I just lurve, but since it is not of the body, it takes  a little more to set up with Exchange than a typical Windows Mobile device. This post will go through the steps to connect your iPhone/iPad/iPod Touch to Exchange ActiveSync. We’ll cover how to trust certificates issues by your AD integrated CA, and then how to get your device talking to Exchange. If you belong to the cult of Apple, and also have Exchange, read on.

Before we begin, just make sure that your Exchange CAS has ActiveSync running, and permits unmanaged devices to connect to it. You can do a lot to lock down ActiveSync and to secure your email system so that if a device is lost, you can remotely wipe it. Your Exchange setup might be configured in such a way that it won’t let an Apple device connect since it cannot enforce security policy against it to the same level as it can to a Windows Mobile device. You can see this post for more on ActiveSync security. We’re assuming that you are permitting non-managed devices to connect.

Also, I own an iPod Touch, not an iPhone (yet) or an iPad. These steps should work the same on all three platforms, but I will only use the word iPod going forward since that is what I have in hand.

Trusting your certificates

If you are using a certificate issued by one of the major CAs like Thawte or VeriSign, you an skip this  and go down to Configuring ActiveSync. But if you are using certificates issued by your AD Integrated Certificate Authority, you will want to set you iPod up to trust the certificates. This will help not only with ActiveSync, but with any other SSL/TLS connections you make to other services in your infrastructure.

  1. Launch your Safari Browser.
  2. Browse to https://yourCA/certsrv.
  3. Enter your username and password when prompted.
  4. Click on Download a CA certificate, certificate chain, or CRL.
     Unless you have an iPad, turn your device on its side for this.
  5. Leave it set to DER, and then click Install CA certificate.
     You'll probably need to move in on this to click it successfully.
  6. This will bring up an Install Profile prompt. Click Install.
    If you hit More Details, you will see details on the cert, the CA, etc.
  7. When you are warned of impending doom, click Install Now.
    It's okay, you can click Install Now. Really, go ahead. I'll be right here with you. NO! WAIT! Oh shit, too late. Nevermind.
  8. When it completes, click Done.
    Well that was fun.

Your iPod will now trust certificates issued by your CA, which will make setting up your ActiveSync oh so much easier.

Configuring ActiveSync on Apple devices

  1. From your start screen, tap Settings.
    Yes, I do have four screens worth of apps..I don't remember the last time I actually used my iPod Touch for music
  2. Scroll down to Mail, Contacts, Calendars and tap it.
    Don't laugh, SnowBrawlin' is really quite fun.
  3. Tap Add Account…then tap Microsoft Exchange
    Does anyone actually still use AOL for email?
  4. Fill in your email address, server, credentials, and set it to use SSL.
    Oh no, you can see my password is 14 periods!
  5. Click Next and your iPod will verify your information.
    This will take ten seconds if you walk away...ten minutes if you sit there watching it.
  6. Click the back button to get back to the settings.
  7. Tap Mail Days to Sync. The default here is 3 Days, but you will probably want to change that to no limit to get all the mail in your inbox.
    You have tons of old mail in your inbox....get it all!
  8. Then go back, and tap Mail Folders to Push. By default the iPod will only grab your Inbox. I like to get the sent items too, since I often find folks ask me to resend things to them.
    if I had a nickel for every email I have been asked to resend...
  9. Finally, set your device to grab Contacts and Calendars too, if you wish. You will be prompted about what to do if there are duplicates…the choice is yours. Choose wisely.

    duplicates...ohs noes 
     
     

  10. Launch the mail client and let it synch! You are now free to dance about the office, delighted that you have Exchange email on your iPhone.
    Yes, I am using this again. When I find something I like, I stick with it.

So what is it about Apple’s products that makes folks such raving fans? Don’t get me wrong, my iPod Touch is probably the best piece of tech I have ever owned, and I have a history of small handhelds You see this? You will sell your soul to possess it. We both know I'm right, so go ahead and form a queue to the left.including multiple Palm Pilots, two Compaq iPaqs, a Dell Axim, and various smart phones. I’m sure I will buy an iPhone once AT&T loses its monopolistic choke hold exclusivity arrangement, and I would lurve a Macbook if someone gave it to me, but I just can’t see dropping $1300 on a laptop, when I can get equivalent specs and power for less than half that from Dell or Toshiba or Acer. Maybe they are secretly beaming mind control rays into the owners’ brains. Perhaps Steve Jobs is from a higher astral plane. Maybe Apple just has the best marketing EVAR. Or maybe they just have a cult of personality. While not as ‘fun’ as Glamour Boys, this hard-hitting rock anthem from Living Colour is one of the best jams from the 80s. Definitely worth turning the volume up to 11 for this one as you do the Snoopy Dance while your iPod syncs with Exchange.


Direct link for RSS and email subscribers…http://youtu.be/7xxgRUyzgs0

If you found this post useful, please consider following us on twitter. You’ll be the first to learn about new posts, and, rarely, we’ll share a comedic or witty tweet. Of course, you can also leave a comment below (anonymous allowed) to let us know we hooked you up.

You might also enjoy:

  1. howto://connect clients to exchange-part one
  2. howto://connect clients to exchange-part two
  3. Block ActiveSync? Inconceivable!
  4. howto://install Exchange 2010 on a single box-part two

Leave a Comment

Previous post:

Next post: