iPhone authentication to Exchange with certificates

[mrCide]

I've been told that I can configure iPhones in our enterprise to authenticate to exchange/activesync with certificates (so as to not require a user to enter their username/password) but I can't seem to find any good guide on doing this.

We currently have about 30 iPhone users who we simply manually configure Exchange with and instruct them to change their password on the iPhone when they change their windows password, but this is obviously an administrative headache (users lock their accounts when they forget).

I understand there's an iPhone Configuration utility but really, I don't know where to begin. I've tried searching to no avail.

Can someone point me to a guide or in the right direction? Thanks in advance..

 

[gazzer82]

Here is a fairly extensive tutorial http://www.expta.com/2010/02/how-to-securely-deploy-iphones-with.html i warn you, if you've not dealt with user authentication certificates and CA's before it's a pretty complicated business. Though once setup it's pretty bullet proof security wise and mean you can revoke compromised certificates at any point without having to suspend/block the username and password of the user.

The iPhone configuration utility itself is actually pretty easy to use in comparison!

Gareth