Child pages
  • Using Configuration Profiles to setup ActiveSync to AEMS with encryption certificates

Skip to end of metadata
Go to start of metadata

1. Download and install the iPhone Configuration Utility. This application is available for both Mac and Windows. Despite the name, configuration profiles made with this tool may be used on any iOS device (although some options may depend upon the version of iOS running on the specific device). Note that administrative credentials may be required to install this application on Macs.


Click on the screenshot to the right of any step to see a larger picture illustrating that step.

2. Download the template iOS configuration profile.


3. Open the iPhone Configuration Utility. On Macs it is installed under Utilities in the Applications folder.

4. Add the configuration profile downloaded in the previous step (File -> Add to Library). Select the configuration profile from the list.

5. Open Stache in a web browser. Select the encryption and mail signing cert from the list. Click the download button to save the certificate as a P12 file on your local computer. Do not close this window as you will need the certificate password listed here in a later step.

6. Back in the iPhone Configuration Utility, select Credentials from the list of payloads and then click the Configure button in the right pane. Find the P12 file you downloaded in the previous step and open it.

7. Notice that your encryption and signing certificate is shown now. You may optionally put the password to the certificate shown in Stache here. If you do not, you will be prompted to provide this password on the device when installing the profile.

8. Select Exchange ActiveSync from the list of payloads, and enter your EID username and AEMS email address in the fields. You may optionally enter your AEMS account password - if you do not you will be prompted to provide the password on the device when installing the profile. Do not change any other options.

9. Still in the Exchange ActiveSync payload, make sure that "Enable S/MIME" is checked. In the select boxes for Signing Certificate and Encryption Certificate select the P12 certificate you just imported in the previous steps.

10. Plug your iOS device into your computer.

11. Close iTunes and iPhoto if they open after connecting your device. In the iPhone Configuration Utility, select the device from the list under Devices.

12. Select the Configuration Profiles tab. This tab will list all profiles both installed on the device already and available to be installed from the iPhone Configuration Utility. Click the Install button next to the ActiveSync profile.

13. Verify that this is the right profile. It should be signed by the iPhone Configuration Utility and contain a certificate and exchange account. Touch Install and then Install Now when prompted. You will be prompted to provide your passcode and enter your AEMS account password and/or certificate password if you opted not to enter them into the configuration profile earlier.

14. When the profile is installed, touch Done.

You may remove the profile in the future by going to General -> Profiles under Settings, selecting the profile, and touching Remove. Note that this will delete all data on your device that is synced with Exchange (e.g. email, contacts, calendar items, tasks). The data will not be deleted from the Exchange server itself.

  • No labels