XenMobile Server

Configuring certificate-based authentication with EWS for Secure Mail push notifications

November 20, 2023

Contributed by Vijay Kumar Kunchakuri

To make sure Secure Mail push notifications work, you must configure the Exchange Server for certificate-based authentication. This is required when Secure Hub is enrolled in XenMobile with certificate-based authentication.

You need to configure the Active Sync and Exchange Web Services (EWS) virtual directory on the Exchange Mail Server with certificate-based authentication.

Unless you complete these configurations, the subscription to Secure Mail push notifications fails and no badge updates occur in Secure Mail.

This article describes the steps to configure certificate-based authentication. The configurations are specifically against the EWS virtual directory on the Exchange Server.

To get started with the configuration, do the following:

Log on to the server or servers where the EWS virtual directory is installed.
Open the IIS Manager Console.
Under the Default Web Site, click the EWS virtual directory.

The Authentication, SSL, Configuration Editor snap-ins are on the right side of the IIS Manager Console
Make sure that the Authentication settings for EWS are configured as shown in the following figure.
Configure the SSL Settings for the EWS virtual directory.
1. Select the Require SSL checkbox.
2. Under Client Certificates, click Require. You can set this option to Accept if other EWS mail clients connect with user name and password as credentials to authenticate and connect to the Exchange Server.
Click Configuration Editor. In the Section drop-down list, navigate to the following section:
- system.webServer/security/authentication/clientCertificateMappingAuthentication
Set the enabled value to True.
Click Configuration Editor. In the Section drop-down list, navigate to the following section:
- system.webServer/serverRuntime
Set the uploadReadAheadSize value to 10485760 (10 MB) or 20971520 (20 MB) or to a value as required by your organization.

Important:

If you don’t set this value correctly, certificate-based authentication while subscribing to EWS push notifications can fail with an error code of 413.

Do not set this value to 0.

For more information, see the following third-party resources:

Image of IIS Manager Console

For more information about troubleshooting Secure Mail issues with iOS push notifications, see this Citrix Support Knowledge Center article.

Push notifications for Secure Mail for iOS

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this helpful

Configuring certificate-based authentication with EWS for Secure Mail push notifications

November 20, 2023

Configuring certificate-based authentication with EWS for Secure Mail push notifications

Related information

In this article