I am looking to setup SCEP so users dont have to keep entering their device passwords once their AD passwords are changed.
I thought it was a simple thing .... I was wrong, anyway...
I setup a NDES server and looking to configured SCEP as per Technet article Configure certificate-based authentication for Exchange ActiveSync
for exchange 2010.
Once this is done, I believe I have to assign the scep policy to the email policy in BES. What I am not sure is how will current devices (already provisioned) will behave while or once I have set this up ?
Also, how do I get the certs to the device ?, i read i can copy the CA, Int CA and the personal cert in the Certificate folder under shared apps. anything else ?
information seems to be limited on setting this up, any assistance would be greatly appreciated.