Applies to: Exchange Server 2007 SP3, Exchange Server 2007 SP2, Exchange Server 2007 SP1, Exchange Server 2007
Topic Last Modified: 2007-09-27

This topic explains how to install client certificates for authentication on Windows Mobile powered devices. 

Before You Begin

To perform the following procedure on a Windows Mobile powered device, make sure that you have a Microsoft ActiveSync connection between the device and a desktop or portable computer. In addition, the desktop or portable computer must be joined to the domain. For Microsoft Windows XP computers, you will use desktop ActiveSync to form this connection. For Microsoft Windows Vista computers, you will use the Windows Mobile Device Center.


In order to use the desktop certificate enrollment tool, your device must be cradled to a computer that is logged into the corporate network. The following procedure uses Desktop ActiveSync to enroll for a certificate from the corporate server.

To use ActiveSync to enroll for a certificate from the corporate server

  1. With your device connected to your computer, within ActiveSync, click Tools, Advanced Tools, and Get Device Certificates.

  2. From the View drop-down box, select Certificate types from Active Directory, and then click Enroll.

  3. Under Get Device Certificate, click Yes to continue.

  4. Your Windows Mobile 6.0 device will prompt you to confirm the installation process. Click Continue on the device.

  5. A second prompt may appear on the device. If this occurs, select Install.

  6. After you have seen the success dialog box at the end of the enrollment process, click OK on your computer and then click Close.

For More Information