Requirement is to generate certificate from CA based on per user per device for certificate authentication. Authentication required for user and device using single certificate. Its means single certificate will be issued for a user and user's one particular
device. Certificate will be valid only if it is used on associated device for associated user only. Multiple certificate can be generated for different user devices. Exchange ActiveSync will only allow email sync if user will have valid certificate and it
is using from associated mobile device only.
I am able to generate user wise certificate from associated CA, which I am pushing to device using MDM. But as per current case user can use this certificate from other device (by taking backup or coping) to sync email with ActiveSync. This I want to stop.
I am using Window Server 2008 & Exchange Server 2010. And device can be iOS, Android, Window Phone etc.
Or is there any other way that can be used to implement this case ?
Any help will be appreciated.