ActiveSync

On-server Setup

Setting up ActiveSync in IceWarp Server is easy since it does not have almost any administration controls.

  1. In Help - Licenses, verify that you have at least one valid client license for ActiveSync. If expiration shows negative days, the license (full or trial) already expired and you need to obtain an updated license. Each user can synchronize unlimited number of devices with his account under a single ActiveSync license. Click Exchange ActiveSync in Help - Licenses to see a list of Used Seats as well as users above the license limit who have accessed the service on the basis of a 7 day trial period before needing a license.
  2. In SyncML - Push, verify that the Push service is Active and its default port is not blocked by another local service. You may want to change the port number.

    If you do not intend to use DirectPush on the device which keeps the device always up-to-date, but also consumes considerable battery power, you may want to leave this service inactive.

  3. In System - Services, verify that the Web service is running.
  4. In the ActiveSync node, do not modify the port and URL end part. Change only the hostname if required by a special setup.
  5. Under the Management - <domain> - Policies (or Management - <user> - Policies) tab set the appropriate access.
  6. Check the <domain> - Information tab of the primary domain whether the DNS record for AutoDiscovery is set. (EAS should use any type of either SRV or A record.)
  7. For GAL lookup, a user has to be able to read at least one GAL type folder. Search within GAL is performed by EAS itself on the server. To have GAL synchronized into a device, the Public folders checkbox (ActiveSync Devices dialog - Manage Device - Device Settings dialog - Folders tab) has to be checked. See the GAL Public Folder section for details.
  8. Enable SSL on the default port - HTTP (443) in System - Services. SSL ensures that mail and other data are securely encrypted during wireless transmission.

    Warning: If SSL is not used, all data (even passwords etc.) are sent in plain text!

  1. For additional security protection and best SmartDiscover performance, install a digital certificate on the server from a trusted certificate authority such as Verisign.

    Windows devices in general consider self-signed certificates (not signed by a CA) as invalid. It is possible to purchase a CA certificate from IceWarp - for detailed information about certification process, refer to IceWarp SSL Certificate Process - it is available from: http://www.icewarp.com/downloads/documentation/server/security/IceWarp SSL Certificate Process.pdf

DNS SRV Records Configuration

For information about this topic, refer to DNS Records Configuration.