BES10 logo
BlackBerry Enterprise Service 10 version 10.2
 

Create a Microsoft ActiveSync profile

You can use Microsoft ActiveSync profiles to specify how devices connect to your organization's messaging server and synchronize email messages and organizer data using Microsoft ActiveSync. You can also specify whether users can use S/MIME to encrypt or sign email messages in the native iOS email app. You cannot force users to use S/MIME.

Before you begin:
  • If you use certificate-based authentication, create a CA certificate profile and a client certificate profile, or user certificate profile, and assign them to users. Certificate-based authentication is for iOS devices only. For more information, see Sending certificates to devices.
  • For Android devices that do not have a work space, users must install TouchDown on their devices or use a Motorola device that supports the Enterprise Device Management API.
  • If you want to use Notes Traveler, devices must have a work space.
  1. On the menu bar, click Library.
  2. In the Microsoft ActiveSync pane, click the + icon.
  3. In the Profile name field, type the profile name.
  4. In the Profile description field, type a description for the profile.
  5. In the Credentials drop-down list, perform one of the following actions:
    • If you want to use basic authentication (for example, a username and password), click None.
    • If you want to use a certificate profile for authentication (iOS devices only), click Certificate. In the Credential name or description field, type a description.
  6. If you selected Certificate in step 5, perform the following actions:
    • In the Certificate identifier drop-down list, click the certificate profile that you want to use.
    • If you want to prompt users for a password when their devices try to authenticate with the server or network, select the Prompt the user for a password check box.
  7. In the Domain field, type the user domain name.
  8. In the Email address field, perform one of the following actions:
    • If the profile is for one user, type the email address of the user.
    • If the profile is for multiple users, type %UserEmailAddress%.
  9. In the Host name or IP address field, type the host name or IP address of the Microsoft ActiveSync server.
  10. In the Username field, perform one of the following actions:
    • If the profile is for one user, type the username.
    • If the profile is for multiple users, type %UserName%.
    • If the profile is for multiple users in a Notes Traveler environment, type %DisplayName%.
  11. If you want to permit users to encrypt or sign email messages in the native iOS email app, select the Use S/MIME check box. Perform any of the following actions:
    • In the Encryption certificate identifier drop-down list, click the client certificate profile that users can use to encrypt email messages.
    • In the Signing certificate identifier drop-down list, click the client certificate profile that users can use to sign email messages.
  12. If you want to control how devices manage email messages, select the Disable moving or sending email messages and limit sync time check box. Perform any of the following actions:
    • To prevent moving email messages from this account to another existing email account on the device, select the Disable moving email messages to another account check box.
    • To prevent third-party applications on the device from using this account to send email messages, select the Disable sending email messages from this account in third-party applications check box.
    • To specify how long to keep existing email messages for this account on the device, select the Limit time to sync email messages check box. Specify the synchronization period.
  13. If you do not want devices to synchronize new email recipients to the device address book, select the Disable synchronizing new recipients to device address book check box.
  14. If the Microsoft ActiveSync server requires SSL authentication, select the Use SSL check box. If you want to permit work space apps to accept any server certificate when connecting to the Microsoft ActiveSync server (including the default ActiveSync self-signed certificate), select the Accept all SSL certificates check box.
  15. Click Add.
Last updated: 2015-02-23
©2015 BlackBerry. All Rights Reserved. | Glossary