{"id":10330,"date":"2022-04-18T13:14:40","date_gmt":"2022-04-18T20:14:40","guid":{"rendered":"https:\/\/csop.cirasync.com\/?p=10330"},"modified":"2026-03-24T21:21:28","modified_gmt":"2026-03-25T02:21:28","slug":"certificate-based-authorization-with-csop-ucm","status":"publish","type":"post","link":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/","title":{"rendered":"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM"},"content":{"rendered":"<h2><b><span data-contrast=\"auto\">Overview: Certificate-Based Authorization<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><br \/>\n<\/span><\/h2>\n<p><span data-contrast=\"none\">There are multiple ways to programmatically authenticate with Microsoft Azure. The most common method uses an \u201cAccess token\u201d as part of modern authentication techniques. The access token allows the CiraSync On-Prem Unified Contact Manager (UCM) to access Azure resources. However, the lifetime of an \u201cAccess Token is 90 days (about 3 months) and must be refreshed regularly. After expiry, the token must be updated by an interactive login to the Azure portal.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><span data-contrast=\"none\">Certificate-Based Authorization is another method of accessing Azure resources using identities based on certificates. In many cases, this may be preferred over modern authentication. The main justification is that when programmatically calling PowerShell, basic authentication is deprecated. Thus, the only viable option is Certificate-Based Authentication. Even when using the Microsoft Graph API, there is an additional advantage in that the \u201cRefresh Token\u201d does not require human intervention each time a refresh token expires.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<h2><b><span data-contrast=\"auto\">How Does Certificate-Based Authentication Work?<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">The certificate is usually uploaded to the <a href=\"https:\/\/azure.microsoft.com\/en-us\/free\/search\/?&amp;ef_id=Cj0KCQjwmPSSBhCNARIsAH3cYgZRGGsmYbna1M_qYaOsw3MglkaIBOOLXCqHSmX8dhaKVyxFL3t6bOIaAnifEALw_wcB:G:s&amp;OCID=AID2200227_SEM_Cj0KCQjwmPSSBhCNARIsAH3cYgZRGGsmYbna1M_qYaOsw3MglkaIBOOLXCqHSmX8dhaKVyxFL3t6bOIaAnifEALw_wcB:G:s&amp;gclid=Cj0KCQjwmPSSBhCNARIsAH3cYgZRGGsmYbna1M_qYaOsw3MglkaIBOOLXCqHSmX8dhaKVyxFL3t6bOIaAnifEALw_wcB\">Azure<\/a> portal and every time we access the Azure resource, we use the certificate to generate an access token. So, the certificate replaces the \u201cRefresh Token\u201d in the OAuth flow. The following steps describe what should be done to configure certificate-based authorization:<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ol>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"9\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Create your certificate and prepare two files: one file certificate without a private key and the second with a private key<\/span><\/li>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"9\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Create an Application on the Azure Portal in your tenant<\/span><\/li>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"9\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Configure your created application as follows:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"23\" data-aria-posinset=\"1\" data-aria-level=\"2\"><span data-contrast=\"none\">Assign API permissions that allow application access to the target resources<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"23\" data-aria-posinset=\"2\" data-aria-level=\"2\"><span data-contrast=\"none\">Assign a certificate without a private key to the created application<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"23\" data-aria-posinset=\"3\" data-aria-level=\"2\"><span data-contrast=\"none\">Create a Service Principal Entry in the Azure Active Directory and assign this entry to the application. This entry will be used as an access user when connecting to Azure resources via certificate-based authorization<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"23\" data-aria-posinset=\"4\" data-aria-level=\"2\"><span data-contrast=\"none\">Assign necessary permissions to the created Service Principal Entry<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"23\" data-aria-posinset=\"5\" data-aria-level=\"2\"><span data-contrast=\"none\">Accept admin permissions for the created application<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-contrast=\"none\">Once these steps have been completed, we can use certificate-based authentication with a private key to obtain an &#8222;Access Token&#8220; in the OAuth flow.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<h3><b><span data-contrast=\"auto\">Configuration with CiraSync On-Prem<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h3>\n<p><span data-contrast=\"none\">This section outlines how to configure certificate-based authorization with the CiraSync On-Prem application. Note that all methods will require Global Administrator access in the Azure Tenant and credentials will be used only for the configuration process per time. CiraSync On-Prem will not save this information anywhere.\u202f<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">The naming convention for entries that will be created by CiraSync On-Prem on the Azure side:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><br \/>\n<\/span><\/p>\n<p><b><span data-contrast=\"none\">CiraSync On-Prem &#8211; certificate-based authorization &#8211; (<\/span><\/b><span data-contrast=\"none\">[CiraSync On-Prem service mailbox]<\/span><b><span data-contrast=\"none\">)<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\">CiraSync On-Prem has two methods for configuring certificate-based authorization:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ol>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"11\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">The automatic method &#8211; this method allows users to configure all necessary steps with minimum user involvement. However, this method requires more permissions that must be accepted from the CiraSync On-Prem Application.<\/span><\/li>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"11\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">The manual method &#8211; this method controls all steps that will be made in the Azure portal and requires fewer scope permissions but more permissions from the end-user via the azure portal and PowerShell scripting.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<h4><b><span data-contrast=\"none\">Certificate-Based Authorization with CiraSync On-Prem UCM: The automatic method<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\n<p><span data-contrast=\"none\">This method requires the following permissions:<\/span><\/p>\n<ol>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"12\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">&#8222;Application.ReadWrite.All&#8220; &#8211; required to create applications within the Azure tenant<\/span><\/li>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"12\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">&#8222;Directory.ReadWrite.All&#8220; &#8211; required to create Service Principal Entry<\/span><\/li>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"12\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">&#8222;Organization.ReadWrite.All&#8220; &#8211; required to access an organization\u2019s info<\/span><\/li>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"12\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">&#8222;RoleManagement.ReadWrite.Directory&#8220; &#8211; required to create roles for Service Principal<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ol>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><span data-contrast=\"none\">All these permissions require the &#8222;Write&#8220; option which allows CiraSync On-Prem to create new entries within the Azure Tenant.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<h5><b><span data-contrast=\"auto\">User flow<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h5>\n<p><span data-contrast=\"none\">1. Create a certificate manually or automatically with CiraSync On-Prem<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11027 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg\" alt=\"Creating a certificate with CiraSync On-Prem\" width=\"1024\" height=\"685\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-980x656.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-480x321.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">2. Select the automatic configuration method.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11063 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-the-automatic-configuration-method_-1024x684.jpg\" alt=\"Selecting the automatic configuration method\" width=\"1024\" height=\"684\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-the-automatic-configuration-method_-1024x684.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-the-automatic-configuration-method_-980x654.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-the-automatic-configuration-method_-480x321.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">3. Enter your Global Administrator credentials in the Microsoft Login form<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10987 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/2-Enter-your-Global-Administrator-credentials-in-the-Microsoft-Login-form_-1024x597.jpg\" alt=\"Entering your Global Administrator credentials\" width=\"1024\" height=\"597\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/2-Enter-your-Global-Administrator-credentials-in-the-Microsoft-Login-form_-980x571.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/2-Enter-your-Global-Administrator-credentials-in-the-Microsoft-Login-form_-480x280.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">4. Accept the necessary permissions described below.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10995 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-1024x568.jpg\" alt=\"Accepting the necessary permissions\" width=\"1024\" height=\"568\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-1024x568.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-980x543.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-480x266.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">5. Run the configuration process and wait until it is completed. <\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11051 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Run-the-configuration-process-and-wait-until-it-is-completed_-1024x592.jpg\" alt=\"Running the configuration process\" width=\"1024\" height=\"592\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Run-the-configuration-process-and-wait-until-it-is-completed_-980x567.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Run-the-configuration-process-and-wait-until-it-is-completed_-480x278.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">6. Accept admin permissions for the created application.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10975 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1-Accept-admin-permissions-for-the-created-application-1024x554.jpg\" alt=\"Accepting admin permissions\" width=\"1024\" height=\"554\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1-Accept-admin-permissions-for-the-created-application-980x530.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1-Accept-admin-permissions-for-the-created-application-480x260.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<h4><b><span data-contrast=\"auto\">Certificate-Based Authorization with CiraSync On-Prem UCM: The manual method<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h4>\n<p><span data-contrast=\"none\">The manual method requires the following permissions:<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<ul>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"22\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">&#8222;Application.Read.All&#8220; &#8211; required to find the application<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<li data-leveltext=\"\uf0b7\" data-font=\"Symbol\" data-listid=\"22\" data-aria-posinset=\"2\" data-aria-level=\"1\"><span data-contrast=\"none\">&#8222;Organization.Read.All&#8220; &#8211; required to read the Organization\u2019s info<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/li>\n<\/ul>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><span data-contrast=\"none\">All these permissions require only a &#8222;Read&#8220; option since CiraSync On-Prem should read information about the manually configured application and save this into the CiraSync On-Prem database<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<h5><b><span data-contrast=\"none\">User Flow<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:320,&quot;335559739&quot;:80,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h5>\n<p><span data-contrast=\"none\">1. Create a certificate manually or automatically with CiraSync On-Prem.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><br \/>\n<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11023 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo_-1024x685.jpg\" alt=\"Creating a certificate with CiraSync On-Prem\" width=\"1024\" height=\"685\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo_-1024x685.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo_-980x656.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo_-480x321.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">2. Select a manual configuration method.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11059 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-a-manual-configuration-method-1024x682.jpg\" alt=\"Selecting a manual configuration method\" width=\"1024\" height=\"682\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-a-manual-configuration-method-1024x682.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-a-manual-configuration-method-980x652.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Select-a-manual-configuration-method-480x319.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">3. Execute the PowerShell script that will be provided by the CiraSync On-Prem application. You can find an example of this script in <\/span><b><span data-contrast=\"none\">Appendix 1<\/span><\/b><span data-contrast=\"none\"> at the end of this document. <\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11047 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Execute-the-PowerShell-script-that-will-be-provided-by-the-itrezzo-application.--1024x682.jpg\" alt=\"Executing the PowerShell script\" width=\"1024\" height=\"682\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Execute-the-PowerShell-script-that-will-be-provided-by-the-itrezzo-application.--1024x682.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Execute-the-PowerShell-script-that-will-be-provided-by-the-itrezzo-application.--980x653.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Execute-the-PowerShell-script-that-will-be-provided-by-the-itrezzo-application.--480x320.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p>4.<\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11007 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/certificate-1024x735.jpg\" alt=\"Windows PowerShell ISE\" width=\"1024\" height=\"735\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/certificate-980x703.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/certificate-480x344.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">5. Enter your Global Administrator credentials in the Microsoft Login form.<\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11043 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Enter-your-Global-Administrator-credentials-in-the-Microsoft-Login-form_-1024x597.jpg\" alt=\"Entering your Global Administrator credentials\" width=\"1024\" height=\"597\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Enter-your-Global-Administrator-credentials-in-the-Microsoft-Login-form_-980x571.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Enter-your-Global-Administrator-credentials-in-the-Microsoft-Login-form_-480x280.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">6. Accept the necessary permissions described below. <\/span><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\n<p><b><span data-contrast=\"none\">IMPORTANT: <\/span><\/b><span data-contrast=\"none\">Do <\/span><b><span data-contrast=\"none\">NOT <\/span><\/b><span data-contrast=\"none\">check the box \u201cConsent on behalf of your organization.\u201d\u00a0\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10999 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-1-1024x560.jpg\" alt=\"Accepting the necessary permissions\" width=\"1024\" height=\"560\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-1-1024x560.jpg 1024w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-1-980x536.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-the-necessary-permissions-described-below_-1-480x263.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><br \/>\n<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335551550&quot;:2,&quot;335551620&quot;:2,&quot;335559740&quot;:240}\">\u00a0<\/span><b><span data-contrast=\"none\">IMPORTANT: <\/span><\/b><span data-contrast=\"none\">Do NOT check the box \u201cConsent on behalf of your organization.\u201d\u00a0\u00a0<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11055 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Run-the-itrezzo-configuration-process-1024x596.jpg\" alt=\"CiraSync On-Prem administrator loading\" width=\"1024\" height=\"596\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Run-the-itrezzo-configuration-process-980x571.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Run-the-itrezzo-configuration-process-480x280.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">7. Run the CiraSync On-Prem configuration process &#8211; during this step, CiraSync On-Prem will connect to the Azure portal, find the created application, and save the changes in the database.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10991 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-admin-permissions-for-the-created-application-1024x554.jpg\" alt=\"Running the CiraSync On-Prem configuration process\" width=\"1024\" height=\"554\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-admin-permissions-for-the-created-application-980x530.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Accept-admin-permissions-for-the-created-application-480x260.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">8. Accept admin permissions for the created application.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><br \/>\n<\/span><\/p>\n<h2><span data-contrast=\"none\">Certificate-Based Authorization with CiraSync On-Prem UCM: Azure Portal Configuration<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559738&quot;:400,&quot;335559739&quot;:120,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h2>\n<ol>\n<li data-leveltext=\"%1.\" data-font=\"Arial\" data-listid=\"21\" data-aria-posinset=\"1\" data-aria-level=\"1\"><span data-contrast=\"none\">Create an application in your tenant with the name <\/span><b><span data-contrast=\"none\">CiraSync On-Prem &#8211; certificate-based authorization &#8211; (<\/span><\/b><span data-contrast=\"none\">[CiraSync On-Prem service mailbox]<\/span><b><span data-contrast=\"none\">).<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><br \/>\n<\/span><\/li>\n<\/ol>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559685&quot;:720,&quot;335559740&quot;:240}\"> <img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11031 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-an-application-in-your-tenant-with-the-name-Itrezzo-certificate-based-authorization-1024x567.jpg\" alt=\"Configuring CiraSync On-Prem certificate-based authorization\" width=\"1024\" height=\"567\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-an-application-in-your-tenant-with-the-name-Itrezzo-certificate-based-authorization-980x542.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-an-application-in-your-tenant-with-the-name-Itrezzo-certificate-based-authorization-480x266.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignleft wp-image-10979 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1.1-Create-an-application-in-your-tenant-with-the-name-Itrezzo-certificate-based-authorization-1024x567.jpg\" alt=\"Configuring CiraSync On-Prem certificate-based authorization\" width=\"1024\" height=\"567\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1.1-Create-an-application-in-your-tenant-with-the-name-Itrezzo-certificate-based-authorization-980x543.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1.1-Create-an-application-in-your-tenant-with-the-name-Itrezzo-certificate-based-authorization-480x266.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">2. Assign the certificate to that applicatio<\/span>n.<\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11003 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Assign-the-certificate-to-that-application-1024x564.jpg\" alt=\"Assigning the certificate\" width=\"1024\" height=\"564\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Assign-the-certificate-to-that-application-980x540.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Assign-the-certificate-to-that-application-480x265.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">3. Configure API permissions for the application.<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11019 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Configure-API-permissions-for-the-application-1024x568.jpg\" alt=\"Configuring API permissions\" width=\"1024\" height=\"568\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Configure-API-permissions-for-the-application-980x544.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Configure-API-permissions-for-the-application-480x266.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><span data-contrast=\"none\">4. Create the Service Principal entity and assign it to the application.<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"><br \/>\n<\/span><\/p>\n<p><span data-contrast=\"none\"><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11035 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application-1024x569.jpg\" alt=\"Assigning the Service Principal entity\" width=\"1024\" height=\"569\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application-980x544.jpg 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application-480x267.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/span><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-10983 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1.1-Created-the-Service-Principal-entity-and-assign-it-to-the-application-1024x567.png\" alt=\"Finishing up\" width=\"1024\" height=\"567\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1.1-Created-the-Service-Principal-entity-and-assign-it-to-the-application-980x543.png 980w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/1.1-Created-the-Service-Principal-entity-and-assign-it-to-the-application-480x266.png 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) and (max-width: 980px) 980px, (min-width: 981px) 1024px, 100vw\" \/><\/p>\n<h2><b><span data-contrast=\"auto\">Appendix 1<\/span><\/b><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/h2>\n<p><span data-contrast=\"none\">Below is an example of a PowerShell script to configure certificate-based authorization.\u202f<\/span><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><i><span data-contrast=\"none\">This is only an example of a script. A customized script will be provided by CiraSync On-Prem during the configuration process specifically for your environment.<\/span><\/i><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\">\u00a0<\/span><\/p>\n<p><span data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\"> <img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11039 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application1-886x1024.jpg\" alt=\"PowerShell script to configure certificate-based authorization\" width=\"886\" height=\"1024\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application1-886x1024.jpg 886w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application1-480x555.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 886px, 100vw\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"> <img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11011 size-full\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/code-at-end-2.jpg\" alt=\"PowerShell script to configure certificate-based authorization\" width=\"944\" height=\"1008\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/code-at-end-2.jpg 944w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/code-at-end-2-480x513.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 944px, 100vw\" \/><\/span><\/p>\n<p><span data-ccp-props=\"{&quot;134233117&quot;:true,&quot;134233118&quot;:true,&quot;201341983&quot;:0,&quot;335559740&quot;:240}\"> <img loading=\"lazy\" decoding=\"async\" class=\"alignnone wp-image-11039 size-large\" src=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application1-886x1024.jpg\" alt=\"PowerShell script to configure certificate-based authorization\" width=\"886\" height=\"1024\" srcset=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application1-886x1024.jpg 886w, https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Created-the-Service-Principal-entity-and-assign-it-to-the-application1-480x555.jpg 480w\" sizes=\"(min-width: 0px) and (max-width: 480px) 480px, (min-width: 481px) 886px, 100vw\" \/><\/span><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Overview: Certificate-Based Authorization There are multiple ways to programmatically authenticate with Microsoft Azure. The most common method uses an \u201cAccess token\u201d as part of modern authentication techniques. The access token allows the CiraSync On-Prem Unified Contact Manager (UCM) to access Azure resources. However, the lifetime of an \u201cAccess Token is 90 days (about 3 months) [&hellip;]<\/p>\n","protected":false},"author":13,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","inline_featured_image":false,"footnotes":""},"categories":[536],"tags":[1180,1179,1181],"ppma_author":[1190],"class_list":["post-10330","post","type-post","status-publish","format-standard","hentry","category-support","tag-certificate-based-authorization","tag-itrezzo","tag-itrezzo-ucm"],"yoast_head":"<!-- This site is optimized with the Yoast SEO Premium plugin v27.1 (Yoast SEO v27.4) - https:\/\/yoast.com\/product\/yoast-seo-premium-wordpress\/ -->\n<title>Certificate-Based Authorization with CiraSync On-Prem UCM<\/title>\n<meta name=\"description\" content=\"Certificate-based authorization with CiraSync On-PremUCM: enable secure access using certificates, reduce password risks, and keep Exchange sync compliant and reliable.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/\" \/>\n<meta property=\"og:locale\" content=\"de_DE\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM\" \/>\n<meta property=\"og:description\" content=\"Certificate-based authorization with CiraSync On-PremUCM: enable secure access using certificates, reduce password risks, and keep Exchange sync compliant and reliable.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/\" \/>\n<meta property=\"og:site_name\" content=\"CiraSync On-Prem - Sync Global Address List and Public Folders\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/itrezzo\" \/>\n<meta property=\"article:published_time\" content=\"2022-04-18T20:14:40+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2026-03-25T02:21:28+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"1188\" \/>\n\t<meta property=\"og:image:height\" content=\"795\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"iog@ciraapps.com\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@itrezzo\" \/>\n<meta name=\"twitter:site\" content=\"@itrezzo\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/\"},\"author\":{\"name\":\"iog@ciraapps.com\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#\\\/schema\\\/person\\\/74e384330ca042154b0a919fbe1fbc3c\"},\"headline\":\"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM\",\"datePublished\":\"2022-04-18T20:14:40+00:00\",\"dateModified\":\"2026-03-25T02:21:28+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/\"},\"wordCount\":891,\"publisher\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/csop.cirasync.com\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg\",\"keywords\":[\"Certificate-Based Authorization\",\"itrezzo\",\"itrezzo UCM\"],\"articleSection\":[\"Support\"],\"inLanguage\":\"de\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/\",\"url\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/\",\"name\":\"Certificate-Based Authorization with CiraSync On-Prem UCM\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/csop.cirasync.com\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg\",\"datePublished\":\"2022-04-18T20:14:40+00:00\",\"dateModified\":\"2026-03-25T02:21:28+00:00\",\"description\":\"Certificate-based authorization with CiraSync On-PremUCM: enable secure access using certificates, reduce password risks, and keep Exchange sync compliant and reliable.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#breadcrumb\"},\"inLanguage\":\"de\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#primaryimage\",\"url\":\"https:\\\/\\\/csop.cirasync.com\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg\",\"contentUrl\":\"https:\\\/\\\/csop.cirasync.com\\\/wp-content\\\/uploads\\\/2022\\\/04\\\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/support\\\/certificate-based-authorization-with-csop-ucm\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#website\",\"url\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/\",\"name\":\"CiraSync On-Prem - Sync Global Address List and Public Folders\",\"description\":\"Sync the GAL and Public Folders to Outlook and smartphones\",\"publisher\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"de\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#organization\",\"name\":\"CiraSync On-Prem contact management and sync software\",\"url\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/csop.cirasync.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/logo.png\",\"contentUrl\":\"https:\\\/\\\/csop.cirasync.com\\\/wp-content\\\/uploads\\\/2020\\\/04\\\/logo.png\",\"width\":172,\"height\":40,\"caption\":\"CiraSync On-Prem contact management and sync software\"},\"image\":{\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/itrezzo\",\"https:\\\/\\\/x.com\\\/itrezzo\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/sync-the-global-address-list-to-an-iphone-android-or-blackberry\",\"https:\\\/\\\/www.youtube.com\\\/channel\\\/UCyAwGMuXo3HPNDpZeBAQyNQ\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/csop.cirasync.com\\\/de\\\/#\\\/schema\\\/person\\\/74e384330ca042154b0a919fbe1fbc3c\",\"name\":\"iog@ciraapps.com\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"de\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=gcd31eb4ab373576f41fb6c5a8054fa52\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=g\",\"caption\":\"iog@ciraapps.com\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Certificate-Based Authorization with CiraSync On-Prem UCM","description":"Certificate-based authorization with CiraSync On-PremUCM: enable secure access using certificates, reduce password risks, and keep Exchange sync compliant and reliable.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/","og_locale":"de_DE","og_type":"article","og_title":"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM","og_description":"Certificate-based authorization with CiraSync On-PremUCM: enable secure access using certificates, reduce password risks, and keep Exchange sync compliant and reliable.","og_url":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/","og_site_name":"CiraSync On-Prem - Sync Global Address List and Public Folders","article_publisher":"https:\/\/www.facebook.com\/itrezzo","article_published_time":"2022-04-18T20:14:40+00:00","article_modified_time":"2026-03-25T02:21:28+00:00","og_image":[{"width":1188,"height":795,"url":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo.jpg","type":"image\/jpeg"}],"author":"iog@ciraapps.com","twitter_card":"summary_large_image","twitter_creator":"@itrezzo","twitter_site":"@itrezzo","schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#article","isPartOf":{"@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/"},"author":{"name":"iog@ciraapps.com","@id":"https:\/\/csop.cirasync.com\/de\/#\/schema\/person\/74e384330ca042154b0a919fbe1fbc3c"},"headline":"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM","datePublished":"2022-04-18T20:14:40+00:00","dateModified":"2026-03-25T02:21:28+00:00","mainEntityOfPage":{"@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/"},"wordCount":891,"publisher":{"@id":"https:\/\/csop.cirasync.com\/de\/#organization"},"image":{"@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#primaryimage"},"thumbnailUrl":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg","keywords":["Certificate-Based Authorization","itrezzo","itrezzo UCM"],"articleSection":["Support"],"inLanguage":"de"},{"@type":"WebPage","@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/","url":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/","name":"Certificate-Based Authorization with CiraSync On-Prem UCM","isPartOf":{"@id":"https:\/\/csop.cirasync.com\/de\/#website"},"primaryImageOfPage":{"@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#primaryimage"},"image":{"@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#primaryimage"},"thumbnailUrl":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg","datePublished":"2022-04-18T20:14:40+00:00","dateModified":"2026-03-25T02:21:28+00:00","description":"Certificate-based authorization with CiraSync On-PremUCM: enable secure access using certificates, reduce password risks, and keep Exchange sync compliant and reliable.","breadcrumb":{"@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#breadcrumb"},"inLanguage":"de","potentialAction":[{"@type":"ReadAction","target":["https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/"]}]},{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#primaryimage","url":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg","contentUrl":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2022\/04\/Create-a-certificate-manually-or-automatically-with-itrezzo-1024x685.jpg"},{"@type":"BreadcrumbList","@id":"https:\/\/csop.cirasync.com\/de\/support\/certificate-based-authorization-with-csop-ucm\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/csop.cirasync.com\/de\/"},{"@type":"ListItem","position":2,"name":"Certificate-Based Authorization\u00a0with CiraSync On-Prem UCM"}]},{"@type":"WebSite","@id":"https:\/\/csop.cirasync.com\/de\/#website","url":"https:\/\/csop.cirasync.com\/de\/","name":"CiraSync On-Prem - Sync Global Address List and Public Folders","description":"Sync the GAL and Public Folders to Outlook and smartphones","publisher":{"@id":"https:\/\/csop.cirasync.com\/de\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/csop.cirasync.com\/de\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"de"},{"@type":"Organization","@id":"https:\/\/csop.cirasync.com\/de\/#organization","name":"CiraSync On-Prem contact management and sync software","url":"https:\/\/csop.cirasync.com\/de\/","logo":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/csop.cirasync.com\/de\/#\/schema\/logo\/image\/","url":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2020\/04\/logo.png","contentUrl":"https:\/\/csop.cirasync.com\/wp-content\/uploads\/2020\/04\/logo.png","width":172,"height":40,"caption":"CiraSync On-Prem contact management and sync software"},"image":{"@id":"https:\/\/csop.cirasync.com\/de\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/itrezzo","https:\/\/x.com\/itrezzo","https:\/\/www.linkedin.com\/company\/sync-the-global-address-list-to-an-iphone-android-or-blackberry","https:\/\/www.youtube.com\/channel\/UCyAwGMuXo3HPNDpZeBAQyNQ"]},{"@type":"Person","@id":"https:\/\/csop.cirasync.com\/de\/#\/schema\/person\/74e384330ca042154b0a919fbe1fbc3c","name":"iog@ciraapps.com","image":{"@type":"ImageObject","inLanguage":"de","@id":"https:\/\/secure.gravatar.com\/avatar\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=gcd31eb4ab373576f41fb6c5a8054fa52","url":"https:\/\/secure.gravatar.com\/avatar\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=g","caption":"iog@ciraapps.com"}}]}},"authors":[{"term_id":1190,"user_id":13,"is_guest":0,"slug":"ikimi","display_name":"iog@ciraapps.com","avatar_url":"https:\/\/secure.gravatar.com\/avatar\/a53a3bfa22a6e4ed6682d08e5c634e2c20be9dfba3e712a07cdbd26d90d24e78?s=96&d=mm&r=g","0":null,"1":"","2":"","3":"","4":"","5":"","6":"","7":"","8":""}],"_links":{"self":[{"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/posts\/10330","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/users\/13"}],"replies":[{"embeddable":true,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/comments?post=10330"}],"version-history":[{"count":3,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/posts\/10330\/revisions"}],"predecessor-version":[{"id":13507,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/posts\/10330\/revisions\/13507"}],"wp:attachment":[{"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/media?parent=10330"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/categories?post=10330"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/tags?post=10330"},{"taxonomy":"author","embeddable":true,"href":"https:\/\/csop.cirasync.com\/de\/wp-json\/wp\/v2\/ppma_author?post=10330"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}