I have been doing a bit of research on how to solve some frustrations our users have with mobile email and it looks like changing the Exchange settings to allow cert-based auth will help. I have been able to find plenty of instructions on how to set this up but the thing I have to demonstrate to our messaging team is that this is a low-risk proposition. What, if any, problems could we expect to see if we allow client certificates in addition to basic authentication?
For some context, we have an Exchange 2007 deployment and our users are connecting via ActiveSync. We are using an EMM platform to manage the email configuration and distribution of the client certificates so I only really need help finding information on what side effects may crop up on the Exchange server itself if we make this change.