Why won't Gateway Server work properly after importing a new certificate?

If you replaced the Gateway computer certificate or certification authority and imported the new certificate to the Gateway Web site, then you must uninstall and reinstall the Gateway Server component.

Does MDM support Gateway Server computers with only a single network adapter?

No. MDM requires two network adapters: one for communicating with external client devices, and one for communicating with internal servers. MDM does not support binding internal and external IP addresses to a single network adapter.

Can I use the MDM Mobile VPN connection to enable Exchange ActiveSync (EAS) on intranet-based Microsoft Exchange Servers?

Yes. If you want tighter security than Secure Sockets Layer (SSL) access, you can use the MDM Mobile VPN connection for double-envelope security on mobile messaging. MDM supports DirectPush in this VPN-to-EAS scenario.

Can users disable the Mobile VPN Connection?

Yes. To disable the Mobile VPN connection, on the device, select Settings, select Connections, select Mobile VPN, and then select Disable. You can also enable or disable the Mobile VPN connection by using the MDM VPN Diagnostics Tool. For information about this tool, see MDM Resource Kit Tools at this Microsoft Web site: http://go.microsoft.com/fwlink/?LinkId=108953 .

What are the consequences of disabling the Mobile VPN Connection?

The device is not protected because without the Mobile VPN connection, it connects to a public Internet connection. Therefore, it is exposed to all of the threats on the Internet.

Device wipes will not function because MDM sends the wipe notification through the alerting mechanism provided by MDM Gateway Server. If you disable the Mobile VPN connection, MDM Gateway Server cannot address the device.

If your company only has MDM–enrolled devices, then Microsoft Exchange Server ActiveSync is not exposed to the Internet. Therefore, if you disable the Mobile VPN connection, the device cannot connect to it.

Does MDM support Windows Mobile Device Center/ActiveSync Desktop Pass-Through connections using USB or Bluetooth?

No. MDM client devices and device emulators cannot establish Mobile VPN connections using Windows Mobile Device Center/ActiveSync Desktop Pass-Through connections.

If I establish a Windows Mobile Device Center/ActiveSync connection, what is the Mobile VPN connection status, and how is network traffic routed?

The following table summarizes how network traffic is routed when you connect the device to a desktop computer.

Mobile VPN Connection Status	Mobile VPN Connection Enabled
ActiveSync RNDIS Multihoming on	Mobile VPN connection stays connected when tethering Local network traffic to desktop computer over the network cable Remote network traffic over the Mobile VPN connection, including internal network traffic
ActiveSync RNDIS Multihoming Off	Mobile VPN connection gets disconnected when tethering Local network traffic to desktop computer over the network cable Remote network traffic over the network cable also, cannot restrict
ActiveSync Serial USB Multihoming on	Mobile VPN connection stays connected when tethering Local network traffic to desktop computer over the network cable Remote network traffic over the Mobile VPN connection, including internal network traffic
ActiveSync Serial USB Multihoming off	Mobile VPN connection gets disconnected when tethering Local network traffic to desktop computer over the network cable Remote network traffic fails
ActiveSync Serial Bluetooth Multihoming on	Mobile VPN connection stays connected when tethering Local network traffic to desktop computer over the Bluetooth connection Remote network traffic over the Mobile VPN connection, including internal network traffic
ActiveSync Serial Bluetooth Multihoming off	Mobile VPN connection gets disconnected when tethering Local network traffic to desktop computer over the Bluetooth connection Remote network traffic fails