Skip to Content

iPhone OS 3.1 now enforces Exchange encryption policy, may block pre-3GS iPhones

The Apple Support forums are a'buzz with reports of several users upgrading to iPhone OS 3.1 and discovering a new "feature" which was not available previously. As mentioned in our comments, after upgrading to 3.1, some original iPhone and iPhone 3G owners with Exchange accounts are having trouble accessing their email. Apparently the server-side encryption policy option for mobile devices (only available as of Exchange 2007 SP1) is now being appropriately enforced.

This is not affecting owners of the iPhone 3GS, due to the newer device's support for Exchange encryption. Prior to iPhone OS 3.1 the encryption policy was ignored for all models. Now that 3.1 is available, users are seeing this policy being correctly enforced and older iPhones without encryption support are left without access to Exchange services.

I have yet to find any reports of issues with the iPod touch, but I suspect that it will also be affected by this software change. We're awaiting confirmation from Apple on whether this will impact the newly announced iPod touch models as well.

While many are reacting to this issue as though it's a bug, and are reporting it as such, the reality is that the Exchange encryption requirement is a feature and the fact that it was not being correctly enforced was actually a security hole. IT administrators with Exchange 2007 SP1 servers and iPhone clients are probably going to be fielding an above-average level of incoming questions, but at least they can rest easy knowing that Exchange encryption is now working correctly. Cold comfort for their users, though.

If you are running into this issue, the straightforward (though pricey) solution is to upgrade to the iPhone 3GS; or consider bribing your IT guy with Red Bull so he will disable the encryption requirement for mobile devices. But we want to hear from you; are you using an Exchange account? Can you still access it following the upgrade to 3.1? Which device are you using, iPhone or iPod touch; 3G or 3GS? Is this a little thing that means a lot to you from a security perspective or have you been left high and dry without access to critical email?

Update: MacRumors points out that Apple has now covered this situation in a new KB article.

[Via Broadband Reports]

The Apple Support forums are a'buzz with reports of several users upgrading to iPhone OS 3.1 and discovering a new "feature" which was not...
 

Add a Comment

*0 / 3000 Character Maximum

30 Comments

Filter by:
b1loveu

is it possible to upgrade applications on 3gs iphone jailbroken?
if they upgrade it, will it causes problem?

thanks for ya answer

September 21 2009 at 5:57 AM Report abuse rate up rate down Reply
sensi

Another optioIt doesn’t. Strangely, once one begins extracting data from an iPhone 3GS, the iPhone begins to decrypt the data on its own"n for 2G owners is not to upgrade to 3.1.

September 16 2009 at 1:47 PM Report abuse rate up rate down Reply
Bart

Apple's KB Article
http://support.apple.com/kb/TS2941
still does not make matters any clearer.
quote... "Note that iPhone 3GS supports device encryption."
Does that mean:
1/ That data has to be encrypted when stored on the iPhone's flash memory so that it can be wiped or at least the AES 256 Key can be destroyed if the device is lost or stolen.
Or
2/ Does it mean the iPhone begins decrypting the data stream on its own without any need for the user to attempt to decrypt the data.

If 1/ iPhones before 3GS are insecure and Apple allowed them to work around Exchange Server's requirement for a flag which essentially says "I'm secure!"
If 2/ Pre 3GS iPhones cannot decrypt data streams (as I understand Apple's comment "Note that iPhone 3GS supports device encryption." so I'm saying it's 1/ therefore Apple is guilty of using security through obscurity, which is the same as no security.

September 15 2009 at 10:46 PM Report abuse rate up rate down Reply
jgardner04

I have a regular 3G and upgraded to the 3.1 software this morning. I have an Exchange 2007 environment and am running without any issues.

September 11 2009 at 4:04 PM Report abuse rate up rate down Reply
wallywho

I use interways.net and my iPhone 3G with OS 3.1 works perfectly. I can recommend interways.net, very good service, great support people, low price...

September 11 2009 at 12:41 PM Report abuse rate up rate down Reply
Tim

I've never really been mad at Apple before, but this one has got me. I've been wanting e-mail from our Exchange ever since I started with my new company last year. We finally have it, and because I'm an early adopter of the 3.1 software on a 3G phone, now I can't get it.

They should have put in BOLD letters before upgrading that this release will disable exchange sync'ing on phones older than the 3GS and should have asked 3 or 4 times for confirmation that you wanted to take the 3.1 upgrade.

This is a very bad customer relations issue for them. They just alienated a large group of people who had bought the ads that iPhone 3.0 supported Exchange and rushed to get their companies to let them have their corporate e-mail.

Once a company realizes that it only worked because of a security hole, they will be unlikely to turn off encryption.

Of course, I'm probably going out right now and get a 3GS, so maybe this was a marketing ploy on the part of Apple -- and I'm falling for it!

September 11 2009 at 12:23 PM Report abuse rate up rate down Reply
1 reply to Tim's comment
Mo

I agree completely -- Apple should have given a warning with 3.1 for Exchange users. This is a major drag. My only option seemingly is to shell out $399 to AT&T for an "early upgrade." I highly doubt my IT department will disable the encryption requirement.

September 26 2009 at 12:57 PM Report abuse rate up rate down Reply
Bob

I have a 3gs and ugraded to 3.1. I can get email from our Exchange server 2003, but the calendar is kaput!

September 10 2009 at 9:55 PM Report abuse rate up rate down Reply
Aaron

My employer already made the decision for me. After having been supported on iPhones for about a year, we (the 40% of the office on the iPhone) awoke one morning to find that my employer had shut us off overnight due to these very security concerns. Email, contacts, calendars, all gone. We came into the office that morning to learn that we were now a Blackberry-only shop.

They say you never realize what a great thing you had until its gone – they weren’t kidding.

It’s been a painful transition – simple things (visual voicemail, a decent app store, native iTunes support) just don’t exist on the other side of the great divide. My phone has gone from being a major piece of how I experience my day – a real smartphone – to being simply an email and cellular device that takes up too much space in my pocket.

Mind you, all of us iPhone users paid for those devices out-of-pocket, which left a lot of people feeling jaded to start with, but this has been a nightmare.

September 10 2009 at 4:40 PM Report abuse rate up rate down Reply
2 replies to Aaron's comment
JKT

Let us know the name of your employer so we know not to apply for a job there. ;-)

September 10 2009 at 5:59 PM Report abuse rate up rate down Reply
Grant

My employer is currently debating this. I hope this will go some way to reverse their decision.

September 11 2009 at 5:56 AM Report abuse rate up rate down Reply
kpwong

Greg. Try to disable your exchange account. Then change your time for pin requirements. You should have the one hour option again. Enable your exchange account and you should be all set.

September 10 2009 at 3:27 PM Report abuse rate up rate down Reply
Sean

Another option for 2G owners is not to upgrade to 3.1.

September 10 2009 at 3:07 PM Report abuse rate up rate down Reply
Buy an ad here

Hot Apps on TUAW

Tweets

© 2012 AOL Inc. All Rights Reserved.