Click here to get back home

ActiveSync - Certificate problems - Help

 HomeNewsGroups | Search | About
 microsoft.public.smartphone    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
ActiveSync - Certificate problems - Help Toby 02-09-2006
Posted by Toby on February 9, 2006, 11:38 am
Please log in for more thread options
I am having major issues trying to get my new Treo 700w to use ActiveSync. I
keep getting a message that my certificate is invalid. We have no problems
with people using OWA, OMA and RPC over HTTP, so how can the certificate be
bad? It is one that we generated. Is there a different way it needs to be
configured for AS? We are trying to move away from Blackberry's and if I
can't get this to work it will be difficult. I have even copied the
certificate over to the phone, when I click it I am asked if I want to
install it. So I'm assuming that it is getting properly installed, it is
listed under Root certificates. What else can I do? Thanks.

Posted by Toby on February 9, 2006, 11:49 am
Please log in for more thread options
More info: The domain name we use is like www.companymail.com. This is what
we use for OWA and RPC over HTTP. For OMA its the same with a \OMA at the
end. Being that we issued our own certificate we do get the warning box when
using OWA that the cert is not from a trusted publisher, but we get green
check marks for security certificate date is valid and that the name of the
cert matches the page I'm trying to view. To me that shows that the cert is
OK. However I can not get AS to work. Is there some special settings that
are needed in the cert for AS?

We are running Exchange 2003 w/SP2 in a front-end / back-end server config.

"Toby" wrote:

> I am having major issues trying to get my new Treo 700w to use ActiveSync. I
> keep getting a message that my certificate is invalid. We have no problems
> with people using OWA, OMA and RPC over HTTP, so how can the certificate be
> bad? It is one that we generated. Is there a different way it needs to be
> configured for AS? We are trying to move away from Blackberry's and if I
> can't get this to work it will be difficult. I have even copied the
> certificate over to the phone, when I click it I am asked if I want to
> install it. So I'm assuming that it is getting properly installed, it is
> listed under Root certificates. What else can I do? Thanks.

Posted by Chris Jordan on February 10, 2006, 4:53 am
Please log in for more thread options
There should be two certificates you need to copy to the device. The root
cert first, then the higher level one.

These might help:
http://blogs.msdn.com/windowsmobile/archive/2005/11/03/488924.aspx

http://blogs.msdn.com/windowsmobile/archive/2006/01/28/making_a_root_cert_cab_file.aspx



> More info: The domain name we use is like www.companymail.com. This is
> what
> we use for OWA and RPC over HTTP. For OMA its the same with a \OMA at the
> end. Being that we issued our own certificate we do get the warning box
> when
> using OWA that the cert is not from a trusted publisher, but we get green
> check marks for security certificate date is valid and that the name of
> the
> cert matches the page I'm trying to view. To me that shows that the cert
> is
> OK. However I can not get AS to work. Is there some special settings
> that
> are needed in the cert for AS?
>
> We are running Exchange 2003 w/SP2 in a front-end / back-end server
> config.
>
> "Toby" wrote:
>
>> I am having major issues trying to get my new Treo 700w to use
>> ActiveSync. I
>> keep getting a message that my certificate is invalid. We have no
>> problems
>> with people using OWA, OMA and RPC over HTTP, so how can the certificate
>> be
>> bad? It is one that we generated. Is there a different way it needs to
>> be
>> configured for AS? We are trying to move away from Blackberry's and if I
>> can't get this to work it will be difficult. I have even copied the
>> certificate over to the phone, when I click it I am asked if I want to
>> install it. So I'm assuming that it is getting properly installed, it is
>> listed under Root certificates. What else can I do? Thanks.



Posted by Toby on February 10, 2006, 8:31 am
Please log in for more thread options
Yes, that is exactly what I had to do. I had tried that before, but I put
our CA cert on second. I did a hard reset, added the CA first then the cert
for our Front End server and then it worked. Thanks

"Chris Jordan" wrote:

> There should be two certificates you need to copy to the device. The root
> cert first, then the higher level one.
>
> These might help:
> http://blogs.msdn.com/windowsmobile/archive/2005/11/03/488924.aspx
>
>
http://blogs.msdn.com/windowsmobile/archive/2006/01/28/making_a_root_cert_cab_file.aspx
>
>
>
> > More info: The domain name we use is like www.companymail.com. This is
> > what
> > we use for OWA and RPC over HTTP. For OMA its the same with a \OMA at the
> > end. Being that we issued our own certificate we do get the warning box
> > when
> > using OWA that the cert is not from a trusted publisher, but we get green
> > check marks for security certificate date is valid and that the name of
> > the
> > cert matches the page I'm trying to view. To me that shows that the cert
> > is
> > OK. However I can not get AS to work. Is there some special settings
> > that
> > are needed in the cert for AS?
> >
> > We are running Exchange 2003 w/SP2 in a front-end / back-end server
> > config.
> >
> > "Toby" wrote:
> >
> >> I am having major issues trying to get my new Treo 700w to use
> >> ActiveSync. I
> >> keep getting a message that my certificate is invalid. We have no
> >> problems
> >> with people using OWA, OMA and RPC over HTTP, so how can the certificate
> >> be
> >> bad? It is one that we generated. Is there a different way it needs to
> >> be
> >> configured for AS? We are trying to move away from Blackberry's and if I
> >> can't get this to work it will be difficult. I have even copied the
> >> certificate over to the phone, when I click it I am asked if I want to
> >> install it. So I'm assuming that it is getting properly installed, it is
> >> listed under Root certificates. What else can I do? Thanks.
>
>
>

Similar ThreadsPosted
Problems to create Wifi connection with WPA + TKIP + Certificate December 8, 2007, 5:08 am
Problems with ActiveSync 3.8 after installing and uninstalling ActiveSync 4.0 July 14, 2005, 4:52 pm
Activesync SSL Certificate with Exchange Server and MDA VARIO January 20, 2006, 10:58 am
ActiveSync problems... January 31, 2006, 1:39 pm
Problems with Activesync April 11, 2006, 3:33 pm
WM5, ActiveSync and T-Mob SDA: No Problems! (Is that a problem?) March 1, 2006, 10:27 pm
Activesync Problems with i930 September 21, 2006, 10:58 am
ActiveSync 4.5 Beta 2 Problems November 16, 2006, 12:02 pm
ActiveSync 4.2 Problems with Cingular 2125 August 21, 2006, 2:22 am
Problems Syncing Blackjack with ActiveSync May 8, 2007, 11:54 pm

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap