|
Posted by deane.barker on August 14, 2006, 1:05 am
Please log in for more thread options Thanks, Chris.
I did get this working after all. To answer my own questions:
1. Yes, installing the cert and self-signing worked, but only because
my device allowed it. During my research, I found that a lot of
devices do not allow self-signed certs because they don't trust the
root. Luckily, the first device I had to work with doesn't have that
problem.
2. Yes, I had to manually export and install it, but it was trivially
simple. You export the cert from the MMC to a .cer file. Manually
transfer that to the device, and double-click it.
3. See #1.
Deane
Chris De Herrera wrote:
> Hi,
> A self signed cert will work if you want to use that. However you will have
> to install it on every device. If you purchase a public cert it will work
> without this requirement.
>
> See http://www.pocketpcfaq.com/faqs/digital_certificates.htm for other
> issues related to using digital certificates.
>
> --
> Chris De Herrera
> http://www.pocketpcfaq.com
> http://www.tabletpctalk.com
> http://www.pocketpctalk.com
> http://www.mobilitytalk.com
>
> ActiveSync 4.x Troubleshooting Guide -
> http://www.pocketpcfaq.com/faqs/activesync/tshoot-as4x.htm
>
> > On two separate client domains, I suddenly have a lot of people with
> > PocketPCs that want to synchronize with the Exchange server. (I
> > remember the good 'ol days when the network stopped at the firewall...
> > :-)
> >
> > In most cases, the PocketPC is failing and complaining about a
> > certificate it needs from the server. I've seen this now with two
> > Motorola Qs and another Samsung device, all running the latest version
> > of the OS and ActiveSync.
> >
> > A few questions to help me get my bearings:
> >
> > Will installing Certificate Services and self-signing a certificate
> > solve this problem?
> >
> > Will I need to manually export and install the certificate on the
> > handheld devices, or will the Exchange Server automatically issue /
> > distribute the certificate to the devices that attempt to connect?
> >
> > Can I self-sign, or do I need to buy a certificate? I understand the
> > reasoning behind buying one, but will the handhelds care if the
> > certificate is purchased or self-signed?
> >
> >
> >
> > Deane
> >
|