Peeps,
I am trying to disable the Certificate check on WM5. I have setup an Exchange server 2003 with SP2, and have created my own SSL Certificate. Activesync is refusing to syncrohnise with my server as its not a trusted certificate. Without using a free SSL certificate is there anyway I can get round this?
Thanks
Pdog
Hello,
I would like to have your experience feedbacks about Direct Push and SSL under WM5.
I have my own authority of certification (Windows 2003 Server) and I generated the root certificate and installed this one in the terminal.
But activesync does not function (error 8001014). Lot of articles covers the subject, how to add certificates root, the activesync errors, but nothing goes. I spent already much time on the subject.
Then I decided to contact Microsoft. The answer is surprising: Microsoft use direct push with HTTP and not with https (strange isn't it ?)
Here their answer: "Indeed, we have in-house HTC but we pass in HTTP and not in https… If not, WM5 in SSL functions and all the incidents which I saw relate to WM5 and not WM6 and the resolution were to pass in HTTP "
I have create this post to know if somebody made a success of this exploit or if it is really impossible...
Thanks in advance
PS: Does WM6 works with SSL/Direct Push/Own certificate ?
Anyone Please ?
I am using SSL over WM6 right now. What I did was I renamed my *.crt file to *.cer and then put it into the mobile phone and clicked on it to install the certificate. After that I can use SSL over Exchange.
-TKN
Do you have FormBased Authentication enabled? If so; read this: http://www.petri.co.il/problems_with_forms_based_authentication_and_ssl_in_activesync.htm
And perform option 3. I'm running Exchange 2003 with SLL and Form Based Authentication enabled, and having pushmail.
I am not exactly using Exchange Server but something similar. It is a software by Kerio called Kerio Mail Server. It has push mail features and many other features that exchange lack. Setup is very simpler for me on Kerio than on Exchange but the procedure for setting up Push Mail is very simple: go into your pocket pc, setup the server information and ssl if using it. Then download the certificate from the kerio mail server and rename the file from *.crt to*.cer for windows mobile to be able to install it. Then once it is installed, you can sync and receive mail on pocket pc using push mail. I am not familiar with Form Based Authentication and I think it has no relationship with Push Mail unless you are using it without SSL. I don't think you can use Form Based Authentication since there is only SSL option in the pocket pc. Hope this helps!
-TKN
I don't know what Georgeot uses for mail. I assumed he used Exchange. And with exchange there is a problem with the ActiveSync, FormBased Authentication and SSL on one computer.
I'm having certificate problems DirectPush. The exchange server 2003 is configured and setup and webmail works.
I have configured my Xda Orbit 2 to use direct push but get the following error:
"The security cerfificate on the server is not valid. Contact your Exchange Server administrator or ISP to install valid certificate on the server"
Support code: 0x80072F06
I have ported the certificate from the server to the device and registered it. Is there a hosts file equivilant on WM6 so it can resolve the IP address of my server to the certificate I have installed?
Thanks,
Mike
Follow this http://blogs.msdn.com/windowsmobile/archive/2006/01/28/making_a_root_cert_cab_file.aspx
It was the only way I could get around it. Installing it from the cab file worked brilliantly too, makes it easier to do too. And it makes vista sync with the exchange server, as long as you've installed the root certificate. Yer make sure it's the Certificate Authorities Root Certificate to make it work best
Thanks for the reply Nick, I will look into it now.
Hi,
When I'm trying to setup mail to an Exchange server, there is no option to accept SSL certificates. Therefore it is failing.
Am I missing something obvious here?
Cheers
Hi,
When I'm trying to setup mail to an Exchange server, there is no option to accept SSL certificates. Therefore it is failing.
Am I missing something obvious here?
Cheers