hello ppl,
does anyone know hot to make WM6 trust a certain root CA/certificate? I have a Commodo SSL certificate on my exchange server and because WM6 doesn't trust it (for some reason), I cannot use Push Mail.
installing the certificate doesn't help.
Does the Root Certificate appear in Settings/Certificates/Root?
Has the Root Certificate been installed on the device OK? i.e. does it appear in Settings/Certificates/Root? If it does that should be enough for your device to trust it and certificates issued by the same CA.
I have two root certificates installed on my WM6 device (over the default ones) -one for push email and the other for Wireless (I also have a client certificate for wireless since we use EAP-TLS for Wireless Authentication). The one for push email was installed via a .cab file, the other automatically installed when I enrolled for the client certificate from an AD-integrated CA via ActiveSync.
Some info here for creating a .cab file for your root certificate:
http://www.amset.info/pocketpc/certificates3.asp
HTH
Andy
when I install the certificate it appears as an intermediate CA.
am I installing the wrong certificate?
How do I get my ATT Tilt Windows mobile 6 to recognize my root cert in activesync? I open up Active Sync on my Tilt, click on menu, options, Microsoft Exchange, E-mail, then click settings, then advanced, then choose certificate, the list is empty and I have no choice to add an ssl cert at all? Where does it pull the list from and how do I go about adding one? Keep in mind I already have my ssl cert from my exchange server 2003 sp2 showing up in the root certificates folder on my Tilt. Your help is much appreciated.
Thanks in advance.
I have the same issue, certificate is installed in root folder but not appearing in "choose certificate" option...
My company standard for pda's is the crackberry. However, I was able to connect to our exchange server with my ATT Tilt. I believe that our IT dept has now enabled some security feature that will not allow my phone to connect to the server anymore.
Using WM 6.1
Any ideas?
it sounds like the server cert is invalid. you can get more information on the error using activesync to set up the server source.
anyway, your it geeks must give you a copy of the server cert (.cer file). They can export it, and you can use activesync to put it onto your device
Thanks for the help. They've now established a "pilot" program for WM6, so I don't know if they'll actually give me a copy of the server cert. I was able to copy the cert that was assigned to my PC and install it on my device, but still no dice. It was installed as an Intermediate and not a root. I don't know if that makes a difference or how/if it can be changed if it does.
Im not sure either. It would take the it geeks about 30 seconds to generate the .cer file. I had the same problem as you, so I exported the certificate from my server, stuck it onto my htc cruise using activesync, then using file explorer, navigated to the .cer file, clicked on it, and it worked.
The certificate I exported was the exact on that was imported to iis.
thanks again.
For some reason the cert from the server is not working. Could you check to see if yours was installed as a root or an intermediate when you get a chance?
This is going to be a HUGE bummer if I have to get a crackberry.
to get the cert:
1) on the server where iis is running, run mmc
2) add the certificate snap-in referencing the local computer.
3) navigate to Personal or Trusted Root certificates (depending if your cert is self-signed or from a CA), find the cert that was used for the iis web service that is running OTA, right click on it, then select export (.der format will be ok).
4) have the it geeks give this file to you.
5) using activesync, move it to you device.
6) using file explorer on the device, navigate to where the .cer file is, then click on it.
7) thats it.
Step 4 is the problem. I don't think I'll get the cert from IT because I'm not part of the pilot program. This was a recent change that required certificates to crack down on renegades like me.
I guess I'll have to wait until they roll out the corporate wide program.
Oh well, Crackberry here I come.
Thanks again for the info.
Does anyone know how an exchange serve tells the difference between remote access from a desktop and remote access from a handheld?
The address is really different. webmail is at www.yourdomain.com/exchange, which over the air activesync is www.yourdomain.com/?something? (im not sure exactly). The ppc activesync program knows what to append to the end of your url to activate the correct application pool on the server.
I was configuring communicator on my omnia and got everything installed and server address are correct. However when I go to sign on it says "cannot verify certificate." I know there are reg keys needing modified but I am not sure which. Can anyone please advise. Also is there a 6.5 mobile rom for the Omnia.
can you pls, tell me where i ca get this application (office communicaTOR) for omnia?
I am trying to connect and perform FTP/SSH from my WM (custom ROM) to iPod (jailbroken).
The tools I use is PocketPutty (for SSH) and Resco FTP (add in to the Explorer). The other tool is MobileFTPClient. When SSH connected, it prompted that the certificate is not recognized and requires user to accept. Once accepted, it works ok.
When using Resco, it says secure connection is not established. My guess is that certificate issue. However, it has no option to add the cert. Same with MobileFTPClient, it just give cert error too.
Question: how do I add this iPod's cert into the WM so that the FTP using Resco can work? I have the hex value.