[ExchangeList] Re: Problem setting up Microsoft Exchange Active Sync

Thanks Rick.

________________________________

From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Rick Boza
Sent: Tuesday, April 21, 2009 11:04 AM
To: exchangelist@xxxxxxxxxxxxx
Subject: [ExchangeList] Re: Problem setting up Microsoft Exchange Active
Sync


While its definitely easier with a cert purchased from a trusted root,
all that is involved in getting it to work with a cert from your own CA
is installing a copy of your cert onto the device.  

See http://technet.microsoft.com/en-us/library/cc182295.aspx and
http://www.jacco2.dds.nl/networking/windowsmobile-certinstall.html for
info. 

Rick


On Tue, Apr 21, 2009 at 10:56 AM, Todd Lemmiksoo
<tlemmiksoo@xxxxxxxxxxxx> wrote:


        Thanks Chris. I don't think I can get the President of our
company to pay for a commercial certificate right now. This is the only
mobile device that would be using ActiveSync.

________________________________

        
        From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Wall
        
        Sent: Tuesday, April 21, 2009 10:01 AM 

        To: exchangelist@xxxxxxxxxxxxx
        Subject: [ExchangeList] Re: Problem setting up Microsoft
Exchange Active Sync
        


        That would be the problem...

         

        This is the only reason that I went with a well known Cert
Authority (and one that Windows Mobile as well as other Mobile devices
will accept).

         

        Paying for the Cert will save you many hours of troubleshooting
with Mobile devices and will keep you from having to physically touch
each device to force the Cert to be accepted (this in itself is a pain).

        
        
        

         

        From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Todd Lemmiksoo
        Sent: Tuesday, April 21, 2009 9:36 AM
        To: exchangelist@xxxxxxxxxxxxx
        Subject: [ExchangeList] Re: Problem setting up Microsoft
Exchange Active Sync

         

        I created the Cert in-house, my DC (PDC) is my CA. Our OWA url
is https://owa.all-mode.com

         

        The mobile device belongs to one of our sales guys, it is a PALM
Treo 700wx with WM 6.0 software.

        I will check the links you provided next.

         

        Todd

         

________________________________

        From: exchangelist-bounce@xxxxxxxxxxxxx
[mailto:exchangelist-bounce@xxxxxxxxxxxxx] On Behalf Of Chris Wall
        Sent: Tuesday, April 21, 2009 9:27 AM
        To: exchangelist@xxxxxxxxxxxxx
        Subject: [ExchangeList] Re: Problem setting up Microsoft
Exchange Active Sync

        Todd -

         

        Who is your Certificate Authority and what type of Cert is it?

         

        Windows Mobile devices recognize only a small # of Certificates
(especially older Windows Mobile devices).  If you are having issues
connecting, the issue most likely is that the Cert you are using on your
front end is not an accepted one for Windows Mobile devices.

        See this: http://support.microsoft.com/kb/915840

         

        Or this:
http://www.google.com/search?sourceid=navclient&ie=UTF-8&rlz=1T4GGLL_en&;
q=Windows+Mobile+trusted+SSL+

         

        To verify, you can request a 'trial' certificate from Thawte.com
(SSL 123 type) and deploy.  This is a fully functional cert for 30 days
that is accepted by all Windows Mobile devices without having to force
the device to accept it and the authority.

         

        What is your OWA URL?  

        
        good luck.

         

        Chris

        
________________________________


        From: Todd Lemmiksoo <tlemmiksoo@xxxxxxxxxxxx>
        To: exchangelist@xxxxxxxxxxxxx
        Sent: Monday, April 20, 2009 7:20:46 PM
        Subject: [ExchangeList] Problem setting up Microsoft Exchange
Active Sync

        I'm have difficulty setting up Exchange ActiveSync in a single
Exchange 2003 setup. The Exchange server is front ended by ISA2006 SE. I
have read and used the article "How to Publish Microsoft Exchange Active
Sync with ISA Server 2006" by Marc Grote. The error that the mobile
device gets is "The security certificate on the server is invalid.
Support Code : 0x80072f0d". I have the OWA certificate installed on the
Exchange and ISA servers since Sept 2007. OWA has been working fine
since that time. I think my problem is related to SPN for
HTTP/owa.all-mode.com. Should this be on the Exchange or ISA server?

        Any help is greatly appreciated. 

        Todd Lemmiksoo 
        Network Administrator 

        All-Mode Communications, Inc. 
        1725 Dryden Road 
        Freeville, New York  13068 
        (607) 347-4164 x440 
        1-877-ALLMODE  (toll free) 
        http://www.all-mode.com <http://www.all-mode.com/>

Other related posts: