Exchange 2003 Sync with Mobile 5 Certificate problem

[Guest budda]

I was hoping to follow the guide here but it appears that the link to Microsoft.com is broken (but i found the exe anyway), and then running the exe gives me:

E:\DisableCertChk>Certchk.exe query

ERROR: Unable to open registry key

I'm wanting to sync a HTC TyTN/MDA Vario II with our Exchange 2003 server SP2 (which has Mobile access enabled as a P910 works fine with it).

Everytime I do a Sync, ActiveSync says the security certificate on the server is invalid, which is true because we made the certificate ourtselves, and OWA mentions this when browsing to the URL too.

I imported the exchange root certificate on to the phone by creating a .crt file and opening it on the phone, which got rid of another certificate warning.

However I now think this is an issue between ActiveSync and the Exchange server, rather than anything to do with the phone.

Does everybody just pay for an officialy SSL cert for their Exchange server?

Edited September 5, 2006 by budda

[Guest randomelements]

Firstly, disablecertchk doesn't work with WM5 so you can ignore that.

The Vario II should be cert unlocked so you should have not problem installing your own root cert.

I take it you are using the Win2K3 certificate authority?

Go to https://{servername}/certsrv

Click on the link for Download a CA certificate, certificate chain, or CRL

You should be looking to save your root certificate (CA Certificate) as a .cer file.

You can then copy this to the phone and run it.

Edited September 5, 2006 by randomelements

[Guest budda]

Firstly, disablecertchk doesn't work with WM5 so you can ignore that.

The Vario II should be cert unlocked so you should have not problem installing your own root cert.

I take it you are using the Win2K3 certificate authority?

Go to https://{servername}/certsrv

Click on the link for Download a CA certificate, certificate chain, or CRL

You should be looking to save your root certificate (CA Certificate) as a .cer file.

You can then copy this to the phone and run it.

We don't have certsrv installed on the Exchange server here. The certificate was created using openSSL on a Linux box.

Having had to hard reset the TyTN I no longer have the root certificate installed on the phone. But the error message from ActiveSync points to "The security certificate on the server is invalid. .... support code: 80072f0d".

That's why I was looking at that 'disablecertchk' thing to remove the certificate check on the desktop PC i'm using to faciliate the initial Exchange sync.