Exchange / Push Email / M3100

[Guest StGeorge]

Hi

I was wondering of anyone can help me, I am having real problems installing a self sign certificate on my M3100. I have searched the web and cannot find a definitive user guide to help me. The annoying thing is that prior to a new laptop I did have this working but I didnt make comprehensive notes and cannot find the missing link! We have a SBS machine running exchange with OWA and all works fine with our self sign certificate. I have tweaked the registry on my M3100 but I cannot find out how to install the certificate. I have copied it to "Storage" but when I click on sbscert I get a "Cannot Access Certificate" error. When I try and connect to the Exchange server I get the following error:

"The security Certificate on the Server is invalid. Contact your exchange server administrator or ISP to install a valid certificate on the server" - which I assume is cos the device doesnt have the certificate installed?

Would be greatful of any help - I am at a bit of a loss here to remember how I got it working and TBH, having had push I dont want to go back to POP3 ;)

cheers

Ed

[Guest niek_groot]

Hi Ed,

Certificates should install by just 'clicking' on the certificate in the File Explorer app. You can obtain the certificate to install by visiting the SSL secured OWA in Internet Explorer, viewing and installing the certificate, and then exporting it to a file from Tools > Internet Options > Content > Certificates. The imported certificate will likely reside in the "Intermediate Certification Authorities" store. Be aware that some operators will not allow the installation of certain certificates though - although I have not yet come across that problem.

Default behaviour for WM5 will not allow wildcard certificates (*.contoso.com) or certificates that have 'other' problems, such as having been issued for an address other than that which you are connecting to (e.g. connecting to mail.contoso.com with a www.contoso.com certificate). You can disable certificate checking by adding a registry entry using a tool such as PHM Registry Editor. Note that this does have some security implications - check with your sysadmin if you are concerned.

Hkey_Current_User\Software\Microsoft\ActiveSync\Partners\{The GUID of your Exchange ActiveSync connection} (Check values in that key such as Name to give you a hint as to which one)

Type: DWORD

Name: secure

Value: 0

Hope that is of some help ;)

Edited April 10, 2007 by niek_groot

[Guest MikeSel]

If your still stuck try www.emoze.com, i have a similar problem.

Edited April 24, 2007 by MikeSel