Windows Mobile 6 and SSL Exchange Connection

[Guest smartster]

Hi,

Our organisation uses Microsoft Exchange, with a wildcard *.company.org.uk attached.

Using a windows mobile 6 device (Orange E650), we'd like to remote sync via the exchange server over ssl to pick up emails, calender, tasks etc. The wireless mobile has been configured on the Exchange Server using a wildcard cert issued by Digicert. I know that digicert aren't one of the devices default trusted signers.

If we create an Active Sync connection and remote connect (without SSL enabled), the device syncs with the Exchange Server. However, with SSL enabled on the Active Sync connection we receive the following error:

The Security certificate on the server is not valid. Contact your exchange server administrator or ISP to install a valid certificate on the server.

Support Code: 0x80072F0D

I've also tried exporting the root and intermediate certificates from my IE browser and importing then onto the device using the CertInstaller shipped with Windows Mobile 6, and although the certs are succefully imported onto the device, the same error appears on connecting via SSL.

Any suggestions?

[Guest Stepir]

Had the same issue with a self signed certificate and solved with this trick:

Take the certificate file exported (root certificate exported throught IE) and rename it exactly with the exchange server netbios name (I don't recal if I used a fully qualified name. Try both) and then reimport it in the windows mobile device (just open it with any file manager).

I.E.:

exchange server name: srv01

domain name: yourcompany.com

take the certificate file and rename it in srv01.cer and import it

take the certificate file and rename it in srv01.yourcompany.com.cer and import it

let me know if it works :)

Edited August 22, 2007 by Stepir

[Guest smartster]

Thanks for the reply,

I have now tried both the siteexc01.cer and siteexc01.company.org.uk.cer, however the same issue continues.

???

[Guest wikl]

Hello,

thanks for the hint, it worked with me. I first imported the certificate into a big windows as "vertrauenswürdige stammzertifizierungsstellen", maybe trustworthy rootcertificate signers (sorry, I dont know the real english name for it) and then exported it as owa.domain.com.cert and imported it into the mobile device. It worked.

Greetings from Austria,

WiKl

---

klenner.at

A-1220 Wien, Stadlbreitener Anger 21

Talkto: +43-1-812 32 30/0

Faxto: +43-1-812 32 30/30

mailto: [email protected]

surfto: http://klenner.at

readto: http://blog.klenner.at

---

[Guest Stepir]

Thanks for the reply,

I have now tried both the siteexc01.cer and siteexc01.company.org.uk.cer, however the same issue continues.

???

Try adding the followings registry keys:

HKCU\Software\Microsoft\Airsync\Connection\Secure=0

and secure=0 under

HKCU\Software\Microsoft\Activesync\Partners\[Choose the over air connection you will find all the connection defined in activesync here]\Secure = 0

let me know