Re: Invalid certificate on server - mobility issue
- From: Tom <Tom@xxxxxxxxxxxxxxxxxxxxxxxxx>
- Date: Thu, 14 Feb 2008 04:39:03 -0800
Thanks, Rich, for your help. I'll get a valid certificate and go forward
with your instructions. If I have further ?s, I'll post them but I think
you've gotten me over the hump! I appreciate your specificity, too!
Tom
"Rich Matheisen [MVP]" wrote:
Tom <Tom@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:.
Rich,
I don't understand your question, I'm sorry. I'm not too sure if we have an
SSL certificate or where to get one.
If you didn't have one you wouldn't be seeing the diagnostic message
telling you that the one you have is invalid. :-)
Where would you get one? From a Certificate Authority. godaddy.com,
thawte.com, verisign.com, digicert.com, or one of the several others.
You can also issue your own certs from a CA you run -- but they won't
be trusted by anyone else unless you convince them add your CA's root
cert to their list of trusted CAs.
I thought (?) that maybe IIS provide
some certificates, but I really haven't a clue.
Start the MMC. Add the "Certificates" snap-in. Set it to use the local
computer account. Then look in the "Personal" container. Is there a
certificate there?
You can (or should) see the certificate you're using in the Exchange
System Manager.
What do you mean by "CA trusted by your SmartPhones and laptops"? My laptop
got the OWA certificate by allowing the connection to be trusted via IEv7.
So you've told the browser to ignore the problem with the certificate.
That doesn't fix anything, it just ignores it.
At least that's what I remember when i did it.
So how do I a) Get a certificate for my Motorola Q9c and/or b) allow my Q9c
to accept Exchange as-is or c) whatever else....
Spend the US$20 and get a real SSL certificate from a CA that's
trusted by the devices you use. The OEMs should be able to tell you
which root and intermediate certifcates they've loaded into the
devices.
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@xxxxxxxxxxxxx
Or to these, either: mailto:h.pott@xxxxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxx mailto:melvin.mcphucknuckle@xxxxxxxxxxxxxxx
- References:
- Re: Invalid certificate on server - mobility issue
- From: Rich Matheisen [MVP]
- Re: Invalid certificate on server - mobility issue
- From: Tom
- Re: Invalid certificate on server - mobility issue
- From: Rich Matheisen [MVP]
- Re: Invalid certificate on server - mobility issue
- Prev by Date: Re: Exchange 2007 - Ressource Mailbox config
- Next by Date: Re: Archiving to Mailbox Stops E-Mail within Store
- Previous by thread: Re: Invalid certificate on server - mobility issue
- Next by thread: Re: Problems with Global and offline address books
- Index(es):
Relevant Pages
|