Re: Setting up Push Mail in SBS 2003



Pedro CR <pramilo@xxxxxxxxxxxxxxx> wrote:
Hi

I am posting this to share my experince with setting up Push Mail
(outlook Mobile Access) with Windows Mobile 5/6 on sbs 2003.

Hi - this is very nice of you. My comments are inline -

First and most importante: if you are getting Active Sync Errors while
syncing with the server that you can't figure out, try to access the
/OMA site from the PDA.
It is located at www.YOUREXTERNALADDRESS.com/oma. OMA and active
sync/push mail share most of the code/resources.
Usually accessing that site provides a lot more clues on what's going
wrong.
Also, there is a frequente error - 0×85010014 - which is often
pointed as being caused by forms based authetication but it can also occur
if
there are problems with the SSL certificates.

Generally the first hits you'll get in Google will be SSL cert related. FBA
doesn't work w/o SSL, so that may be why you see FBA mentioned.

Accessing the OMA site tells you if there are problems with
certificates.
Check out these websites for resources on this
http://www.microsoft.com/downloads/details.aspx?FamilyID=8BE70D72-1E5A-4128-A30C-DAFEEB43544D&displaylang=en
- Step by step tutrial that guides you through setting up Push Mail /
Outlook Mobile access on SBS 2003.
Please note that after going through the tuturial I still couldn't
get it to work. I belive it was because the certificates where installed
in the
wrong store.

? Where you install your self-signedcert on the device depends on the device
& the manufacturer/phone company. For example, with Verizon, you need to put
it in a new root folder called \STORAGE. With others, you don't.


Make sure you export both certifcates (the one named
publishing.YOURSITE.LOCAL


You only have one, really.

and the one whose name is your external
website address) to CER files.

All you need is the self-signed cert you create when running the CEICW....

Open Up MMC, Add/Remove Snap-In, and add the Certificates Snap In.
Choose to open the certificates for the local machine.
Then import the CER files into the Trusted Root Store and also into
the Intermediate Certification Authorities.


After doing this I solved causing my 0×85010014 errors.

Hmm - I'm puzzled as to why you did anything like this....you don't need to
(and as long as your server is running fine & you can use SSL to get to
RWW,etc., don't muck with it).

What you need to do is export the SSL cert to a DER encoded .cer file from
any computer - go to RWW or OWA if you like.

Then copy it to the device via Activesync explorer & launch it - or create a
cab file & copy that.

Check this out if you run into problems with the certificates:
http://www.microsoft.com/technet/isa/2004/plan/tscerts.mspx

I also had to change the security on the website that hosted OMA. It
was set to allow only the server IPs. I changed it to allow acces to all
IPs
in order to get it working.

Running the CEICW should've allowed this for you - don't ignore the wizards
or SBS will be sad. And it will make you sad, too.

Hope this can help someone.
Pedro.


Again, thank you much for posting this....hope my comments are helpful to
you & others.


.



Relevant Pages

  • Re: [Lit.] Buffer overruns
    ... http://www.garlic.com/~lynn/2001e.html#39 Can I create my own SSL key? ... http://www.garlic.com/~lynn/2001g.html#19 Root certificates ...
    (sci.crypt)
  • Re: SSL certificate modification
    ... > That's only one reason for the existance of SSL server ... > that certificates contains certified public keys which are used during ... implication then the domain name infrastructure is a trusted server ...
    (comp.security.misc)
  • Re: Web service Security
    ... Direct Authentication thru SSL ... X.509 certificates ... we need to secure the soap header as well as message itself. ... Is there any effective & secure solution which doesnt use SSL ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Trying to setup Activesync now cant access /exchange or /remote
    ... and then either double-click Certificates or click Certificates ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)
  • Re: Development Environment w/ssl
    ... > sensitive, private user data. ... > would like to use ssl for the pages that display/edit this data. ... > machines - all the code is stored in a single Visual Source Safe server. ... If you need to issue certificates for the dev machines, ...
    (microsoft.public.dotnet.security)