Re: Activesync between Windows Mobile 5 and SBS2003 gives error

The following has always worked for me.
1. export the cert from a workstation.
IE Properties > Content > Certificates > Trusted Root > select the cert that matches your URL for OWA > Export > accept all defaults

If you don't find a cert here that matches the URL for OWA, you need to re-run the CEICW wizard on the SBS box and re-create the self signed cert.

repeat number 1 otherwise,

2. Copy the file to the ROOT of the devices..in my experience it must be at that location
3. Using file explorer on the device, navigate to the root of the device, and find the file and tap it.
4. You should get a dialog box about installing the cert. Accept any messages about installing.

Now kick off a synch on the device and see if it's successful

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashed
http://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672329573/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1217269967&sr=8-1
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"ldodero" <ldodero@xxxxxxxxx> wrote in message news:bdec11aa-faff-4fec-bf55-2a87bdefede1@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hello, I exported the certificate straight from the server. It's a
Treo 700wx running Windows Mobile 5. I put the file into "My
Documents" and installed the certificate from there. I dont' think the
URL on the certificate matches, I think it points to just the
domain.org whereas on RWW we connect to sbs2003.domain.org/remote. But
like I said, it hasn't been a problem on other servers we manage. I
can change the certificate if you want, how do I do that?


On Dec 5, 11:26 am, "Cris Hanna [SBS MVP]"
<crisnospamha...@xxxxxxxxxxxxxxxxxxxxx> wrote:
did you export this from the server or a workstation?
What version of Treo?
where did you put the file on the treo?

Again, we've ask several times does the url of the cert match exactly to the
URL you use when you OWA?

--
Cris Hanna [SBS - MVP]
Co-Author, Windows Small Business Server 2008 Unleashedhttp://www.amazon.com/Windows-Small-Business-Server-Unleashed/dp/0672...
------------------------------------
MVPs do not work for Microsoft
Please do not submit questions directly to me.

"ldodero" <ldod...@xxxxxxxxx> wrote in message

news:adbab522-8c01-4a10-bae7-29d7b7e9f9a5@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
I opened up MMC, CTRL M - Add - Certificates - trusted root
certification authorities - picked my certificate
(sbs2003.mydomain.org) right click - all tasks - export - export as
DER encoded binary X.509 (.cer) file name certificate.cer. I then
transferred it to the treo, clicked it on the Treo and it installed.
Still doesn't work.

On Dec 4, 11:10 pm, "SteveB" <newsgr...@xxxxxxxxxx> wrote:

> If the cert is self issued what did you name it and how did you install > it
> on the Treo?

> "ldodero" <ldod...@xxxxxxxxx> wrote in message

>news:787eb1aa-73c1-4a44-bd48-9a0fa7492477@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

> > Hello, I'm trying to sync my Palm Treo using Windows Mobile 5 with our
> > SBS2003 server. I've tried syncing three different Windows Mobile
> > devices and always get the same error:

> > Result: the security certificate on the server is invalid. Contact
> > your Exchange server administrator or ISP to install a valid
> > certificate on the server.

> > 0x80072F0D

> > Certificate on phone is installed correctly.

> > All exchange features for user account are enabled according to Server
> > Manager. (User - Properties -
> > Exchange Features tab).

> > In Exchange Server Manager, General Settings - Mobile Devices -
> > Properties, settings are as expected
> > (user initiated sync and direct push over http(s) are both turned on,
> > no blocking device security
> > settings though I've tried tinkering with them).

> > Can successfully browse to https:\\sbs2003.iel.org\exchange

> > Permissions on IIS exchange virtual directories (there are 5 of them
> > in default websites) appear to be
> > correct according to MS KB.

> > At this point, it could be some obscure error in one of three areas:
> > Exchange, IIS, ISA (apparently ISA
> > can occasionally cause problems). I've done all kinds of things in
> > all three, but haven't been able to
> > see any noticeable progress.

> > Any ideas??

.

Relevant Pages

  • Re: Web Certificate for IIS Server on SBS Domain
    ... Before your reply, I actually ran across rapidssl myself, and have ordered and installed the free 30-day certificate on my site. ... I explained what you'd told me about putting my existing configuration at risk by installing Cert Services, and he said he didn't know that. ... Again, if you're just needing a cert to install on your web server to provide SSL connectivity for remote users, go with an external third-party provider. ... When you add Certificate Services on an internal network, lots of internal communications will start using pieces provided by the Cert Server instead of the defaults from Server 2003, and when things blow up, they can blow up gloriously. ...
    (microsoft.public.windows.server.sbs)
  • Re: Terminal Services over a VPN
    ... Create a certificate request and submit it to godaddy in order to obtain a public cert. ... You can use the wizard in IIS Manager for this by creating a new website that matches the above name (on your TS server), right-click and choose properties, directory security tab, server certificate button. ... After the install you can stop or delete the website created above since you don't need it for anything. ...
    (microsoft.public.windows.terminal_services)
  • Re: SBS 2003 Premium and Cert Services
    ... that philosphy got blown out of the equation when SBS included Exchange OWA ... "Small Business Server" which is MS claim as to why the risk of exposing the ... the Certificate Server on another server, ... >> Cert, or you could edit the properties of your Certification Authority to ...
    (microsoft.public.windows.server.sbs)
  • Re: Web Certificate for IIS Server on SBS Domain
    ... and installed the free 30-day certificate on my site. ... instructions to install Certificate Services. ... If I can find a way to issue my own cert without risking my SBS setup, ... > Server instead of the defaults from Server 2003, and when things blow up, ...
    (microsoft.public.windows.server.sbs)
  • Re: Activesync between Windows Mobile 5 and SBS2003 gives error
    ... You should get a dialog box about installing the cert. ... I exported the certificate straight from the server. ... Treo 700wx running Windows Mobile 5. ...
    (microsoft.public.windows.server.sbs)