Sync Windows Mobile 6.1 with Exchange Server

[Riley]

I had several issues with exchange sync errors with my company. I finally figured it out myself using this information. If this has been covered, my apologies but I wanted to get this out anyway. Essentially just installing the root certificate wasn't enough for me. I ended up installing certificates to the intermediate level as well and finally starting connecting properly. It has worked flawlessly for months now. Here is the article on how to get certificates and install them. the key is to grab all the certificates meaning grab not just the root level cert but the ones above it as well (you will see this after reading the article). they will install to the intermediate level. good luck.

this allowed me to install two more certificates to the intermediate level rather than just the root level.
http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/

[HackerSG]

Originally Posted by rileyd5

I had several issues with exchange sync errors with my company. I finally figured it out myself using this information. If this has been covered, my apologies but I wanted to get this out anyway. Essentially just installing the root certificate wasn't enough for me. I ended up installing certificates to the intermediate level as well and finally starting connecting properly. It has worked flawlessly for months now. Here is the article on how to get certificates and install them. the key is to grab all the certificates meaning grab not just the root level cert but the ones above it as well (you will see this after reading the article). they will install to the intermediate level. good luck.

this allowed me to install two more certificates to the intermediate level rather than just the root level.
http://www.confusedamused.com/notebo...-certificates/

I am trying this. I did only have that one bottom level certificate (Like i said, my sync works fine, but the stupid thing keeps prompting me for a password several times throughout the day).

I exported the top, and middle level ceritificates as well.

Man i would love for this to resolve the issue. I'll keep everyone posted.

Thanks

[rhauer]

I too am a EXTREMELY frustrated Sprint HTC Touch Pro user whose IT department one help because I use the Pro instead of a BB. I really!!! dont want the BB so I hope somebody call help. Please!!!!

My connection to the server was working great. My email was being pushed through and as soon as I changed something on the phone it would quickly show up in Outlook. Now, out of know where, it says my certificate is not valid.

This is the second time this stopped working on me. Last time I did a hard reset. There has to be answer.

[nttdemented]

Originally Posted by rileyd5

I had several issues with exchange sync errors with my company. I finally figured it out myself using this information. If this has been covered, my apologies but I wanted to get this out anyway. Essentially just installing the root certificate wasn't enough for me. I ended up installing certificates to the intermediate level as well and finally starting connecting properly. It has worked flawlessly for months now. Here is the article on how to get certificates and install them. the key is to grab all the certificates meaning grab not just the root level cert but the ones above it as well (you will see this after reading the article). they will install to the intermediate level. good luck.

this allowed me to install two more certificates to the intermediate level rather than just the root level.
http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/

Actually the ONLY certificate you need to install to the phone is the one that trusts the provider of the root certificate. No need to install the root certificate itself on your phone prior to configuring active sync with your exchange server.

For example, if you buy your certificate from Network Solutions the only cert that the phone needs is the .cer issued by: "UTN-USERFirst-Hardware". After that just setup active sync on your phone normally and it will request your domain's root certificate from the exchange certificate and advise that the server is going to apply security policies on your phone and presto! If you think about if from an administrative perspective this makes total sense as this certificate adds the trust zone for your third party certificate provider wich will be valid for a very long time (mine is valid until 2019). That way when you update your certificate anually on your IIS server there is no need to send new certificates to the phones, they will automatically acquire the new certificate from the server once it's available, as long as you renewed the certificate with the same third party provider.

[nttdemented]

Originally Posted by rhauer

I too am a EXTREMELY frustrated Sprint HTC Touch Pro user whose IT department one help because I use the Pro instead of a BB. I really!!! dont want the BB so I hope somebody call help. Please!!!!

My connection to the server was working great. My email was being pushed through and as soon as I changed something on the phone it would quickly show up in Outlook. Now, out of know where, it says my certificate is not valid.

This is the second time this stopped working on me. Last time I did a hard reset. There has to be answer.

Just ask your IT department (nicely) to send you the above mentioned certificate so that you may have it available to install in your phone. Also ask them if they have renewed the certificate with a different provider, if so they will need to provide you a new trust certificate like mentioned above.

[saso3odd]

Thanks guys. After viewing these threads I solved my Exchange sync issues with Mobile 6.1. I hope this can help other non tech people like myself!

• I have the HTC Touch-In ital problem-Time would lock twice a day requiring a soft reset, NO Syn issues with Exchange and Mobile 6.0 (Server format was companyx.company.local at the time).
• Sprint suggested the ROM upgrade available on www.sprint.com/download as my solution to the time locks.
• I upgraded within 10 minutes to the new version below, Dated: 7/21/2008
  Software Version: 3.03.651.4
  Radio Version: 3.42.30
• After the USB syn to my outlook, I had all contacts, calendar, task back on my phone.
• Once I unpluged the USB my "over the air" sync issue began, I had sync errors, certificate issues, you name it, support error 8-something. Sprint "recommended" to contact my admin and make sure they had the most updated server pack and that it was a security upgrade that they did to the 6.1. I knew that was a huge issue for me since my IT was not going to do anything for me immediately. There advance techs indicated no work around.
• After reviewing several threads with no solutions, PPCGeeks provided me a solution that worked!
• SOLUTION: I connected via USB to the activesync (this step might not be necessary), and changed my exchange address format from companyx.company.local to mail.company.com, then input username and pass... IT WORKED. I did nothing else but change the format of the server address. No time lock issues or syn issues! No thanks to SPRINT. Thanks PPCGeeks.

Hope that helps someone else!

[HackerSG]

Looks like installing those certs does not work.

I'm beginning to believe the problem i have with the login is server level. My co worker got the login prompt the same time i did yesterday. As before, i hit cancel 1 or two times, and it still works.

So fustrating. Anyone have a soultion for something i could put on the phone to fix the login prompt from coming up multiple times a day?

Thanks

[Riley]

Originally Posted by HackerSG

I am trying this. I did only have that one bottom level certificate (Like i said, my sync works fine, but the stupid thing keeps prompting me for a password several times throughout the day).

I exported the top, and middle level ceritificates as well.

Man i would love for this to resolve the issue. I'll keep everyone posted.

Thanks

I know. it sucks!! funny how windows mobile phones have sync issues with MS Exchange yet the blackberry server works fine My company was completely unwilling to help me with this issue. I get the "We dont support Windows Mobile devices" line so I had to fix it myself. Your password issue is interesting. I know that with my company they prompt us to change our login password every quarter and when this happens, there is a password message that pops up if I try to connect via web (outlook web access). Do you have the same situation with your company requiring a password change? this may be contributing to the problem.

[nttdemented]

Originally Posted by HackerSG

Looks like installing those certs does not work.

I'm beginning to believe the problem i have with the login is server level. My co worker got the login prompt the same time i did yesterday. As before, i hit cancel 1 or two times, and it still works.

So fustrating. Anyone have a soultion for something i could put on the phone to fix the login prompt from coming up multiple times a day?

Thanks

The multiple password issue is on the server level. You're IT team does not have the Active Sync IIS website setup correctly for this. And from what you are saying they use Blackberry Enterprise Server so they wouldn't have a need to have that IIS configuration setup correctly so you're pretty much SOL if your IT team doesn't help you out.

[HackerSG]

Originally Posted by nttdemented

The multiple password issue is on the server level. You're IT team does not have the Active Sync IIS website setup correctly for this. And from what you are saying they use Blackberry Enterprise Server so they wouldn't have a need to have that IIS configuration setup correctly so you're pretty much SOL if your IT team doesn't help you out.

Is there a specific setup we should have, or something i can provide to them to make the changes that you know of?

They may make the changes if i keep bugging them enough about it, but i'd have to give them the soultion.

Thanks!