wm6.5 exchange certificate problem
 

I have a HTC Touch Pro 2 with WM6.5 that does not keep the certificate for my exchange server. I install the certificate into the phone and setup the exchange settings in activesync, and it works fine for a while. After a day, activesync on the phone or desktop says certificate not valid. Has anyone run into this type of issue?
I have Windows Small Business Server 2008 with exchange, and a self signed certificate. My partner has NO PROBLEM with his HTC Fuze (WM6.1) and the same settings!

Any information on this issue is greatly appreciated!!!

Thank you for your help...

Re: wm6.5 exchange certificate problem
 

Is the certificate expired?

Have you installed the certificate itself or the CA's certificate, the latter should be installed?

Is the date on your computer and/or phone correct?
A certificate will fail validation if a device's time is before issue date or after expiration date.

Is your phone in Global mode instead of CDMA mode, I have seen issues where the phone's clock gets a weird date in Global mode.

One can obtain a public CA signed UCC cert from GoDaddy for $90/yr that works out of the box. Might be a better option if you have the budget for it.

Re: wm6.5 exchange certificate problem
 

The certificate is not expired, and the phone is in CDMA mode. The time and date are correct.

I'm not sure what the "CA's Certificate is"?

Thanks for your help!!!

Re: wm6.5 exchange certificate problem
 

check this link out. should help. I know its worked for me. if not let me know and I'll help sort it out.

Re: wm6.5 exchange certificate problem
 

oops forgot to post the link.

http://forum.ppcgeeks.com/showthread...44#post1693944

Re: wm6.5 exchange certificate problem
 

The proper way to self-sign a certificate is to install a Certificate Authority (CA) on your server.
Then one generates a certificate request using Exchange and submits it to the Certificate Authority.
The CA then signs the certificate with its private key and it is installed on the Exchange server.
The CA's certificate (containing only its public key) is then installed on each client device.
The device verifies the validity of the Exchange certificate utilizing the CA's certificate.

Unfortunately, I am not sure what could be causing your problem.

Re: wm6.5 exchange certificate problem
 

Check the htc site itself. Browsing through the downloads the other day, there is a download that specifically addresses certificate errors with exchange.

Good luck

Re: wm6.5 exchange certificate problem
 

Could you please post a link to the information? All i could foind was to OP's post with the same information he posted here. Thanks in advance

Re: wm6.5 exchange certificate problem
 

You can also try http://www.startssl.com/?app=40

I can't remember if they have out of the box support for Windows Mobile, but their certs are the cheapest you can find that have built in support for stuff...

Re: wm6.5 exchange certificate problem
 

Still having this certificate error. The strange this is that two co-workers have WM6.1 and do not have any certificate issue with the same settings???

Could this be a WM6.5 issue only?

Also, the certificate seems to be going into the "INTERMEDIATE" certificate location and not into the "ROOT" certificate location, on the WM6.5 device.

Thanks

Re: wm6.5 exchange certificate problem
 

I don't think so because we also use a self signing cert here where I work. WM was unable to pull the cert so I had to download it to my hard drive and then copy it to my SD card and THEN install it to the phone. no problems for me ever since then. I wonder if its getting lost on your phone after you active sync or is it random?

Re: wm6.5 exchange certificate problem
 

I go to the Outlook Web Access page using internet explorer and download/save the cert to my local client, then move it over to the sd card using activesync. When I open the cert in mobile explorer it says that the certificate installed successfully. Like I said, it works great for a day, then I get the error on both the phone and/or the TP2. I have hard reset, soft reset, removed activesync and re-installed to no avail...

Any other ideas?

Thanks again...

Re: wm6.5 exchange certificate problem
 

ah ah... try copy to your sd card by putting your phone in external storage mode and copy the cert to your card that way. it might be getting changed by activesync when you go though that way. when you first plug your phone into your computer you should be offered 3 choices: Activesync,External Storage, and Internet Share. choose external storage and you should see your card as a removable drive in "my computer". Then open file explorer on your phone and navigate to where you stored the cert. tap it. You may get a warning message with the choice of cancel or more. choose more and then choose install. that should do ya I think.

Re: wm6.5 exchange certificate problem
 

I am going to give this a try, but I am doubtfull because I had also tried to Email myself the certificates previously.

Am I copying the certificates correctly? While at my Outlook Web Access page in IE8 I go to VIEW, SECURITY REPORT, VIEW CERTIFICATES, DETAILS tab, COPY TO FILE. Then I have been exporting in DER encoded binary X.509, Base-64 encoded X.506, and Cryptographic Message Syntax Standard - PKCS #7. I have been exporting all three (3) certificates and installing them on my TP2. Like I said, it lasts about one (1) day at the most.

I will keep you posted with my results of the external storage mode...

Thanks again!

Re: wm6.5 exchange certificate problem
 

just save it as PKCS #7 then copy it to the storage card

Re: wm6.5 exchange certificate problem
 

here are quick instructions on how I obtained the Cert and so forth. Hope it helps.

On your home computer, log into your OWA. Make sure to click the box “this is a private computer”

Once in your email, left click the lock located next to your address bar

And select "view certificates",

Then select “details tab”, "copy to file" button,

The dialogue box opens so click "next",
Select the P7B and the include all certificates check box,
Then give it a file name and destination.

I just save it on the root of my card and install it after every flash

Re: wm6.5 exchange certificate problem
 

Thanks for the info., but nothing seems to work! If anyone has an other ideas, I would be happy to hear them...

Thanks again.

Re: wm6.5 exchange certificate problem
 

questions. did you sync with your desktop/laptop before installing the cert? is your desktop/laptop authorized on the network and connected to the exchange server? if the answer is yes to both og these questions the issue may be that active sync on your phone is really connected to your desktop. if your syncing OTA then you don't need to connect it to your desktop ever because it is also syncing with the server so your info would be the same on both without ever having to teather. When you connect the phone to the desktop and launch activesync do you see both your desktop and OTA (looks like a cloud) syncing?

Re: wm6.5 exchange certificate problem
 

Not sure what you mean by cloud syncing? I have performed a hard reset on the phone and tried to use activesync, and also OTA - both exclusively. I also purchased a certificate from godaddy and I am getting the same result. It works fine for less than a day, and then tells me my certificate is not valid.

I noticed on another discussion board that someone posted about the certificate going into the "ROOT" certificate location in WM6.1, but going into the "INTERMEDIATE" certificate location in WM6.5. Not sure if this would cause a problem?

Thanks for the suggestions!

Re: wm6.5 exchange certificate problem
 

after a hard reset, install the cert and configure your phone with your email account manually. try not syncing with activesync at all. in fact, don't even connect your phone to the computer if you can avoid it. if the problem recurs then the issue is between activesync on your computer and your phone. Could your computer be replacing the certificate on your phone each time you connect to activesync? If the problem continues after following my suggestion I am at a loss for any more ideas.... for now at least