wm6.5 exchange certificate problem

Gspt2000 · #1 (**permalink**) 05-24-2010, 11:47 AM

I have a HTC Touch Pro 2 with WM6.5 that does not keep the certificate for my exchange server. I install the certificate into the phone and setup the exchange settings in activesync, and it works fine for a while. After a day, activesync on the phone or desktop says certificate not valid. Has anyone run into this type of issue?
I have Windows Small Business Server 2008 with exchange, and a self signed certificate. My partner has NO PROBLEM with his HTC Fuze (WM6.1) and the same settings!

Any information on this issue is greatly appreciated!!!

Thank you for your help...

niteriderxp · #2 (**permalink**) 05-25-2010, 02:59 AM

Is the certificate expired?

Have you installed the certificate itself or the CA's certificate, the latter should be installed?

Is the date on your computer and/or phone correct?
A certificate will fail validation if a device's time is before issue date or after expiration date.

Is your phone in Global mode instead of CDMA mode, I have seen issues where the phone's clock gets a weird date in Global mode.

One can obtain a public CA signed UCC cert from GoDaddy for $90/yr that works out of the box. Might be a better option if you have the budget for it.

Gspt2000 · #3 (**permalink**) 05-25-2010, 08:46 AM

The certificate is not expired, and the phone is in CDMA mode. The time and date are correct.

I'm not sure what the "CA's Certificate is"?

Thanks for your help!!!

pmeunier · #4 (**permalink**) 05-25-2010, 03:27 PM

check this link out. should help. I know its worked for me. if not let me know and I'll help sort it out.

pmeunier · #5 (**permalink**) 05-25-2010, 04:24 PM

oops forgot to post the link.

http://forum.ppcgeeks.com/showthread...44#post1693944

niteriderxp · #6 (**permalink**) 05-26-2010, 12:41 AM

The proper way to self-sign a certificate is to install a Certificate Authority (CA) on your server.
Then one generates a certificate request using Exchange and submits it to the Certificate Authority.
The CA then signs the certificate with its private key and it is installed on the Exchange server.
The CA's certificate (containing only its public key) is then installed on each client device.
The device verifies the validity of the Exchange certificate utilizing the CA's certificate.

Unfortunately, I am not sure what could be causing your problem.

kingdork76 · #7 (**permalink**) 05-26-2010, 02:39 AM

Check the htc site itself. Browsing through the downloads the other day, there is a download that specifically addresses certificate errors with exchange.

Good luck

pmeunier · #8 (**permalink**) 05-26-2010, 07:30 AM

Quote:

Originally Posted by kingdork76

Check the htc site itself. Browsing through the downloads the other day, there is a download that specifically addresses certificate errors with exchange.

Good luck

Could you please post a link to the information? All i could foind was to OP's post with the same information he posted here. Thanks in advance

frazell · #9 (**permalink**) 05-26-2010, 12:11 PM

You can also try http://www.startssl.com/?app=40

I can't remember if they have out of the box support for Windows Mobile, but their certs are the cheapest you can find that have built in support for stuff...

Gspt2000 · #10 (**permalink**) 06-08-2010, 11:40 AM

Still having this certificate error. The strange this is that two co-workers have WM6.1 and do not have any certificate issue with the same settings???

Could this be a WM6.5 issue only?

Also, the certificate seems to be going into the "INTERMEDIATE" certificate location and not into the "ROOT" certificate location, on the WM6.5 device.

Thanks