ixoni
asked on
0x80072F0D in Mobile Active Sync Device
We have an Exchange 2003 SP2 Front end server that has been running OWA over SSL with no problems. I am now trying to Mobile Access to work with my Cingular 8125. When trying to sync the error is "The security certificate on the server is invalid...." Error code 0x80072F0D.
1. I can successfully hit https://myserver.com/oma and login and view the directory.
2. The certificate is a new valid cert from Comodo.
3. The cert is issued to the proper public domain name.
I followed the MS instructions http://www.microsoft.com/technet/itsolutions/mobile/deploy/msfpdepguide.mspx to setup for Mobile use.
Help!
Thanks
Barry
1. I can successfully hit https://myserver.com/oma and login and view the directory.
2. The certificate is a new valid cert from Comodo.
3. The cert is issued to the proper public domain name.
I followed the MS instructions http://www.microsoft.com/technet/itsolutions/mobile/deploy/msfpdepguide.mspx to setup for Mobile use.
Help!
Thanks
Barry
ASKER
You are correct, if I hit https://myserver.com/oma with IE I do get a security warning that "The cert was issued by a company you have not chosen to trust." Comodo uses GTE Cyber Trust as the Root cert, which is preinstalled on Mobile 5.0. Not sure what to do from here, but I am contacting Comodo support to get their take on it.
-Barry
-Barry
Are they using a chained certificate?
You have to make sure that it is the correct root certificate. Most of the certificate suppliers have a long list of them.
Geotrust (for example) have loads of them: http://www.geotrust.com/resources/root_certificates/index.asp
But only one is in the Windows Mobile device.
Simon.
You have to make sure that it is the correct root certificate. Most of the certificate suppliers have a long list of them.
Geotrust (for example) have loads of them: http://www.geotrust.com/resources/root_certificates/index.asp
But only one is in the Windows Mobile device.
Simon.
ASKER
I think you are correct as Comodo is not on this list: https://partner.microsoft.com/global/partner/40027352
I tried installing a root cert according to http://support.microsoft.com/kb/915840/en-us but with no luck. When I use the spaddcert.exe it cannot find the cert I have copied into the "Storage" folder. Microsoft says contact the OEM of the device. Cingular's KB has very little info and says to contact Microsoft! This is starting to be highly annoying!
-Barry
I tried installing a root cert according to http://support.microsoft.com/kb/915840/en-us but with no luck. When I use the spaddcert.exe it cannot find the cert I have copied into the "Storage" folder. Microsoft says contact the OEM of the device. Cingular's KB has very little info and says to contact Microsoft! This is starting to be highly annoying!
-Barry
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Simon,
That did the trick! You are the Expert!. Thanks.
That did the trick! You are the Expert!. Thanks.
Sembee, I dont know why but I follow your entire process but in the moment to install into the mobile device give an error :(
I have my root certificato from Very sign.
Can you help me?
Thanks!
I have my root certificato from Very sign.
Can you help me?
Thanks!
Thanks Simon. Haven't needed that one in a couple of years. Great to be able to find it this quickly.
I don't believe that Comodo certificates are trusted natively by the Windows Mobile device, which would explain the security warning.
Simon.