cwpcguy
asked on
Active Sync SSL errors
I'm trying to use a GoDaddy.com Turbo SSL cert on an SBS 2003 server. It installed just fine but I cannot get a mobile device to work for syncing to exchange. Do these certs work for this situation? If so, what might I be doing wrong? I always get an error on the mobile device that the source is "The security cert on the server is invalid". Code 0x0072F0D
Last Comment
ASKER CERTIFIED SOLUTION
THIS SOLUTION IS ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
What version of Windows Mobile are you running?
Have you checked whether it has the root certificate for GoDaddy installed? It is called Valicert.com. It was added to Windows Mobile 5.0 as part of the MSFP update, but I have heard of one service provider seemingly removing it from their devices.
Also, ensure that the address that you putting in to the device for EAS matches the name on your certificate. If you browse to OMA (/oma instead of /exchange) you will see the certificate prompt and it will show you which element you are failing on.
Simon.
Have you checked whether it has the root certificate for GoDaddy installed? It is called Valicert.com. It was added to Windows Mobile 5.0 as part of the MSFP update, but I have heard of one service provider seemingly removing it from their devices.
Also, ensure that the address that you putting in to the device for EAS matches the name on your certificate. If you browse to OMA (/oma instead of /exchange) you will see the certificate prompt and it will show you which element you are failing on.
Simon.
Yes, sembee is correct. If your cert says it is for server.domain.com, but in WM 5.0 you are pointing to mail.domain.com (even if it is the same server) it will fail. Valicert certificates work on WM 5.0 for exchange Active Sync on Windows Mobile 5.0 (I have about 30 of them working that I just set up). That certificate is pre-installed trusted certificate ONLY if you have MSFP update however (most newer devices have this already). If the devices are older, they might not be pre-installed. Hope this helps.
P.S. Also, you can get certificate errors if it is a new device, and you haven't set the time and date to be correct.
I think an acceptable range of solutions was presented...for what it's worth.
Actually it was never clear what the problem is... so how a definitive answer could have been posted?
Q: Do these certs work for this situation?
A (dempsem/sembee): Yes, GoDaddy SSL certs will work, but you must make sure you have msfp update.
Q: If so, what might I be doing wrong?
A: (Sembee) ensure that the address that you putting in to the device for EAS matches the name on your certificate
A: (dempsedm) Also, you can get certificate errors if it is a new device, and you haven't set the time and date to be correct.
A (dempsem/sembee): Yes, GoDaddy SSL certs will work, but you must make sure you have msfp update.
Q: If so, what might I be doing wrong?
A: (Sembee) ensure that the address that you putting in to the device for EAS matches the name on your certificate
A: (dempsedm) Also, you can get certificate errors if it is a new device, and you haven't set the time and date to be correct.
I'm just saying, those were the two question marks in his post...
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I will leave the following recommendation for this question in the Cleanup Zone:
Accept - Sembee {18585955}
Any objections should be posted here in the next 4 days. After that time, the question will be closed.
Darkstar3D
Experts Exchange Cleanup Volunteer
I will leave the following recommendation for this question in the Cleanup Zone:
Accept - Sembee {18585955}
Any objections should be posted here in the next 4 days. After that time, the question will be closed.
Darkstar3D
Experts Exchange Cleanup Volunteer
Well... now that I've had a chance to look at this... I honestly think that the answer I gave right at the top is what should be selected. The PDF document I linked to is a very comprehensive How-To for installing a Go-Daddy TurboSSL Certificate on an SBS.
But the asker only responded that he followed that first document -- getting the certificate installed on the server, and he apparently didn't follow the second one I linked for getting the certificate installed on the device: http://sbsurl.com/mobile
Jeff
TechSoEasy
But the asker only responded that he followed that first document -- getting the certificate installed on the server, and he apparently didn't follow the second one I linked for getting the certificate installed on the device: http://sbsurl.com/mobile
Jeff
TechSoEasy
Jeff, good that the author accepted. His statement that it was "It was setup correctly as this method describes" caused me to overlook it.
Well, that's because I know that the second link didn'thave a separate section for ISA Server. :-)
Jeff
TechSoEasy
Jeff
TechSoEasy
Exchange
Exchange is the server side of a collaborative application product that is part of the Microsoft Server infrastructure. Exchange's major features include email, calendaring, contacts and tasks, support for mobile and web-based access to information, and support for data storage.
213K
Questions
--
Followers
--
Top Experts
Get a personalized solution from industry experts
TRUSTED BY
ASKER