Solved

Exchange 2007 ActiveSync not working

Posted on 2009-04-06
4
539 Views
Last Modified: 2012-05-06
Hello all,
              and thank you all in advance. I have just transitioned from sbs 2003 to server 2008 64bit. The server 2008 is running exchange 2007 sp1, which took over for the exchange 2003 sp2 on the sbs box. Everything is functioning fine except activesync. I am using the default certificate that exchange 2007 sp1 creates on install. I have read that this cert will not support activesync. So my multi-part question is as follows. First, is there anyway to make the default cert work with activesync? I have tried but failed to this point.
     If not is there anyway to make a self signed certificate that I create in the exchange management shell work? I have read that activesync cannot use self signed certs, but I know that there is always a chance hehe. So looking for confirmation on that.
     The last question, are my only options at this point a 3rd party cert or a windows CA cert? Though it my look like I have answered some of my questions, in reading the microsoft documentation it says that activesync is suppose to install and configure when you load the exchange 2007 sp1 and be ready to go. Which of course contradicts my findings.
0
Comment
Question by:jplatt1
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 65

Expert Comment

by:Mestha
ID: 24082956
Microsoft do not support the self generated certificate for use with ActiveSync. End of story. It simply isn't worth the headache to try and get it to work. You have to import the certificate in to the device and then try and get it trusted, when the certificate expires you have to repeat the process again. Simply a lot of bother to save a small amount of money.

Use the wizard in the SBS console to do a certificate request and use GoDaddy. They are the cheapest on the list and their certificates are trusted by most ActiveSync devices.

ActiveSync should be ready to go, once you have changed the certificate. I don't think it has to be enabled in the wizard in SBS, but I haven't got my SBS 2008 system running at the moment to check.
If you want to test it then use the Microsoft test site and a test account:
https://www.testexchangeconnectivity.com/

Simon.
0
 

Author Comment

by:jplatt1
ID: 24083081
Well that seems to be what I was expecting. Will this work with exchange 2008? I no longer have the sbs it is unlocked and standard now. The server 2008 64bit has the exchange 2007 sp1, everything was transitioned over to this. So i can do this in IIS 7.0?  
0
 
LVL 65

Accepted Solution

by:
Mestha earned 500 total points
ID: 24083098
Sorry, I read SBS and thought it was SBS 2003 to 2008 migration, where SBS 2008 has a certificate wizard. It is 1.30am here.
For full product you need to do things manually.
I have instructions on my blog here: http://blog.sembee.co.uk/archive/2008/05/30/78.aspx
The certificate is US$60/year.

Simon.
0
 

Author Closing Comment

by:jplatt1
ID: 31567291
Thank you very much. Excellent documentation and instruction. This makes the process extremely understandable and almost pain free. Mestha, great solution. Thanks again.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Scam emails are a huge burden for many businesses. Spotting one is not always easy. Follow our tips to identify if an email you receive is a scam.
How to resolve IMCEAEX NDRs in Exchange or Exchange Online related to invalid X500 addresses.
In this video we show how to create an email address policy in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Mail Flow…
To show how to generate a certificate request in Exchange 2013. We show this process by using the Exchange Admin Center. Log into Exchange Admin Center.:  First we need to log into the Exchange Admin Center. Navigate to the Servers >> Certificates…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question