Watch and learn how ATEN provided a total control system solution including seamless switching matrix switch, HDBaseT extenders, PDU, lighting control to build an interactive eFuture classroom.
COURSE of the MONTH
8 days, 6 hours left to enrollBecome a Premium Member and unlock a new, free course in leading technologies each month.
Solved
ActiveSync works internally, but not externally.
Posted on 2012-12-20
Hello Friends,
ActiveSync, which works internally, but not externally.
We are using exchange 2010 SP2 and Exchange Certificate is our internal root CA.
When I have test the Activesync using https://www.testexchangeconnectivity.com , getting error: "
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Validating certificate trust for Windows Mobile devices.
Certificate trust validation failed.
Test Steps
ExRCA is attempting to build certificate chains for certificate CN=mob.domain.com.
A certificate chain couldn't be constructed for the certificate."
Please advice me to resolve/ work activesync from externally aswell.
Additional Details
The certificate chain couldn't be built. You may be missing required intermediate certificates.
ActiveSync, which works internally, but not externally.
We are using exchange 2010 SP2 and Exchange Certificate is our internal root CA.
When I have test the Activesync using https://www.testexchangeconnectivity.com , getting error: "
Testing the SSL certificate to make sure it's valid.
The SSL certificate failed one or more certificate validation checks.
Validating certificate trust for Windows Mobile devices.
Certificate trust validation failed.
Test Steps
ExRCA is attempting to build certificate chains for certificate CN=mob.domain.com.
A certificate chain couldn't be constructed for the certificate."
Please advice me to resolve/ work activesync from externally aswell.
Additional Details
The certificate chain couldn't be built. You may be missing required intermediate certificates.
[X]
Welcome to Experts Exchange
Add your voice to the tech community where 5M+ people just like you are talking about what matters.
- Help others & share knowledge
- Earn cash & points
- Learn & ask questions
3-
2
8 Comments
Active today
To make Activesync work externally, buy a 3rd party SSL certificate with at least the following names included in the cert:
autodiscover.yourdomain.co
mail.yourdomain.com (or whatever you prefer to use)
Then when it is installed and enabled, Activesync should work.
autodiscover.yourdomain.co
mail.yourdomain.com (or whatever you prefer to use)
Then when it is installed and enabled, Activesync should work.
So you mean we can not use internal CA for activeSync from externally? or any other option to use internal as well?
Active today
The name on the certificate must be resolvable externally to the Public IP Address of your server. Does it?
If it doesn't I would suggest buying one that does and then it will work happily.
If it doesn't I would suggest buying one that does and then it will work happily.
You can use internal CA for ActiveSync certificate, but you need to allow not trusted certificates in activesync configuration on your mobile devices.
Do you have any other errors when checking with https://www.testexchangeconnectivity.com/
?
Try to enable "Ignore Trust for SSL" when checking ActiveSync.
Martin
Do you have any other errors when checking with https://www.testexchangeconnectivity.com/
?
Try to enable "Ignore Trust for SSL" when checking ActiveSync.
Martin
Featured Post
Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.
Question has a verified solution.
If you are experiencing a similar issue, please ask a related question
Unified and professional email signatures help maintain a consistent company brand image to the outside world. This article shows how to create an email signature in Exchange Server 2010 using a transport rule and how to overcome native limitations …
There are times when we need to generate a report on the inbox rules, where users have set up forwarding externally in their mailbox. In this article, I will be sharing a script I wrote to generate the report in CSV format.
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers.
According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…
Exchange organizations may use the Journaling Agent of the Transport Service to archive messages going through Exchange. However, if the Transport Service is integrated with some email content management application (such as an antispam), the admini…
Suggested Courses
Course of the Month8 days, 6 hours left to enroll
764 members asked questions and received personalized solutions in the past 7 days.
Join the community of 500,000 technology professionals and ask your questions.