asked on

Active sync to mobile phones stopped working

We moved a 2003 exchange email server to another location and changed the mx records to point to the new location. The email and web email all are working. I am getting a certificate error on the website and the mobile devices, however that does not seem to be the problem. The mobile phone seem connect to the exchange server and send back a message that the certificate has a problem. The name of the site does not match the name of the certificate. I say continue and then get unable to connect to server.
I go into iis Microsoft-server-activesync and when a change anything authentication methods I get different errors (this tells me that my phone is getting to the server). The settings I have now in directory security and the authentication access control are basic authentication checked.

Simon Butler (Sembee)

If you are getting SSL errors then that is the problem - ActiveSync is very sensitive to SSL problems on most devices.
Is it a trusted SSL certificate? If not it should be. Have the host names involved changed?
If you browse from a desktop to the host name that you are using, do you get the SSL prompt? If so, look at the SSL certificate. Is it the correct one?

Simon.

DaveGerke

ASKER

We had ssl errors before I moved servers and webmail works with the DSL error. I have punted working on this and have paid Microsoft $300 to fix. Have been on phone for two hours

Simon Butler (Sembee)

Webmail will work with SSL errors, activesync cannot cope with the certificate prompts.
A trusted SSL certificate is $10, would save a lot of the hassles.

Simon.

DaveGerke

ASKER

Simon,
I was just going to use the built in certificates from exchange on the server. I pay about $200 a year for SSL certs for other websites we have. Where can I get a $10 SSL cert. Do I need to buy the cert for my website email address webmail.caregrp.com/exchange or my exchange server ZEUS? Not sure how to install this and will need to do some reading. Thanks for the help.

ASKER CERTIFIED SOLUTION

Simon Butler (Sembee)

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

DaveGerke

ASKER

This was helpful and I had Microsoft fix the problem that had to do with a internal IP number in my IIS owa granted access list. I just missed it when I moved the servers. I was asking if the $10 certificate was a year term. I can find that all out by just visiting the site for go daddy or geotrust who I use now. I'm not sure why I am paying so much I will research. I did not realize all SSL certificates were the same. This was really a side conversation on my problem and I will give the points to this item which I need to address anyways to have a cleaner system.