Don't know if anybody is having the same problem as me.
We have an M$ Exchange server which I use for work. We've not bought verified certificates as we don't need to. WM5 doesn't allow me to install our wilcard certificate onto my MDA Vario. I've tried various methods posted in different forums:
Changing the registry HKLM\Security\Policies\Policies\00001017 from 128 to 144. I also changed 00001001 to 1 and 00001005 to 40 but i dont think that helped.
My certificate is still not recognised!
Anybody have a solution?
Will
willcheng,
If you got W2003 server and Exchange 2003 then you don't have to buy certificates you make your own.
Installing these in WM5 is easy, just copy them to your device and they will be installed after clicking on them.
Please let me know if you have w2003 and Exchange 2003 then I will let you know how to do it.
But if you have an M$ drive on your server I thing you are using Exchange 2000 or 2003 on witch you can add the M drive.
I'm using w2003 with Exchange 2003 and the certificate is working wonderful.
Cheers,
Drifter
You need to install the root certificate not the one that was issued to the Exchange server. What CA issued the certificate for your Exchange server? Install that certificate. If you are using MS Certificate Services you can just go http://<CA Server Name/certsrv and download the root certificate or the chain. You can then just copy them to your device and click on them and they should automaticaly import. If it is not installing then what type of certificate are you trying to install? If it is not X.509 you need to convert it to X.509. Also I had this problem installing on a locked Sprint Phone on WM 2003. I had to use this.
SPAddCert.exe
Related
Hi all,
I have just upgraded to ROM 2.17.7.6 FRF on my Qteck 9100, service provider SFR (France).
Big problem : I cannot sync anymore with my Exchange Server. I understood the source of the problem: the Exchange self signed certificate is missing on the device after the Rom update. I tried to install it manually (by copying the .cer file via AS onto the device) but when I double click on the .cer file in the device, I get the message "Access to the certificate is impossible" (translated from French). There seems to be some kind of protection againts installing root certificates.
Any idea to get around this ?
Thanks -- any help really really appreciated. I am quite desperate at this stage...
Did you make sure to export the root certifcate in binary not MIME encoded format?
For me it worked to import a binary root certificate.
Thanks TcT.
Well I am not sure of the content of the .cer file.
What I did was simply copy the original .cer from the Microsoft Server to my client PC and then via Active Sync to the device and then double click on it. Nothing else.
What did you do?
There are several ways to export that Cert so that you can copy it though. DER encoded binary is what you need to use. In my case, I used a copy of my server's root cert on IE on my desktop. I exported it in DER format then copied it onto my 8125. I then tapped it and chose "install certificate".
In fact, I just tested this again on my Qtek 2.17 equipped 8125 and it worked perfectly.
Thank you Sleuth,
sorry to ask dumb questions but how do you use IE to import the cert in the requested format? What I did is I went to the \clientapps directory of the server and simply copied the .cer file. I suppose this is wrong.
You can double click on the .cer file on your PC there should be an "export" or "copy" button somewhere in that dialog there you can export the .cer file in different formats/encodings.
TcT great it worked
10 000 thanks. That was the trick
Exchange Activesync with Certs enabled
Hi,
I also have a Qtec 9100 an am unable to sync with Exchange using Certificates
I can sync if i turn OFF SSL on the server, i can also sync if i add the appropriate reg key into the device to disable Cert checking however i am curious to know if others have been able to sync using a manually created Cert .
i have tried exporting the cert from the server and the Desktop PC in all available formats and i am able to import this into the Trusted Root folder on the Qtec however each time i try to sync i get the error :
0x80072F01
Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.
any assistance is greatly recieved
Jedismurf
Certificate Uility
There is a great certificate import utility available...
http://www.jacco2.dds.nl/networking/crtimprt.html
I have used the PFXimprt but the newer one - P12imprt does WM5 and WM 2003.
I need to install a certificate for wifi on my university. As you all know PEAP needs a personal certificate. But when i install the certificate it's placed in the base folder and not in the personal folder.
Yes i added the ValidateServerCert to the registery.
Anyone can help?
If I am not mistaken it should be in the base
or it may depend on the certificate
In my case I also need a cer to use my Uni's WiFi and when I install it I find it in the base list
my problem is the certificate seems to be outdated otherwise according to the instruction I had the certificate should be in the base list.
Not sure if this helps, I have a digital certificate which allows me to get onto my work email from home.
I just copied the certificate to my memory card and then opened it through the phones file explorer.
It installed the certificate for me.
I installed the certificate the same way as you. But when i try to connect the router, it says: "you need a personal certificate" and personal certificates are used to identify yourself and base certifactes are not. So i think i need to get that certifacte to te personal folder.
Have you tried via ActiveSync? Saw an option last night, although have no experiences with certs.
Try secureW2 plug-in. (use google to find it)
A common problem is that you need certain root certificates as well- and WM doesn't download/ install them.
There are even networks that you won't be able to connect to using PEAP- like the one my uni uses. Don't ask me for detailed reasons... It's some kind of yet unsolved WM-WiFi-certificate-issue.
i use secureW2 as well at my university... works great
Can anyone school me in how to force a certificate to install to the trusted root instead of the intermediate? I need to install one to work with our exchange server but it keeps going to intermediate and causing the sync to fail.
I know the cert is good because it is the same one i have used for multiple smartphones, but then one of the guys here went and got one of these PDA's, so now i have to re-learn how to do everything. I'm starting to get the hang of it (no offense, but these PDA's are so complicated, it sorta makes me appreciate the simpleness of my excalibur) but I am just stuck at this certificate thing.
I have tried installing the sp_allowcertificate.cab, since it seemed to not have a problem with it being a smartphone program, but it also didn't fix anything.
PLEASE if anyone can help at all it would be greatly appreciated.
All I do when I have to setup an Exchange sync with an SSL certificate is export the SSL certificate itself from your web-browser as a .cer or .crt file. Then copy it to your device and run it from there.
duh, i fixed it. i had this problem once before and i finally remembered what i had to done to get it to work. There is an old certificate and a new certificate and i had accidentally been using the old one, which is the same thing i was doing this time.
i'm currently deleting all the copies of the old certificate, LOL, thanks for your reply tho
No worries, glad you got it figured out. We all have our "moments"
Digital Outcast said:
All I do when I have to setup an Exchange sync with an SSL certificate is export the SSL certificate itself from your web-browser as a .cer or .crt file. Then copy it to your device and run it from there.
Click to expand...
Click to collapse
Sorry to Hijack this thread, but I have the same problem. I did exactly what you said, and exported the certificate to the device. But it doesn't recognize it as being associated to a program. I tried crt, cer, der extensions with no luck.
Anything I'm missing? WinMo 6.1
Hey,
Recently a new security rule was set for my exchange server.
Now i have to install a certificate on the device in order to synchronize.
I have it in 2 versions - *.*cer and *.*cab
Appreciate if anyone can share with my how to install it.
Thanks!
Has anyone managed to install a certificate to encrypt email?
I need to use secure email for work, came from WM6.5 where I was able to install a Comodo email certificate
TIA
Docsboard said:
Has anyone managed to install a certificate to encrypt email?
I need to use secure email for work, came from WM6.5 where I was able to install a Comodo email certificate
TIA
Click to expand...
Click to collapse
no takers?
Hi,
I've managed to obtain a Comodo certificate and install it on my Desire.
I tried requeting the certificate on the Desire but it failed to install no matter what I did. So I requested it on my laptop instead, installed it to my laptop then exported it in PKF format. Copied the PKF file to my Desire and then renamed it to have the extension of PK9.
Put the PK9 file in the root of the SD card and ran the import certificate option from the security menu in the phone. This worked, the certificate was installed on my phone and I can see it.
Now here's the problem - Despite the certificate being installed I cannot find any way to use it to sign or encrypt emails on the email client on the Desire.
I guess I'm in the same boat as you
I am still trying to figure this out as well. We use IPSec based VPN to connect to the company network. Once authenticated at the firewall, we use our domain account credentials to authenticate to the microsoft exchange server.
Are you guys able to access internal websites that require certificates?
I am logged into my company wireless router and I am able to connect to non access controlled internal websites (i.e. http://). However, I am have been unable to connect to access controlled internal websites (i.e. https://).