Related
My IT guys have been trying to get this push email thing working and it seems to be one difficulty after another and is not as simple as pressing "push email" in the connection icon....
Our latest error appears on my device with the above error code stating
"the security certificate on teh server is invalid. contact your exchange server administrator or ISP to install a valid certificate to the server".
I have read that I need to buy a public certificate from a public authority (CA) or similar such as Verizon or Thawte. Is this the case, or is there a simpler way to get this push email working using the existing configuration and setup of the server?
We use exchange SP2, with outlook 2003 all around. Internet based webmail works correctly with full access, and activesync via PC works perfectly, but push email encounters the above error.
Any suggestions.
are you sure it's 80072fd or 80072efd ?
I don't have a solution, but the problem is described in M$ knowledgebase article: 915438 - see attached Acrobat .PDF.
I had already tried the suggestion in KB915840 to import the certificate from my sbs2k3-domain, but this had failed with "cannot access the certificate" - even with them on the device. However, certificates from my clients' servers, both sbs2k and sbs2k3, import without problems. This happened both before and after o2's AKU2 ROM update - so AKU2 is not the problem. In addition, I spent Easter *totally* reinstalling sbs2k3 and tested it immediately afterwards. All the sbs2k3/Exch2k3-Sp2 boxes are fully patched. The certificate itself is correct/working, since it works for Outlook Web Access via the web with laptops and even the Exec (Universal).
Whilst sync'ing from the workstation via ActiveStink/USB, if you turn off the SSL requirement the sync suceeeds, but that's obviously not a working solution via the 'Net.
Update:
Just had a thought, and checked the various certificates in a hex-editor. The one from my sbs2k3 box is a completely different format. :? I'll see what I can find out.....
maybe not related, but here's a list of all ActiveSync Server Error Codes: http://blogs.flaphead.dns2go.com/archive/2005/11/21/3202.aspx
80072f0d
Sorry, the correct code is 80072f0d.
I know your pains astage, but there is no way we are pulling the box down and putting it back up again, our server hosts 30 + staff simultaneously and I cant take it down just to fix my one desire to have push email.
But I do find it painful and frustrating that microsoft do not adequately support their own platforms and systems dont integrate as they should and as they are promoted.
M$ sks.
Re: 80072f0d
simon_darley said:
....I know your pains astage, but there is no way we are pulling the box down and putting it back up again, our server hosts 30 + staff simultaneously and I cant take it down just to fix my one desire to have push email.....
Click to expand...
Click to collapse
I'm not sure if it was clear from my reply - too tired - but rebuilding the server did not help at all.
Yeh, the pains of rebuilding SBS and having it all configured and running correctly when the staff arrive in the morning is not something I do willingly - hence the use of the holiday. It was done only as a last ditch attempt to solve this and another problem that had Micro$oft totally stumped - not related.
There is a difference in the certificate formats, so that's where I'm concentrating my efforts now. Will let you know what I find.
80072f0d error - the fix!
Just spent the past hour kicking and calling myself an £$%&* idiot.:x
Anyway, to cut the story short, the problem *is* indeed the damn format of the SSL certificate exported by sbs2k3. For the WM5 device to import it, it needs to be in DER X509 format.
If you have imported it into your PC/laptop for OWA/OMA/RWW, then you can easily export it from IE's Internet Options into DER format.
From Internet Options:
- go to Content-tab
- click Certificates-button
- find and highlight your certificate - I had imported mine into Trusted Root Authorities
- click Export-button
- click Next on wizard page
- enable the "DER encoded binary X.509 (.CER)" radio-button, and click Next
- enter a suitable path & filename, e.g.: "myserver.cer"
- click Next, click Finish, click Ok.
- Now copy the certificate to your PDA via ActiveSync.
- Open File Explorer on the PDA,
- Find the certificate file and launch it.
- click Yes to import it and you're done!
I think the reason why my sbs2000 certificates worked was that I had installed Certificate Services on those boxes and exported those certificate from there. I don't understand why some of my client's sbs2003 certificates were in DER-format, and others weren't, but we are talking about Microsoft software, so what else should I expect......
msfp and 80072f0d
After testing a few different certificate variations, the engineers that maintain our servers was able to send me two alternative certificates, one or bother of them appear to ahve worked effective.
So it imported, and now my active sync works for receiving these emails, now I need to look at these heartbeat pings and find out how I set the periodic checking.
Just wondering, normally if you dial a gprs/3g connection, you pay once, and stay connected all day. Does this now mean that it connects, downloads, disconnects, then 5 minutes later reconnects, downloads, and disconnects, thus paying a much larger reconnect fee everytime?
I am playing with this as a new toy, but I can see the costs are going to go ballistic....
and... perhaps for all those that are already experienced here, how does one send an email that remote wipes the device?
is there a command, or a key word or something that makes the system realise the remote wipe command....
sorry, I know this is off the topic of my original post, but thought you might know.
if not, I can start a new topic....!!!
The certificates that I was given was a server.cer and a root.cer.
If anybody needs to know, I can ask the engineers how they did what they gave me to get it to work.
The remote wipe is done from the sbs2k3 box - or rather the box running Exchange2k3Sp2. Your admin needs to install a small tool that he (Domain Administrator credentials needed) then accesses via IE.
Microsoft has published a new white paper (Feb 2006) that describes the whole procedure - just a shame they missed the need for the certificate to be in DER format. The white paper is: "Deploying Windows Mobile 5.0 with Windows Small Business Server 2003".
Hi, I am looking for some help regarding a sync problem I am having with my XDA Mini S. I have recently re-installed my copy of Windows XP Home. Prior to this re-install I was able to sycn with my XDA using activesync 4.1. Since the re-install however when trying to sync I am presented with an error on the desktop machine.
Support Code:86000107
I have trawled the internet to find a solution, but to no avail. I have tried the new 4.2 beta of active sync and tried un-installing the software several times aswell as removing sync profiles form the unit.
Any help would be apreciated. I am using ROM version 2.21.4.1 WWE and Windows Mobile Version 5.0 (Build 14847.2.0.0)
Thanks
See my responses in a similar thread posted by someone else...
http://forum.xda-developers.com/viewtopic.php?p=289256
Thanks for the reply! I had tried searching the forum first, but my choice of keywords obviously let me down.
I have tried both disabling the firewall and ensuring DHCP is enabled. I am using the windows firewall controlled by Microsoft's Windows OncCare Live, and within which all processes associated with active sync have been granted permission to access the network.
The phone appears to be able to send data to the desktop pc, but the desktop fails for some reason. Any further advice?
thanks
Do you hear the usual "bing bong" type noise that Windows makes when a USB device is plugged in?
Does ActiveSync on the desktop even start up?
If so, on your PC goto Start -> Control Panel -> Network Connections. When you plug the PDA in, does a new connection profile eventually show up in the Network Connections window? It will be called something like Local Connection #6 or something similar, I've renamed mine.
Yes everything connects and establishes a connection. I can browse the device and even upload to and from it. Active sync even tries to sync with the device, but then shows the error detailed above. The XDA was able to upload my contacts to outlook for example after the re-install of windows, but nothing is synced from the desktop pc to the xda.
bump
See the Microsoft Knowledge base..........
............there's something I remember when I had this prob.
For me, it was ZoneAlarm firewall [free edition] which doesn't allow individual ports to be configured, just application rules [you can in Pro version] but in my research, I remember seeing something about Activesync not working even though the exception was set in Windows Firewall.
Try with NO firewall at all - probably best to pull your network cable if you're worried whilst you test ActiveSync with no firewall at all.
I'm sorry I can't post the reference but you should be able to find it again.
I now don't use any s/w firewall - I have a switch router with hardware router built in which shows as 'stealthed' to the outside world on all ports @ www.grc.com [ShieldsUp] and all my WM5 stuff works - ActiveSync and WiFi
I didn't get the error you did, mine just connected then hung whilst showing 'Syncronising'............'cept it never did !!! LOL but I could do all the other things as you describe....just no syncing.
Thanks for the reply. I have already tried without a firewall enabled at all but with no luck. I am trying to work out what is different with this installation tot he previous that worked.
I have found that I need to dissable the Sync of my contacts and it works with the Caldener etc. I have no idea why this is, but its the only solution I can find anywhere and its very frustrating. :roll:
That's a weird one, not be able to sync contacts but can do calendar events.
Have you tried a reinstall of outlook?
If so then, and this is just a guess, it could be that there is something wrong with a particular contact entry that's causing things to go wrong. Perhaps some invalid characters in any one of the many available fields (name, num, email address, website, notes etc).
Some solutions that worked for me
I had the problem with contacts not syncing when everything else would. My solution, which worked for me, was to:
1. disable 'contacts' in ActivSync options
2. sync as normal
3. disconnect device, reconnect device, sync again
4. re-enable 'contacts' in ActivSync options
5. contacts should now re-sync
Incidentally I found many problems with the ActiveSync partnership after restoring the device from a backup. The solution is to delete everything in the \Windows\ActiveSync folder on the pocket PC, go into ActiveSync options on the pocket pc and remove the partnership there. Finally delete the partnership on your PC.
I am running V-Com systemsuite on my PC (which I think uses the Sygate firewall) this firewall never interferes with my XDA Exec but oddly enough does so with my XDA mini S. If I disable the firewall - problem still exists. If I shut down the firewall completely (keeping Windows XP firewall running for security) the problem goes away.
Maybe some of this will help
Cameron
Norwich, England
I had moved the Outlook.pst file to a location other than the default. When I moved it back and created a new profile the error had gone. thanks for the help everyone.
Sounds like it was a corrupt pst file causing the problem then. I'm glad you got it all working now
Re: Some solutions that worked for me
apprentice said:
I had the problem with contacts not syncing when everything else would. My solution, which worked for me, was to:
1. disable 'contacts' in ActivSync options
2. sync as normal
3. disconnect device, reconnect device, sync again
4. re-enable 'contacts' in ActivSync options
5. contacts should now re-sync
Incidentally I found many problems with the ActiveSync partnership after restoring the device from a backup. The solution is to delete everything in the \Windows\ActiveSync folder on the pocket PC, go into ActiveSync options on the pocket pc and remove the partnership there. Finally delete the partnership on your PC.
I am running V-Com systemsuite on my PC (which I think uses the Sygate firewall) this firewall never interferes with my XDA Exec but oddly enough does so with my XDA mini S. If I disable the firewall - problem still exists. If I shut down the firewall completely (keeping Windows XP firewall running for security) the problem goes away.
Maybe some of this will help
Cameron
Norwich, England
Click to expand...
Click to collapse
First of all you have to open some ports in the sygate firewall: http://www.microsoft.com/windowsmobile/help/activesync/sygate.mspx
In my experience it's necessary to change the RNDIS driver settings in the mobile phones registry as well!
Use a regedit tool like PHM Registry Editor.
Here are the settings to be added (or to be changed respectively):
Key: HKEY_LOCAL_MACHINE\Drivers\USB\FunctionDrivers\RNDIS
Name of the Value to add: MTU
Type : DWORD
Data: 1514 (Value is Decimal)
Name of Value to add: MaxOutTransfer
Type: DWORD
Data: 1642 (Value is Decimal)
After a reset my Prophet (XDA Neo) synchronized well with active sygate firewall!
Hi,
Maybe I am beating a dead horse but could somebody please help me with these questions about BBConect.
Device: T-Mobile MDA with ROM version 2.26.x
Questions:
1. What are the advantages of using BBConnect (other than receiving emails from BB Servers)
2. Where does it write emails to (Outlook Inbox or any designated folder)?
3. If I use BBConect can I still use ActiveSync to synchronize with other Outlook Inbox folders?
4. I have seen somewhere that the WAP proxy needs to be changed: How does it affect other apps like T-Zones? Can I still connect to the Internet using GPRS?
5. How easy is it to install, configure & operate BBConnect?
Also if somebody could give a step-by-step install guide (all pdfs I downloaded are not in English), that will really help out.
Thanks in advance.
Before answering, I can tell you that rom 2.26 and the current BB connect client do not work. You will have to use a different rom. For me, based on postings on teh forum, qtek 2.17 and cingular radio 2.25 work well.
Now to your questions:
1. What are the advantages of using BBConnect (other than receiving emails from BB Servers)
replacement for bberry service and device. if your company has a BES server, you can now use your MDA to get corpoarte email. (I do not believe it works with blackberry internet service)
2. Where does it write emails to (Outlook Inbox or any designated folder)?
designated folder
3. If I use BBConect can I still use ActiveSync to synchronize with other Outlook Inbox folders?
yes
4. I have seen somewhere that the WAP proxy needs to be changed: How does it affect other apps like T-Zones? Can I still connect to the Internet using GPRS?
yes. BBerry will use a different connection. My MDA deals pretty well with switching from one connection to teh other (automatically)
5. How easy is it to install, configure & operate BBConnect?
if you have the right ROM, pretty easy. see the other posts on teh forum. But you can't6 use rom 2.26 yet.
Thanks for the answers.
I guess I will wait for T-Mobile to update the ROM.
I am not against running other ROMs, it is just that I have bricked couple of devices and wasted too much time to get the data back.
-G
Is there any option to have blackberry and MSN Messenger simultaneusly connected?
not really: they use different GPRS access point.
I know this thread is dead for some time, but I would like to get ne1fl0w5 wave here.
I have a Qtek 9100 from Claro (Telmex Brazilian sub). It was running 2.22.17.1 PTB ROM and 2.46.11 radio rom. First tried all BBConnect clients available (they were many). All installed but would halt at "Not connected" after first provisioning of the device and connection through GPRS/EDGE. After duly CIDunlocking the Qtek at imei-check (mine is a G4, I forgot to mention), I took a deep breath and decided to give it Vodafone's ROM a shoot.
I followed these instructions and managed to make it work.
Now, to your questions:
Questions:
1. What are the advantages of using BBConnect (other than receiving emails from BB Servers)
First of all, I have to say that I find (or thought, at first) BB email services excelent, but the devices really bad. Those little keys are small even for my 9-month old baby. Besides that, that trackwheel will certainly cause repetitive stress injuries. I used for less than a day and my arm started aking (please, don't say I am fragile) In addition, it was not made for lefties such as me. And the 8700g does not have an efficient cursor (for instance, if you are to delete a letter in the beggining of a line (or two words before the cursor), you would have to delete everything and retype the text.
For those reasons, I prefer the Qtek...
As per the system itself, I have to say that emails are delivered really fast to each of them. In Blackberry connect, the calendar items are also syncronized correctly as well. However, it did not sync my contacts (and it is probably not meant to), as opposed to the Blackberry device, in which both were available.
2. Where does it write emails to (Outlook Inbox or any designated folder)?
Designated folder. You can chose which server folders you want sync'd as well.
3. If I use BBConect can I still use ActiveSync to synchronize with other Outlook Inbox folders?
Yes. However, BBConnect uses a dedicated GPRS connection and it will compete with Outlook for the radio. You will probably have issues if you are looking for concurrent exchange push functionality.
4. I have seen somewhere that the WAP proxy needs to be changed: How does it affect other apps like T-Zones? Can I still connect to the Internet using GPRS?
Whenever you connect to do anything else, your BB connection will be lost.
5. How easy is it to install, configure & operate BBConnect?
It was hard to install all Roms required to make it work, but once you have this part finished, it is very easy to get things going.
Also if somebody could give a step-by-step install guide (all pdfs I downloaded are not in English), that will really help out.
The post above gives you all the directions (except for creating the blackberry.net connection, which is not necessary).
Sorry for the lenghty (and completely out of time) post, but I would like to share this with you.
Also, I would like to say that I was not very impressed with the way things eventually got working. first thing I noticed was that the reconciliation with the server was not complete. For instance, read messages did not display as such at my server, only at the device. In addition, the BB service uses lots of storage and memory.
In the end, I prefered my Qtek 2.22 rom (much faster to load) and much better loking style. Because of all this, I have just reverted to Qtek's rom and decided to go with email redirection to an external exchange sp2 account. Although we have that in the office, they have high security standards (but forgot to prevent email redirections).
Rafael K
BB Connect on WM6
Blackberry is running smoothly in Universal with WM6 Rom all thanks to c0rnholio. He figured out a way to change the string that will work through decoding>changing>encoding and flashing and finally a small aku registry change.
I was wondering if same thing can be done with wizard.
Here is how-to from c0rnholio
I managed quite easy to get BB Connect running (for company email via BES).
I had the 2.24 (Mr Clean) OS ROM, 2.24 Bootloaders and 2.25.11 Congular Radio. I knew that would not support BB.
I took the OS and ExtROM from the QTek 2.17 package, changed the pagepool to 8MB (BB was said to be a memory consumer), repacked them to a new nk.nbf (with only OS and ExtROM), upgraded, installed BB Connect 2.1.2.31 (downloaded from the Vodafone.de website) and voila!
By just following the Blackberry Connect tutorial (also downloaded from vodafone.de) I had it going.
Good to know:
-I did this exercise after I received my Blackberry device from my employer (I was happy with the functionality, not with the device). So I was sure that the BB functionality was Ok for my company email account.
-When I generated the key for my PDA PIN the Blackberry device was no longer functional (I can think of reasons why).
-I did not have to use the SIM I have in the Blackberry device, in my PDA I am still using my Voice SIM (which also has a data plan)
Hi
I'm also working on getting BBconnect to work with the newer roms. I managed to get it to work with the latest Tmobile rom 2.26. But Crossbow still no luck.
I looked at the solution for changing the strings, but unfortunatly the strings mentioned are not in the crossbow rom...so can't change them (I guess they're different?).
I have contacted Faria; he seems to have a way to tweak the system so that it will work. He's currently on holiday but as soon as I have some info I'll post it here.
Did you try to get it to work on the latest aku3.3 rom?
now works
I've got it now working on all roms...including Crossbow. There is a detailled explanation in the developing forum that shows how to change the rom for BBconnect to work.
Is there an easy way to do this?
I am not a complete newbie, but I am certainly no expert in hex editing, so I was wondering if there is an wasy way to make it work on other Wizard ROMs, including the Brazilian provider I am hooked with.
Currently I am using Tmo's ROM, but there are a lot of features in this ROM I do not use and that take lots of space...
Thanks
Hacking isnt that difficult, it's just that you need to understand how it works.
The thread in Development & Hacking says it all.
I think (just have to dare to flash the hacked os now!) I managed to hack the official AKU3.3 WWE ROM.
Hi, I installed Intellisync on my new HTC Touch Dual. If I trigger Sync by pushing the button everything works fine.
My surprise the ReadySync scheduler does not work! The PDA does never trigger an unattended sync.
Tried with device on & off, forced connection, etc. with no success.
Also tried to install different versions of the CABs. The two I have are 6.5 and 7.0.5. The same versions work fine on other WM6 devices of my colleagues (TytN, Glofish).
Any idea?
Found the solution
Hi, nobody answered my question but I think I found the solution which I post in case someone else has the same problem ...
The issue is with Connection Documents. The HTC auto-configured GPRS/Edge/UMTS at first setup based on info from my telecom provider (Swisscom).
For some reason intellisync has a problem in reading these connection documents. What I did is creating a new copy manually with the same GPRS settings and set "Auto Pick" option under Connection Manager.
After that Intellisync started to execute scheduled synchronizations! Strangely the manually created connection is not visible in its connection setup list, but who cares - it works.
Do you know where can I get the Intellisync cabs? The one my company provided me with makes my Niki to reboot after each sync. (Pretty annoying..)
Anybody?
Intellisync
We cannot
For these reasons :
1) Intellisync is copyrighted and we do not use warez
2) The client is linked to the server version. You cannot install ver 8 on your pda to synchronize with a version 7 server for exemple
3) Every intellisync server comes with a full set of intellisync client so your company have the right one for you
Hello
I've had my HD2 for almost a month now (replacing my iPhone 3G) and prefer it over my 3G in every way, except Microsoft Exchange email support.
I'm trying to connect to my Uni account. It syncs OK the first time/few times after a hard-reset but afterwards I keep getting the invalid security certificate error below
I've searched everywhere and tried different ROMs but no solution. I didn't have to provide any digital certificate for the iPhone or Outlook on my laptop..
I use the same settings on my iPhone (SSL enabled etc)
Anyone else have this problem?
Thank you
the problem isnt the hd2...... it is your lack of having the right cert your iphone downloaded it winmo requires u to install winmo handles exchane perfectly if you set it up right
So if I remove the iPhone from my synced devices list in OWA will it work?
what you need to do is get the cert your webmail is using. By going to the site you should be able to click the lock icon by the address in internet explorer and view the cert. Export it (copy to file) as a .cer file and put it on your device. then click it in file explorer on your phone and it will install. Once you get it installed it will work perfectly.
Ignore me - as above
Thanks for the replay. I came a cross a solution like that yestarday but it didn't work.
Anyways i've tried again now and heres what I did: deleted the exchange account on the phone completely, exported a certificate from OWA on firefox but it came out as a .crt which the phone can't read, so I converted it to a .cer and opened it on the phone, it gave me a sucess message.
Now I added the email account again and like before, it synced perfectly. However I soft-reset and can't sync anymore..
I use gmail over activesync. You could set up a gmail account and see if that works. If it does your exchange isn't setup properly...
I want to add that I never had any issues setting up an exchange mailbox on activesync. Some haertbeat issues yes, but never the setup itself.
I highly doubt it since a uni would probably use 'the usual' routes for ssl certs, but you might have to export & add the intermediate certificates.
As an example, here is mine, using FF so you're looking at a consistent screen.
If you click on the line ending in (2048), it is a different cert than the one ending in "- L1B" So export all 3 certificates (or however many lines you see) and import them over.
For the record, my exchange works perfectly fine as well.
mazzarin said:
I highly doubt it since a uni would probably use 'the usual' routes for ssl certs, but you might have to export & add the intermediate certificates.
As an example, here is mine, using FF so you're looking at a consistent screen.
If you click on the line ending in (2048), it is a different cert than the one ending in "- L1B" So export all 3 certificates (or however many lines you see) and import them over.
For the record, my exchange works perfectly fine as well.
Click to expand...
Click to collapse
THANK YOU
I've exported all three and worked.