Database Users

Exchange server with invalid certificate

My company runs an exchange server that i can connect to via SLL on the web. However, I always got an invalid certificate message. On 2003 devices on ran certchk and i could synschronize my mail, calender and contacts.
Now - with my JJ - i can not get to my mail anymore because of this invalid certificate. I does not help to download the certificate to my device, since it is invalid.
Is there any reg hack, apps or whatever i can use to overcome this?
Thx

Ronaldovic,
Try exporting the root certificate from the Certificate Authority in "DER" format, copy it to the JJ and run it. This should work as the JJ is not certificate locked.
Ferg.

I did - and when i look in settings-certificates - it shows in the list of certificate but with an enddate of somewhere in 2003 (so it is not valid).
Again, with certchk in 2003 devices it all worked flawlessly.
Are the certificates still be the problem now? Or is it something else?
When i sync, i get an error: 0x80072F17

Ah sorry, I read your mail but didn't really read it and assumed I knew what you were saying.
If you can get a reg editor for the JJ (I use something called "Mobile Registry Editor" which is a PC-based app and works through ActiveSync), change DWORD Value under HKCU\Software\Microsoft\Activesync\Partners\[Secure] to 0 I gather this will do it.
On the point of the certi though, can you not get the CA to issue a new certificate to the Exch box? When connecting through SSL, ActiveSync doesn;t give you a "Yeah connect, I don't care!" dialog box as OWA does.
Ferg.

got a good reg editor, but can not find the last [secure] part...what do u mean by that? For example below ..\partners i see two entries(default) and (ServerNameChanged). and two directories with strange numbers.
About the certificate thing...if i understand u correctly i will never connect if i do not have a valid certificate?
I appreciate the help!!

YEAH!!! Great, got it working, thx to u!
I just love this forum.

Glad to hear it!

I am back....
The sync goes ok now, but every time i send a new mail, it gets send twice. In my outbox on the JJ there is one email, when i receive i see two coming in (exactly the same)
Any1?

i can get it to look like its working by turning off ssl. e.g. it says sycing 20/20 emails. However when i go to messages there are none there! Similarily contacts, tasks and calendar items appear to be syncing in active sync, but they just dont show up!

Hi,
I have run into the same problem.
Used the tips on changing the registry (for which I really thank you!!!).
However, it seemed working until I realize that my Treo 700w keeps asking for the password. No matter how many times I enter my password correctly, it just keeps asking the password over and over again. It does not save my password even if I select "save password" option.
Have you run into this problem and found any workaround?
Thanks in advance. Bo.

Boryu,
Remove and re-add the server source.
I've had this a few times and it's well annoying! This seems to do the trick though.
Ferg.

same issue
i have the same issue,
i used registry editor but its not allowing me to add the reg key!!
am i doing something wrong,, and were do i add the Secure Dword?

Why don't you just renew the certificate? Just right click the website folder within IIS 6.0 and select Properties. There is a security tab (Directory Security?) within which you can renew an existing certificate.
I had the same problem getting push email to work, and renewing the certificate fixed the problem.

Why don't you just renew the certificate? Just right click the website folder within IIS 6.0 and select Properties. There is a security tab (Directory Security?) within which you can renew an existing certificate.
I had the same problem getting push email to work, and renewing the certificate fixed the problem.

ronaldovic said:
got a good reg editor, but can not find the last [secure] part...what do u mean by that? For example below ..\partners i see two entries(default) and (ServerNameChanged). and two directories with strange numbers.
About the certificate thing...if i understand u correctly i will never connect if i do not have a valid certificate?
I appreciate the help!!
Click to expand...
Click to collapse
Hi i see exactly the same, but wich value do i have to change ??
please help
thanks in advance

webmail password problem !!!SOLVED!!!

Hi,
I need your help to solve a small but annoying problem. In the first day I had my Qtek 9000, as I I´m a very nice guy, I let my girlfriend consult her mail in it, but she checked the remember password. Now, always I open the webmail, the Qtek automatically opens her e-mail. Even if I log out, when I open again it does the same. So I can´t access my webmail through my Qtek.
Does anyone know where this password is stored so I can delete it? Or do you have other solution?
Thanks,
JFonseca

Try removing all cookies in PIE.
Best regards
tomestos

Tried that, but doesn´t work :-(

SOLUTION
The PIE passwords are locate here:
HKEY_CURRENT_USER
Software
Microsoft
Windows
CurrentVersion
Internet Settings
Passwords
I did it yeahhhhhhhhh

TyTN "forgets" personal certificate

I try to get my mails pushed to my TyTN. Thus I enabled the appropriate services on my Exchange 2003 SP2 server, set the user permissioning and so on. I generated an P12 cert with my CA and imported it using p12import.exe on my tytn. I also installed .cer for the domain and for the CA on the mobile device. Thus I was able to sync and push. Now I am facing the following issue:
After successfully syncronizing and pushing for some hours, I regularely get an 0x85030027. Checking my certificate I can see that my p12 is gone. After reimporting it using p12import, i can change the server settings the following way to force an "reinitialisation" of the link between user settings and cert: I delete the "m" in "blabla.dynaccess.com", go forward to login information - the password is gone then - go back to the server, add the "m", go forward adding the password. Sometimes I am than able to sync again, sometimes I get an 0x85010004. In the latter case I must delete the whole server setting - loosing all my mails - and have set it once again.
Dealing with this issue now for several days and beeing unable to find any description or solution in this forum and the web, I kindly ask for any idea which could be considered beeing helpful...
PS.: Sorry for my English - it is not my native tongue ;-)

I use CACert certificate for my email and have imported it using smartphoneaddcert utiltity from Micro$oft.
Copy your certificate into \Storage\root.cer (has to be named like this) and run SPAddCert.exe, hopefully that should work

thanks for the immediate answer. i already installed my root-certificate with no probs. The issue I have is related to the individual cert for the device, generated and signed by my ca, which is trusted by the tytn. This individual one disappears after some syncs?!

I don't experience the same problem ...
I think your method is ok (Jacco in DDSL.NL) have a nice tools to import personal certificate to device...
You may also look : http://www.httpsync.net
Cheers
André

Now I can describe the problem more precise: the personal certificate disappears after every soft reset?!

I have the exact same problem !!!!
When you do a soft reset the personal Certificate disappears.
I can reimport it directly, but I need to hook it up to a PC in order to validate the Certificate.
Is there no other way. This is really annoying when i'm on a trip, and I have to soft reset the device.
Does anyone know hpw this can be done differently.
Thanks
Micman

MS hotfix for SMTP not needed for HD

In case you are wondering if you need to install the hotfix Microsoft released yesterday for the deadly SMTP "bug" in WinMobile: You don't need it, since HD has 6.1.4, and patch is only needed for up to 6.1.3 . Only remedy until now was hardreset, for pre-HD.
Link to MS hotfix page: http://bit.ly/Kv5b
This behavior is associated with a feature that was introduced in Windows Mobile 6.1. It provides a way for users to send e-mail through an alternate outbound e-mail server provided by their mobile operator in the event that the default outbound e-mail server becomes inaccessible.
The problem occurs if a mobile operator doesn't use this feature, and therefore doesn't supply a value for the alternate SMTP address. When the mobile device fails on any attempt to connect to the e-mail provider's default SMTP server, Windows Mobile 6.1 automatically loads the value for the alternate SMTP server—which in this case is blank. The e-mail account configuration details are then corrupted, which results in loss of the ability to send e-mail with that particular e-mail account.
With this fix, the feature is patched to ensure that Windows Mobile 6.1 takes appropriate action when it detects a blank value for the Alternate SMTP server.

TT and Garmin did work, but now not getting gps fix, advice please.
Hi!
sorry miss post !
Ofiaich

Ofiaich, I think you may have replied to the wrong thread there.

Lucas0511 said:
In case you are wondering if you need to install the hotfix Microsoft released yesterday for the deadly SMTP "bug" in WinMobile: You don't need it, since HD has 6.1.4, and patch is only needed for up to 6.1.3 . Only remedy until now was hardreset, for pre-HD.
Click to expand...
Click to collapse
Thanks for that information
Good news is always most welcome !
- Steve

hi there
i just want to make clear that the smtp bug is NOT fixed on WM 6.1.4 . I recently bought the HD
and it has like mentioned before
WM 6.1.4.0 running on it, but still i cannot send emails,
it wont connect with the smtp server. Can anyone tell me wether an un-
official fix is available for the smtp bug on WM 6.1.4.0?
i looked everywhere but found nothing.
thanx in advance

same problem
6.1.4 is not fixed, smtp fails... and you can't install the fix that works only until 6.1.3
please help, I tried anything but I can't find any good tip or patch around..
thanks

I do a lot of email on my HD, before with SMTP. But I prefer Push (receiving email on my HD automatically), so if your provider supports Imap maybe Imap Pusher Service is for you:
http://www.codeplex.com/ImapPusherService
The program is no longer supported, and has a bug freezing it when it cannot connect to the server for a prolongued time (no signal), but it works fine in major coverage areas. I use it with Gmail and German GMX.

Well, since the bug is basically that your operator has not set a secondary SMTP server in the registry, maybe this reg entry suggested by ButtonBoy from this forum here could help you.
1. Add the reg key “Operator” to \\HKLM\System\Inbox\Settings
2. Add the reg key "OutgoingServer" below Operator key.
3. Add the reg val (reg_str) "OutgoingServer" below Operator key- “127.0.0.1”
4. Soft reset
Of course this is not a working SMTP server, but maybe your Outlook Mobile will be happy with it.
http://forum.xda-developers.com/showpost.php?p=2776411&postcount=83

I tried buttonboy fix...
doesn't work
smtp settings from my provider are:
incoming:
mail.xxx.com ssl activated
smtp:
smtp.xxx.com ssl activated
username and password different from incoming

Ok, just to make sure, and since the smtp/imap bug corrupts your mail account and settings, did you try the buttonboy fix with a new mail account, not an already corrupted one I hope.
The Outlook Mobile team on the blog says its working on a fix for the fix, but only covering problems with the initial fix not being validated by a certificate on the mobile. Doubt this will cover problems you have.
In the meantime, maybe you could try out Flexmail trial client as an alternative to Outlook Mobile messaging.
http://www.webis.net/products_info.php?p_id=mail

thanks...
I'm trying flexmail
my provider told me that maybe the bug it's depending on their server not running windows but linux.

[Solved] Having problems handling Microsoft Exchange Email on my HD2

Hello
I've had my HD2 for almost a month now (replacing my iPhone 3G) and prefer it over my 3G in every way, except Microsoft Exchange email support.
I'm trying to connect to my Uni account. It syncs OK the first time/few times after a hard-reset but afterwards I keep getting the invalid security certificate error below
I've searched everywhere and tried different ROMs but no solution. I didn't have to provide any digital certificate for the iPhone or Outlook on my laptop..
I use the same settings on my iPhone (SSL enabled etc)
Anyone else have this problem?
Thank you

the problem isnt the hd2...... it is your lack of having the right cert your iphone downloaded it winmo requires u to install winmo handles exchane perfectly if you set it up right

So if I remove the iPhone from my synced devices list in OWA will it work?

what you need to do is get the cert your webmail is using. By going to the site you should be able to click the lock icon by the address in internet explorer and view the cert. Export it (copy to file) as a .cer file and put it on your device. then click it in file explorer on your phone and it will install. Once you get it installed it will work perfectly.

Ignore me - as above

Thanks for the replay. I came a cross a solution like that yestarday but it didn't work.
Anyways i've tried again now and heres what I did: deleted the exchange account on the phone completely, exported a certificate from OWA on firefox but it came out as a .crt which the phone can't read, so I converted it to a .cer and opened it on the phone, it gave me a sucess message.
Now I added the email account again and like before, it synced perfectly. However I soft-reset and can't sync anymore..

I use gmail over activesync. You could set up a gmail account and see if that works. If it does your exchange isn't setup properly...
I want to add that I never had any issues setting up an exchange mailbox on activesync. Some haertbeat issues yes, but never the setup itself.

I highly doubt it since a uni would probably use 'the usual' routes for ssl certs, but you might have to export & add the intermediate certificates.
As an example, here is mine, using FF so you're looking at a consistent screen.
If you click on the line ending in (2048), it is a different cert than the one ending in "- L1B" So export all 3 certificates (or however many lines you see) and import them over.
For the record, my exchange works perfectly fine as well.

mazzarin said:
I highly doubt it since a uni would probably use 'the usual' routes for ssl certs, but you might have to export & add the intermediate certificates.
As an example, here is mine, using FF so you're looking at a consistent screen.
If you click on the line ending in (2048), it is a different cert than the one ending in "- L1B" So export all 3 certificates (or however many lines you see) and import them over.
For the record, my exchange works perfectly fine as well.
Click to expand...
Click to collapse
THANK YOU
I've exported all three and worked.