Can anyone school me in how to force a certificate to install to the trusted root instead of the intermediate? I need to install one to work with our exchange server but it keeps going to intermediate and causing the sync to fail.
I know the cert is good because it is the same one i have used for multiple smartphones, but then one of the guys here went and got one of these PDA's, so now i have to re-learn how to do everything. I'm starting to get the hang of it (no offense, but these PDA's are so complicated, it sorta makes me appreciate the simpleness of my excalibur) but I am just stuck at this certificate thing.
I have tried installing the sp_allowcertificate.cab, since it seemed to not have a problem with it being a smartphone program, but it also didn't fix anything.
PLEASE if anyone can help at all it would be greatly appreciated.
All I do when I have to setup an Exchange sync with an SSL certificate is export the SSL certificate itself from your web-browser as a .cer or .crt file. Then copy it to your device and run it from there.
duh, i fixed it. i had this problem once before and i finally remembered what i had to done to get it to work. There is an old certificate and a new certificate and i had accidentally been using the old one, which is the same thing i was doing this time.
i'm currently deleting all the copies of the old certificate, LOL, thanks for your reply tho
No worries, glad you got it figured out. We all have our "moments"
Digital Outcast said:
All I do when I have to setup an Exchange sync with an SSL certificate is export the SSL certificate itself from your web-browser as a .cer or .crt file. Then copy it to your device and run it from there.
Click to expand...
Click to collapse
Sorry to Hijack this thread, but I have the same problem. I did exactly what you said, and exported the certificate to the device. But it doesn't recognize it as being associated to a program. I tried crt, cer, der extensions with no luck.
Anything I'm missing? WinMo 6.1
Related
Don't know if anybody is having the same problem as me.
We have an M$ Exchange server which I use for work. We've not bought verified certificates as we don't need to. WM5 doesn't allow me to install our wilcard certificate onto my MDA Vario. I've tried various methods posted in different forums:
Changing the registry HKLM\Security\Policies\Policies\00001017 from 128 to 144. I also changed 00001001 to 1 and 00001005 to 40 but i dont think that helped.
My certificate is still not recognised!
Anybody have a solution?
Will
willcheng,
If you got W2003 server and Exchange 2003 then you don't have to buy certificates you make your own.
Installing these in WM5 is easy, just copy them to your device and they will be installed after clicking on them.
Please let me know if you have w2003 and Exchange 2003 then I will let you know how to do it.
But if you have an M$ drive on your server I thing you are using Exchange 2000 or 2003 on witch you can add the M drive.
I'm using w2003 with Exchange 2003 and the certificate is working wonderful.
Cheers,
Drifter
You need to install the root certificate not the one that was issued to the Exchange server. What CA issued the certificate for your Exchange server? Install that certificate. If you are using MS Certificate Services you can just go http://<CA Server Name/certsrv and download the root certificate or the chain. You can then just copy them to your device and click on them and they should automaticaly import. If it is not installing then what type of certificate are you trying to install? If it is not X.509 you need to convert it to X.509. Also I had this problem installing on a locked Sprint Phone on WM 2003. I had to use this.
SPAddCert.exe
Hi all,
I have just upgraded to ROM 2.17.7.6 FRF on my Qteck 9100, service provider SFR (France).
Big problem : I cannot sync anymore with my Exchange Server. I understood the source of the problem: the Exchange self signed certificate is missing on the device after the Rom update. I tried to install it manually (by copying the .cer file via AS onto the device) but when I double click on the .cer file in the device, I get the message "Access to the certificate is impossible" (translated from French). There seems to be some kind of protection againts installing root certificates.
Any idea to get around this ?
Thanks -- any help really really appreciated. I am quite desperate at this stage...
Did you make sure to export the root certifcate in binary not MIME encoded format?
For me it worked to import a binary root certificate.
Thanks TcT.
Well I am not sure of the content of the .cer file.
What I did was simply copy the original .cer from the Microsoft Server to my client PC and then via Active Sync to the device and then double click on it. Nothing else.
What did you do?
There are several ways to export that Cert so that you can copy it though. DER encoded binary is what you need to use. In my case, I used a copy of my server's root cert on IE on my desktop. I exported it in DER format then copied it onto my 8125. I then tapped it and chose "install certificate".
In fact, I just tested this again on my Qtek 2.17 equipped 8125 and it worked perfectly.
Thank you Sleuth,
sorry to ask dumb questions but how do you use IE to import the cert in the requested format? What I did is I went to the \clientapps directory of the server and simply copied the .cer file. I suppose this is wrong.
You can double click on the .cer file on your PC there should be an "export" or "copy" button somewhere in that dialog there you can export the .cer file in different formats/encodings.
TcT great it worked
10 000 thanks. That was the trick
Exchange Activesync with Certs enabled
Hi,
I also have a Qtec 9100 an am unable to sync with Exchange using Certificates
I can sync if i turn OFF SSL on the server, i can also sync if i add the appropriate reg key into the device to disable Cert checking however i am curious to know if others have been able to sync using a manually created Cert .
i have tried exporting the cert from the server and the Desktop PC in all available formats and i am able to import this into the Trusted Root folder on the Qtec however each time i try to sync i get the error :
0x80072F01
Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.
any assistance is greatly recieved
Jedismurf
Certificate Uility
There is a great certificate import utility available...
http://www.jacco2.dds.nl/networking/crtimprt.html
I have used the PFXimprt but the newer one - P12imprt does WM5 and WM 2003.
I need to install a certificate for wifi on my university. As you all know PEAP needs a personal certificate. But when i install the certificate it's placed in the base folder and not in the personal folder.
Yes i added the ValidateServerCert to the registery.
Anyone can help?
If I am not mistaken it should be in the base
or it may depend on the certificate
In my case I also need a cer to use my Uni's WiFi and when I install it I find it in the base list
my problem is the certificate seems to be outdated otherwise according to the instruction I had the certificate should be in the base list.
Not sure if this helps, I have a digital certificate which allows me to get onto my work email from home.
I just copied the certificate to my memory card and then opened it through the phones file explorer.
It installed the certificate for me.
I installed the certificate the same way as you. But when i try to connect the router, it says: "you need a personal certificate" and personal certificates are used to identify yourself and base certifactes are not. So i think i need to get that certifacte to te personal folder.
Have you tried via ActiveSync? Saw an option last night, although have no experiences with certs.
Try secureW2 plug-in. (use google to find it)
A common problem is that you need certain root certificates as well- and WM doesn't download/ install them.
There are even networks that you won't be able to connect to using PEAP- like the one my uni uses. Don't ask me for detailed reasons... It's some kind of yet unsolved WM-WiFi-certificate-issue.
i use secureW2 as well at my university... works great
Hi
Trying for around 24 hours solid now to get my citrix ica client running on the hd2, gets right to the point where it launches the desktop and then dumps me out with the following error:
SSL Error 61: You have not chosen to trust "UTN-USERFirst-Hardware", the issuer of the server's security certificate.
Driving me mad. Really mad. Googled loads, tried importing the certificate after downloaded from web. Is there a cert manager in winmo6? Not even sure this is the problem. Had it working fine on the old Athena / Advantage.
Help!!!!!!!!!!!!!!!!!! Please!!!!!!!!!!!!!!
I don't know if this can really help, but if you have a .cer file, then simply open it and winmo will install the certificate.
Also you can find installed certificates in Parameters > System > certificates
Hi
I'm trying to work out how you install an SSL certificate on the HTC HD2.
I have downloaded the file and have it in a .crt format.
Can anyone help me get this onto my HD2?
I have loaded it onto my device but when I try and install it I get the following error "There is no application associated with "xxxxxx". Run the application first, then open this file from within the application".
Do I need the file in a different format?
Please help as this is driving me potty!
Thanks
Same problem here, I wanted to install certificate for emails but same error...
I am having the same problem
I have tried installing the Certificate by using the SpAddCert.EXE but the phone does not like this application.
Stuck now!
problem is the crt format, if you convert it to a .cer then there isn't a problem
Hello all I have sorted my certificates out
Format was the problem.
I am Using IIS for our certificate - STARTSSL Issued certificate:
Export Certificate to a .PFX file. Copy to device (I copied to root) installed the certificate > reboot.
I was then able to sync - but came up with an 0x80072fod error and would not connect
Googled and found this is because root certificate not installed.
Downloaded STARTSSL root certificate and installed rebooted and problem sorted.
Man that rootCA never got to my mind.
You have my eternal gratitude