Hi
Trying for around 24 hours solid now to get my citrix ica client running on the hd2, gets right to the point where it launches the desktop and then dumps me out with the following error:
SSL Error 61: You have not chosen to trust "UTN-USERFirst-Hardware", the issuer of the server's security certificate.
Driving me mad. Really mad. Googled loads, tried importing the certificate after downloaded from web. Is there a cert manager in winmo6? Not even sure this is the problem. Had it working fine on the old Athena / Advantage.
Help!!!!!!!!!!!!!!!!!! Please!!!!!!!!!!!!!!
I don't know if this can really help, but if you have a .cer file, then simply open it and winmo will install the certificate.
Also you can find installed certificates in Parameters > System > certificates
Related
Hi all,
I have just upgraded to ROM 2.17.7.6 FRF on my Qteck 9100, service provider SFR (France).
Big problem : I cannot sync anymore with my Exchange Server. I understood the source of the problem: the Exchange self signed certificate is missing on the device after the Rom update. I tried to install it manually (by copying the .cer file via AS onto the device) but when I double click on the .cer file in the device, I get the message "Access to the certificate is impossible" (translated from French). There seems to be some kind of protection againts installing root certificates.
Any idea to get around this ?
Thanks -- any help really really appreciated. I am quite desperate at this stage...
Did you make sure to export the root certifcate in binary not MIME encoded format?
For me it worked to import a binary root certificate.
Thanks TcT.
Well I am not sure of the content of the .cer file.
What I did was simply copy the original .cer from the Microsoft Server to my client PC and then via Active Sync to the device and then double click on it. Nothing else.
What did you do?
There are several ways to export that Cert so that you can copy it though. DER encoded binary is what you need to use. In my case, I used a copy of my server's root cert on IE on my desktop. I exported it in DER format then copied it onto my 8125. I then tapped it and chose "install certificate".
In fact, I just tested this again on my Qtek 2.17 equipped 8125 and it worked perfectly.
Thank you Sleuth,
sorry to ask dumb questions but how do you use IE to import the cert in the requested format? What I did is I went to the \clientapps directory of the server and simply copied the .cer file. I suppose this is wrong.
You can double click on the .cer file on your PC there should be an "export" or "copy" button somewhere in that dialog there you can export the .cer file in different formats/encodings.
TcT great it worked
10 000 thanks. That was the trick
Exchange Activesync with Certs enabled
Hi,
I also have a Qtec 9100 an am unable to sync with Exchange using Certificates
I can sync if i turn OFF SSL on the server, i can also sync if i add the appropriate reg key into the device to disable Cert checking however i am curious to know if others have been able to sync using a manually created Cert .
i have tried exporting the cert from the server and the Desktop PC in all available formats and i am able to import this into the Trusted Root folder on the Qtec however each time i try to sync i get the error :
0x80072F01
Synchronization failed. The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again.
any assistance is greatly recieved
Jedismurf
Certificate Uility
There is a great certificate import utility available...
http://www.jacco2.dds.nl/networking/crtimprt.html
I have used the PFXimprt but the newer one - P12imprt does WM5 and WM 2003.
Hi,
Im trying to sync email trough internet. The problem is this, it says:
the securite sertificate on the server is invalid. Contact your Exchange
Server administrator or ISP to install a valid certificate on the server.
Can i some how get pass this message? Can i change some settings that it wont alert me that kind of messages?
When i use mail with IE browser it gives the same error but i can pass it just pressing continue and email works fine but tytn gives no continue buttons.
and my phone is hermes 200
-Matti-
Hi Matti,
If your trying to use SSL, a PocketPC needs a proper SSL certificate installed to sychronise.
You need to install the root certificate - a good way to do this is by exporting the Root certificate to an CER file through IE. You just go to the site on a PC, and double click the little padlock. Then click export to a file to get the .CER file.
Once you've done this, copy it to your Pocket PC, and it should work immediately.
Good Luck
What is the path where I copy the file?
Cant find oultlook folders
Ok. Now I installed it and same error message appears.
Any ideas?
Is there any way to turn off certificate validation in windows mobile 5.0?
Ok I think I need this file but I dont have that CD. Could someone email me that file, please
AS_Cert_Off.cab it is on the Microsoft Mobile Information CD
Can anyone school me in how to force a certificate to install to the trusted root instead of the intermediate? I need to install one to work with our exchange server but it keeps going to intermediate and causing the sync to fail.
I know the cert is good because it is the same one i have used for multiple smartphones, but then one of the guys here went and got one of these PDA's, so now i have to re-learn how to do everything. I'm starting to get the hang of it (no offense, but these PDA's are so complicated, it sorta makes me appreciate the simpleness of my excalibur) but I am just stuck at this certificate thing.
I have tried installing the sp_allowcertificate.cab, since it seemed to not have a problem with it being a smartphone program, but it also didn't fix anything.
PLEASE if anyone can help at all it would be greatly appreciated.
All I do when I have to setup an Exchange sync with an SSL certificate is export the SSL certificate itself from your web-browser as a .cer or .crt file. Then copy it to your device and run it from there.
duh, i fixed it. i had this problem once before and i finally remembered what i had to done to get it to work. There is an old certificate and a new certificate and i had accidentally been using the old one, which is the same thing i was doing this time.
i'm currently deleting all the copies of the old certificate, LOL, thanks for your reply tho
No worries, glad you got it figured out. We all have our "moments"
Digital Outcast said:
All I do when I have to setup an Exchange sync with an SSL certificate is export the SSL certificate itself from your web-browser as a .cer or .crt file. Then copy it to your device and run it from there.
Click to expand...
Click to collapse
Sorry to Hijack this thread, but I have the same problem. I did exactly what you said, and exported the certificate to the device. But it doesn't recognize it as being associated to a program. I tried crt, cer, der extensions with no luck.
Anything I'm missing? WinMo 6.1
Hi
I'm trying to work out how you install an SSL certificate on the HTC HD2.
I have downloaded the file and have it in a .crt format.
Can anyone help me get this onto my HD2?
I have loaded it onto my device but when I try and install it I get the following error "There is no application associated with "xxxxxx". Run the application first, then open this file from within the application".
Do I need the file in a different format?
Please help as this is driving me potty!
Thanks
Same problem here, I wanted to install certificate for emails but same error...
I am having the same problem
I have tried installing the Certificate by using the SpAddCert.EXE but the phone does not like this application.
Stuck now!
problem is the crt format, if you convert it to a .cer then there isn't a problem
Hello all I have sorted my certificates out
Format was the problem.
I am Using IIS for our certificate - STARTSSL Issued certificate:
Export Certificate to a .PFX file. Copy to device (I copied to root) installed the certificate > reboot.
I was then able to sync - but came up with an 0x80072fod error and would not connect
Googled and found this is because root certificate not installed.
Downloaded STARTSSL root certificate and installed rebooted and problem sorted.
Man that rootCA never got to my mind.
You have my eternal gratitude
I've read and searched and Googled but I can't find an answer
I recently flashed my first Android NAND ROM: "CMYLXGOroms.Stock.Desire.HD.v1.1.4.1n.NAND.RMNET.NO-SQUASH-RAFPIGNA.1.7OC_CWM.zip".
Everything went smoothly and it all looks good except I cannot complete the Exchange ActiveSync account.
DETAILS:
1. I'm hosting my own Exchange server -2003
2. My SSL cert is self-generated from my own MS Cert Authority
3. I can view my OWA account via the native web browser w/o issue
4. My settings "appear" to be fine as I can reach the very end of the setup wizard. (If I change any of the ActiveSync account settings to an invalid option - say add an extra character to the server address - I receive an error when I click on "Next")
ISSUE:
1. On the last step of the setup wizard, when I click on "Finish setup" I receive the error:
"Failed to created the account. Please try again later."
QUESTIONS/THOUGHTS:
1. How to you import a SSL Cert in Android?
2. I've read about "Accept All SSL Certificates" dialog box you can check but I don't see one during the setup wizard - only the "This server requires an encrypted SSL connection". Is this a legacy setting or something that is hidden by HTC's SenseHD or? Is there anyway to access this option?
3. I've tried both checking and un-checking the "This server requires an encrypted SSL connection" - both give me the same failed result.
OTHER TROUBLESHOOTING:
1. I know this works as I've been successfully using Activesync with WinMo 6.1 & 6.5 on my wife's TouchPro2 and this works fine w/ the stock WinMo 6.5. So it's not a bad config on the back-end.
2. I tried installing Touchdown to see if that would work and I cannot get that to work either.
I'm getting really frustrated - any help would be GREATLY appreciated!
thnx
UPDATE:
I spent all day:
1. Creating a new DNS A record to point directly to my OWA server
2. Upgrading my SSL cert to an offical third-part cert from startssl.com (great service for free BTW)
3. Figuring out how to export/import/modify that cert to be installed on Android
I now have a nice DNS record that points to my OWA server (vs. the old DynDNS pointer) and I appreciate the SSL cert for free find, but I'm still ready to loose it over the lack of ActiveSync support.
Anybody have any idea if this is potentially a ROM issue and I should try another? Or is this a Froyo issue and I should try Gingerbread?
TIA