Database Users

Exchange server with invalid certificate

My company runs an exchange server that i can connect to via SLL on the web. However, I always got an invalid certificate message. On 2003 devices on ran certchk and i could synschronize my mail, calender and contacts.
Now - with my JJ - i can not get to my mail anymore because of this invalid certificate. I does not help to download the certificate to my device, since it is invalid.
Is there any reg hack, apps or whatever i can use to overcome this?
Thx

Ronaldovic,
Try exporting the root certificate from the Certificate Authority in "DER" format, copy it to the JJ and run it. This should work as the JJ is not certificate locked.
Ferg.

I did - and when i look in settings-certificates - it shows in the list of certificate but with an enddate of somewhere in 2003 (so it is not valid).
Again, with certchk in 2003 devices it all worked flawlessly.
Are the certificates still be the problem now? Or is it something else?
When i sync, i get an error: 0x80072F17

Ah sorry, I read your mail but didn't really read it and assumed I knew what you were saying.
If you can get a reg editor for the JJ (I use something called "Mobile Registry Editor" which is a PC-based app and works through ActiveSync), change DWORD Value under HKCU\Software\Microsoft\Activesync\Partners\[Secure] to 0 I gather this will do it.
On the point of the certi though, can you not get the CA to issue a new certificate to the Exch box? When connecting through SSL, ActiveSync doesn;t give you a "Yeah connect, I don't care!" dialog box as OWA does.
Ferg.

got a good reg editor, but can not find the last [secure] part...what do u mean by that? For example below ..\partners i see two entries(default) and (ServerNameChanged). and two directories with strange numbers.
About the certificate thing...if i understand u correctly i will never connect if i do not have a valid certificate?
I appreciate the help!!

YEAH!!! Great, got it working, thx to u!
I just love this forum.

Glad to hear it!

I am back....
The sync goes ok now, but every time i send a new mail, it gets send twice. In my outbox on the JJ there is one email, when i receive i see two coming in (exactly the same)
Any1?

i can get it to look like its working by turning off ssl. e.g. it says sycing 20/20 emails. However when i go to messages there are none there! Similarily contacts, tasks and calendar items appear to be syncing in active sync, but they just dont show up!

Hi,
I have run into the same problem.
Used the tips on changing the registry (for which I really thank you!!!).
However, it seemed working until I realize that my Treo 700w keeps asking for the password. No matter how many times I enter my password correctly, it just keeps asking the password over and over again. It does not save my password even if I select "save password" option.
Have you run into this problem and found any workaround?
Thanks in advance. Bo.

Boryu,
Remove and re-add the server source.
I've had this a few times and it's well annoying! This seems to do the trick though.
Ferg.

same issue
i have the same issue,
i used registry editor but its not allowing me to add the reg key!!
am i doing something wrong,, and were do i add the Secure Dword?

Why don't you just renew the certificate? Just right click the website folder within IIS 6.0 and select Properties. There is a security tab (Directory Security?) within which you can renew an existing certificate.
I had the same problem getting push email to work, and renewing the certificate fixed the problem.

Why don't you just renew the certificate? Just right click the website folder within IIS 6.0 and select Properties. There is a security tab (Directory Security?) within which you can renew an existing certificate.
I had the same problem getting push email to work, and renewing the certificate fixed the problem.

ronaldovic said:
got a good reg editor, but can not find the last [secure] part...what do u mean by that? For example below ..\partners i see two entries(default) and (ServerNameChanged). and two directories with strange numbers.
About the certificate thing...if i understand u correctly i will never connect if i do not have a valid certificate?
I appreciate the help!!
Click to expand...
Click to collapse
Hi i see exactly the same, but wich value do i have to change ??
please help
thanks in advance

No way to disable Server Certificate Validation in 802.1x!

Hi,
I want to connect my qtek 9100 on the 802.1x WLAN of my school (ETHZ). It has not been possible yet, although i spent an hour with a person from the tech support of the school.
The problem comes from the very specific configuration that I cannot set on the Qtek 9100!
I need to uncheck the "validate server certificate" option, which is by default for PEAP authentication, something easy to do on a normal windows machine. But the problem is, there is no way to disable this on the qtek 9100 in any "properties" tab, and it therefore complains that the server certificate is not valid, and then refuses to connect!
HOW could I disable "validate server certificate"?? using the registry??
With the person from the tech support we managed to find somehow the registry keys linked to this option in Windows. But of course these keys dont exist on the qtek 9100 in Windows Mobile 5...
Please, is there some expert with some better idea?
Thanks
Fabrice

I havent found a way to do it so far. No various configurations nor random 3rd party software worked on WM5 properly.
This issue is more interesting when consider that htc universal offers LEAP ( which would do work as well ) and wizard dont!

http://forum.xda-developers.com/viewtopic.php?t=42664
From what I can gather you will need a root certificiate. Still trying to get to the bottom of this though.

it seems that AKU2 allows us to use LEAP which already would do the thing! I'll test in on friday and let you know!

i found some useful info on the net, but have not yet tested them on my MDA Vario:
there seem to be 3 possibilities:
1: you retrieve the root certificate from your techie friend at your university and place it in the designated folder on your ppc.
Click to expand...
Click to collapse
2: you add a DWORD 0 at HKLM\Comm\EAP\Extension\25\ValidateServerCert (http://www.modaco.com/How_to_set_a_wifi_network_to_use_a_certificatel-t237261.html)
Click to expand...
Click to collapse
3: Hkey_Current_User\Software\Microsoft\ActiveSync\Partners
Here you should notice 2 sub-keys, both with a unique UID. One is set up for the ActiveSync Partnership with your PC, the other is set up for the partnership with your Exchange server. Fortunately, it is fairly easy to distinguish between the two. Simply highlight one of them, and look at the different values. You'll see pretty quickly which one is for your Exchange server. While the partner key for your Exchange server is highlighted, create a new value with the following parameters
Type: DWORD
Name: secure
Value: 0 (http://winzenz.blogspot.com/2006/03/hacking-your-windows-mobile-50.html)
Click to expand...
Click to collapse
authors of points 2 and 3 differ from opinion, but I cannot say which is best, perhaps someone else has an opinion?

predo said:
it seems that AKU2 allows us to use LEAP which already would do the thing! I'll test in on friday and let you know!
Click to expand...
Click to collapse
Hi Predo,
Have you been able to get LEAP to work using AKU2??
Lot of inquiries present on the net, but no clear answers.....
Thx,
Mak

This is what I would do.
This can be easily done from a PC, because you can get a temporary trust from the authentication server which gives you the option to install the root on your PC. Export the root cert from your laptop/PC and copy it over to your mobile device. Once the root.cer is on the wizard just open up file explorer and double tap it the cert will auto install.
Problem solved
I wouldn't use LEAP or even PEAP without validating the server cert. Especially in a hostel environment like a university, which is full of hacks. Associating to an AP without validating certs sets you up for man in the middle.
The only advantage LEAP or Fast EAP (if it were supported) is for roaming. The wizard would also have to support CCX v3. You can get this CCX v3 support by purchasing Funk (now Juniper) Odyssey client, which is $50. When using LEAP or Fast EAP it allows the use of CCKM (fast roaming).
Oh yeah, the odyssey client supports PEAP with the option to not validate the server cert.

hi, i dont know why is that but after upgrading software to new aku2.0 rom ( imate afair ) i started to be able to connect to my university wlan with no problems. Only thing is there i have nothing added in leap tab in network properties.
Anyway, it works so i'm not playing with settings anymore ;-)

WPA2-AES certificate on WM6?

Hey everyone,
I'm new here to this fantastic community, so i'm not sure if this is in the right place but here goes....
I've recently bought and HTC Touch, and upgraded it with software that i found here.
Now, On campus we've got a couple of networks available, but we're required to log onto one (wifi) for internet called 'UA-aes'.
It's the standard network on campus.
With my laptop, the guy responsible for the netword set it up easily
It needs the following : WPA2AES , PEAP and my user name and password. No domain required.
He didn't install anything else.
I tried hooking up my touch and was able to select wpa2aes, enter my user info and password but then it required a certificate which apparently WM6 doesn't have.
I tried explaining it to the guy, but he said no certificate was needed, and i checked on my laptop, no certificate was indeed needed to connect to the network.
And this is the part where i'm stuck, i'd really like to connect to the wifi, but it doesn't.
Has anyone an idea how to fix this? Where to find the certificate?
This would REALLY help me a great deal.
Anyway, thx guys!

nobody has a solution?

I'm running into the same problem with my school's network - I haven't yet tested this, but here is the solution I'm hoping will do the trick.
"The only thing you have to do is to add a DWORD Regestry Entry under HKEY_LOCAL_MAICHNE-->Comm-->EAP-->Extension-->25
Name:"ValidateServerCert"
Value: 1 to activate Validation, 0 to turn it off"
Best of luck

Just to update, I had the chance to test out that registry edit on my network. Again, the network does not require a certificate to access it. But the new reg settings solved my problem - I am now able to log in without being told that I lack a certificate I didn't even need.

Step by Step Guide on Making Blackberry Connect work on Touch Pro 2 + Multiple APN's

I have been seeing various posts on people struggling to make BBConnect work on HTC Touch Pro 2 a.k.a Rhodium and thought I would put down a step by step guide from various posts put down through this forum So rejoice all you HTC Touch Pro 2 owners like me BB Connect is finally working and so is Multiple APN's. I have BB Connect Enterprise and GPRS connecting simultaneously and its showing up on the notifications manager.
This step by step solution is thanks to Cornholio, Absahnen & NRGZ8(The Master Chef who cooks wonderful ROms across devices)
So Here Goes
Step I: GET YOURSELF A NEW ROM:
Trying to install Blackberry Connect is very buggy on most of the stock ROMS and will keep on failing. So go and get yourself the latest NRGZ8 ROM for Rhodium I am using Build 21877 27th Nov Standard Manila 2.1. The ROM is anyway faster with almost no bugs and free of Junk that you see on standard ROMS
download the ROM from this link:
http://hotfile.com/list/93322/b5a2687
Step2: CHANGE AKU SETTINGS
This change is needed to make BB Connect work on WinMo 6.5 ROMS.
Using a registry editor go to HKLM/System/Versions
There you will see the aku key usually on any WinMo 6.5 ROM its .5.xx.xx change the aku value to .1.6.0(.1.6.3 didnt work, the connection was getting dropped)
Step 3: FOOLING YOUR BB CONNECT SOFTWARE TO THINK YOUR DEVICE IS A RAPHAEL
The Rhodium is not yet supported by RIM and looks like they have withdrawn support for further devices. Therefore you need the BB connect to believe that your Touch Pro 2 is a Touch Pro i.e. Your Rhodium is a Raphael. To do this you have to make registry changes you can use any registry editor I used Resco Registry Editor which loads when you load Resco Explore on your device To do this follow the steps below very carefully, using the registry editor
Instructions:
------------
- Uninstall any BB Connect software if you loaded.
- Attached find a rar file which contains SetModelID.exe. Unzip it and copy it over to the \windows\ folder of your device.
- Using any registry editor of your choice navigate to HKLM\init Create a new String Value with the name "Launch130" and a value of "SetModelID.exe" (without the quotes)
If Launch130 already exists, choose a number greater than 130, it doesn't really matter, just make sure it is higher than the other entries so it get started after everything else.
This makes sure the exe isnt started after every softreset.
- Do a softreset
- The program changes your model-id from "HTC-Rhodium" to "HTC-Raphael" in memory
- Install Blackberry Connect like you usually do (My tests where successfull with version 4.0.0.106)
- After installation and the auto-reset through BBC open the BBC settings and go to the Info-Tab. Under device-name there should now be HTC-Raphael.
- If you're using BES configure your device using enterprise activation or the BB Connect desktop app
STEP 4: ENABLING MULTIPLE APN'S
This will allow you simultaneously have an active BBConnect and a GPRS connection active at the same time
Go to:
HKLM\Software\OEM\RIL\OperatorContexts
There you will find several numbers. E.g. 26202 for Vodafone in Germany.
The number is a combination of MCC / MNC so 262 02. You might find you operator in this list:
http://surfio.de/info/mcc_mnc/mcc_mnc_liste_6.html
or do a google search for your specific operators MCC/MNC nos
Create the two DWord Value Entries below if they arent there:
GPRSContextNumber = 3
UMTSContextNumber = 3
Just set the Contexts value to 3 and delete the NetworkContexts entry. It will be created from the source above with the value 3.
And voila you will have multiple connections running simultaneously you can get your BB Mails as well as see Youtube videos over GPRS. I managed to do this over a frustrating 48 hour period and I thought will share this for anyone seeking an answer.
Cheers and enjoy

Man! The guide looks great! but it makes my brain hurt!!! Arggg!!!
(Hardly understand some part of the guide.)
: )

Heres my step by step, plus all the software and a cab called black berry that someone else kindly put together for me that does all the registry steps (and makes the multiple APN switch for TMOB US). (BTW this has worked on EVERY ROM I have used, 6.1, 6.5, 6.53, sense 2.1 and 2.5):
['black berry cab' does all these]:
Copy SetModelID.exe into windows
HKLM\init: Create a new string: Launch130 with value: SetModelID.exe
HKLM\system\versions\aku - change to .1.6.3 [which works for me]
HKLM\Software\OEM\RIL\OperatorContexts\...
Create new ones or edit your relevant operators GPRS and UMTS to 3
[for US find them in http://en.wikipedia.org/wiki/List_of_mobile_network_codes_in_the_United_States]
HKLM\Comm\Cellular\RIL\
set the Contexts value to 3
Delete the NetworkContexts entry
Soft Reset
Install BB Settings CAB
(I always create a shortcut in programs from 'BB Settings' in Program Files/Blackberry - its a quick way to run this file later)
Either: Using BB connect desktop for WM 'configure wireless handset' (see below)
Or: get new key generated by your company's tech support and enter them into BB Settings on your device
(Activesync blackberry connect desktop setup can be found at http://sems.org/content/download/bbc4/bb_desktop_4.0.0.22.zip. I use this becuase YOU CAN GENERATE YOUR OWN KEY and configure your handset again and again which means you dont have to bug tech support every time you burn a new ROM, which I do every few days!)

for some reason I cant upload the blackberry connect cab, so here is the link http://sems.org/content/download/bbc4/bbconnect_wm6_professional_bb.4.0.0.106.cab
black berry cab is attached.

what150 said:
Man! The guide looks great! but it makes my brain hurt!!! Arggg!!!
(Hardly understand some part of the guide.)
: )
Click to expand...
Click to collapse
Well what can I say Mr What 150 was trying to help. The step by step guid is written keeping noobs in mind so that you dont get back Q's on How to do this? and How to do that? and help ppl besides just those in the US who cant use the cab posted here anyways and dont know how to write complicated XML codes.

Thanks a lot patcat!!!
I had my rhodium working with BB connect but no multiple APNs... had to manually suspend BB service and enable GPRS everytime I needed anything from the internet. Those days are gone now!!!
Now, have you ever wondered why is it that BB Messenger, being a Java application, can not be ported to WM and run on our TP2s? I mean, we have our BB data plans, a PIN# and are connected to the Blackberry service.. what else do we need for BB Messenger to work?

Roberto Gonzalez said:
Thanks a lot patcat!!!
I had my rhodium working with BB connect but no multiple APNs... had to manually suspend BB service and enable GPRS everytime I needed anything from the internet. Those days are gone now!!!
Now, have you ever wondered why is it that BB Messenger, being a Java application, can not be ported to WM and run on our TP2s? I mean, we have our BB data plans, a PIN# and are connected to the Blackberry service.. what else do we need for BB Messenger to work?
Click to expand...
Click to collapse
You are welcome Roberto. I havent yet come across any cab for BB messenger. There has been talk of a BB application suite to run on WinMo but I havent seen any beta's also of that floating around. If you do come across any BB Messenger cab do post it here or PM me the cab.

Most reliable method
Here is what I do...I think it is the most reliable method....and I have used it with just about every ROM out there and it works...everytime...It looks like a lot of steps but it is very easy and after the first ROM flash you will know what do do for any others...I actually learned this from this site and MUCH smarter people than me...so thanks to all those who helped get Blackberry Connect working. Without this site I might still have an 8525 because I need blackberry connect...!
Installing Blackberry connect...this has to happen in this order...
1. Download a ROM
2. Edit the ROM using the information from here, it looks complicated but takes less than a minute essentially you use the program you download to change any reference to Rhodium to Raphael using a search: http://www.silentservices.de/HexEdit-ROM-for-BBC.html
3. Flash the edited ROM.
4. Install the CAB file I attached it will change the AKU for you...I actually put it in my UC script so it automatically installs before Blackberry Connect...
5. Install Blackberry Connect version 4.0.0.106
Allowing Multiple APN's (This can happen at ANY time)
Follow step four in the original guide or if you are AT&T all you have to do is use a registry editor and go to HKLM\Software\OEM\RIL\Operator Contexts\310410 and change UMTSContextNumber to 2. If you use 2 then you don't have to worry about anything else like deleting the Network Contexts entry....

BBC
Works excellently on my TP2 with .106 cab on Vodafone India network at Delhi.
Good work bro, well sorted out steps

PIN Pending
Hu there, Thanks for all your help, The device has changed into Raphael but I still get PIN pending? how can I have Blackberry Service if there is no pin? help please

Patcat007
You are the got damn man!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!

PIN Penidng No Connection
Hello,
I have done as per above steps but I am still getting Pin Pending. I am using HTC touch Pro 2 with Win Mo 6.5. In BlackBerry Connect About Device Type is HTC-Raphael.
Please help me what to do how can I resolve thie issue.

Address book, Sending pictures via Email not available
Hi,
I've got everything working thanks to you guys.
When composing a new Email, the address book is not being used (no Auto completion or suggestion).
I would take a picture from the camera but the option to send via Email is greyed out with the account setup via BB.
No HTML Email viewing.
Is it designed to work like that with BB Connect?

PIN Issue
foolyfaltoo said:
Hello,
I have done as per above steps but I am still getting Pin Pending. I am using HTC touch Pro 2 with Win Mo 6.5. In BlackBerry Connect About Device Type is HTC-Raphael.
Please help me what to do how can I resolve thie issue.
Click to expand...
Click to collapse
PIN is provided by GSM service provider. These step enable the BBC software to accept your handset model as compatible for BB services. Its not a hack for working BB without BB activation. Get the BB services activated from GSM operator and u shall have a PIN also.

HTCSOCAL said:
Hi,
I've got everything working thanks to you guys.
I added what I know...it does seem since Blackberry connect is an older program everything ends up like a work around...
When composing a new Email, the address book is not being used (no Auto completion or suggestion).
It won't auto complete. If you click the menu and use the "check Names" feature it will first look in your address book and then if you hit Lookup it will look in the global address book. A little more cumbersome but it works.
I would take a picture from the camera but the option to send via Email is greyed out with the account setup via BB.
I have not been able to send photos from the camera in the last several Roms...so I think it is the newer Album that doesn't allow it. You can still send it by attaching it when creating an email, but yes this is a little cumbersome as well...
I only have one email account setup on my device which i
No HTML Email viewing.
Yes that is correct...
Is it designed to work like that with BB Connect?
Click to expand...
Click to collapse
Hope this helps...

mumboender said:
Hope this helps...
Click to expand...
Click to collapse
I also had seen those issues with my HTC HD on WM 6.1.
Another one is clicking an URL in the Email body gives me an error (The parameter is incorrect).
Thanks for the tips.

HTCSOCAL said:
I also had seen those issues with my HTC HD on WM 6.1.
Another one is clicking an URL in the Email body gives me an error (The parameter is incorrect).
Thanks for the tips.
Click to expand...
Click to collapse
Yeah, I have not been able to click on a URL since my days with an HTC 8525....

Working with Valkyrie 5.2 ROM and BB Enterprise I'm using
Thanks

NO PIN
dineshh said:
PIN is provided by GSM service provider. These step enable the BBC software to accept your handset model as compatible for BB services. Its not a hack for working BB without BB activation. Get the BB services activated from GSM operator and u shall have a PIN also.
Click to expand...
Click to collapse
hi there, i have the same problem of not having a pin on my tp2, my carrier says the pin is on the device here is a copy and paste of my carrier web iste when i tried to activate the service
"To find your PIN perform one of the following actions:
* In the BlackBerry device options or settings, click Status.
* Look for the PIN and IMEI information on the outside of the box that your BlackBerry device or BlackBerry-enabled device came in.
* Turn the BlackBerry device off and remove the battery. Look for the sticker on the BlackBerry device with the PIN information where the battery is usually located."

Nice tutorial, patcat007. On my TP2 with a 6.5 ROM my BB Connect work. Anyway, when I change the AKU to .1.6.3, something happens with graphics in my dialer like in the picture attached. Anyone could help to correct this? Thank's!

[Q] 802.1x, PEAP self signed certificate problem

Hi All,
I have problem to connect my school wifi network.
School wifi use 802.1x for authentication. The School use self signed PEAP
certificate. I could not connect my HD2 android phone to my school wifi.
But When I add a record to my winmobile registry I could use the schoo wifi on WinMo.
Here is the necessary correction for WinMo.
-------------
add a DWORD Registry Entry under
HKEY_LOCAL_MACHINE-->Comm-->EAP-->Extension-->25
Name:"ValidateServerCert"
Value: 1 to activate Validation, 0 to turn it off
-------------
Is they any way to similar solution for android?
Thanks for your helps,
Best Regards,
DM

An interesting one, since PEAP is kind of part of the WPA-Enterprise networking area which Android doesn't officially support, however there appears to be workarounds if you do a bit of digging in the google docs.
If you have root on your device, edit /data/misc/wifi/wpa_supplicant.conf and add
whatever network you want; it will even show up in the list in the UI. This example
works for me:
network={
ssid="MyEmployer"
key_mgmt=WPA-EAP
identity="myusername"
password="mypassword"
}
If your network is more complicated (tunnels, certificates, etc), see the
wpa_supplicant project's default configuration file, which has many examples towards
the bottom.
http://hostap.epitest.fi/gitweb/git...ob_plain;f=wpa_supplicant/wpa_supplicant.conf
Click to expand...
Click to collapse
is once such reference (from here: http://code.google.com/p/android/issues/detail?id=1386).
It definitely seems like something to do with wpa_supplicant.conf but my phone is currently in another house so I can't have a look at mine for more info, sorry!

Reno_79 said:
.....
It definitely seems like something to do with wpa_supplicant.conf but my phone is currently in another house so I can't have a look at mine for more info, sorry!
Click to expand...
Click to collapse
Thanks for your kindly reply. I will try that.
Best Regards,
DM