• RSS
  • Twitter
  • FaceBook

Exchange Server Forums

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

ActiveSync with selfsigned certificate?

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [Microsoft Exchange 2007] >> Mobility >> ActiveSync with selfsigned certificate? Page: [1]
Login
Message << Older Topic   Newer Topic >>
ActiveSync with selfsigned certificate? - 6.Jan.2009 3:46:42 PM   
Ase

 

Posts: 83
Joined: 20.Feb.2006
Status: offline
Hi,

Is it possible to get ActiveSync against WindowsMobile 6.1  to work with a self signed SSL certificate, and if so how?

//Ase
Post #: 1
RE: ActiveSync with selfsigned certificate? - 6.Jan.2009 4:57:03 PM   
John Weber

 

Posts: 1236
Joined: 20.Apr.2005
From: Portland, Oregon
Status: offline
No, not really.

You can use an internal CA, but you will need to get the trusted root cert chain onto the mobile device.

Spend the 90 USD and put a public cert on the CAS.

_____________________________

John Weber [Lync MVP] http://tsoorad.blogspot.com

(in reply to Ase)
Post #: 2
RE: ActiveSync with selfsigned certificate? - 7.Jan.2009 1:12:11 PM   
Ase

 

Posts: 83
Joined: 20.Feb.2006
Status: offline
Hi John,

Thanks for your fast reply. This is still a test environment so a public cert is not the way to go.

Can you give me some guidelines on how to get the trusted root cert chain onto the mobile device (Windows 2008 + Exchange 2007 + WM6.1)?

I also test OWA but no matter how I try to install the certs onto a client-PC I always get a notification that the cert is not OK, but I can click continue and it works OK, have I missed something there aswell?

Regards,
Ase

(in reply to John Weber)
Post #: 3
RE: ActiveSync with selfsigned certificate? - 14.Jan.2009 7:38:19 AM   
remjak

 

Posts: 31
Joined: 16.Dec.2008
From: Norway
Status: offline
Halloen,

You will get certificate error if the certificate is NOT from a trusted authority or maybe the wrong name in the certificate.

if you have a internal CA you can request a SAN/UC certificate from the Exchange 2007 with all the names needed. f.eks:

mail.yourdomain.com
EXCHNETBIOSNAME
EXCHFQDN
autodiscover.yourdomain.com

also..if this is a test enviroment..i think that Digicert or Thawte can give a certificate for testing

Remi

(in reply to Ase)
Post #: 4
RE: ActiveSync with selfsigned certificate? - 14.Jan.2009 3:16:55 PM   
Ase

 

Posts: 83
Joined: 20.Feb.2006
Status: offline
Hi Remi,

Thanks for your reply.
How do I add more SAN names to my Exchange certificate?
Please be very simple with specific instructions, I am not an expert.

//Ase

(in reply to remjak)
Post #: 5

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [Microsoft Exchange 2007] >> Mobility >> ActiveSync with selfsigned certificate? Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts


Follow TechGenix on Twitter