[ballistix]

Hi guys, OK I'm tearing my hair out here!

I've followed these instructions, I'm not stupid and I know servers, PCs and the OS stuff.

I've been through the process of converting the cert to .der format and changing the mime headers and so on in IIS.

I've managed to get the cert downloaded into the phone and it's now in the CA list! Woot. However, each time I connect to the exchange server I get the first message, this server is using an untrusted certificate! **bleep**. Then if I hit continue it says "Server requires secure connect, please change in settings etc..." Which of course it's set to YES.

So thats it. Can't get it to work. It REALLY shouldnt be this painful Nokia...

Anyway, there is a cert already associated with this domain (which has the exchange directories and so on under it) and the .der cert is an export of this very same server certificate. Why the hell is it still asking me to continue if I've just imported it?

Any gurus out there that can suggest anything?

Lastly, I've tried Roadsync and although it works, it SUCKS. Why? Because I want to be able to delete emails from my device but leave them in my Outlook account back at base...and you can't do it...delete the device version of the email and you delete the Outlook one..FFS.

Hope someone can help!

V frustrating.
TT

[dercoss]

This is what I did to get my cert accepted, as posted on another site...

"My last post seems to have gone walkabout...

The good news is that I have managed to get the email problem sorted.. I followed the advice on these 2 sites.

http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html
http://discussion.forum.nokia.com/forum/showthread.php?t=83828

I downloaded Openssl.exe and followed the instructions here

- export the .cer certificate
- use OpenSSL to convert the certificate to .pem, using the command : openssl x509 -inform der -in MYCERT.cer -out MYCERT.pem
- convert the .pem to .der using command : openssl x509 -outform der -in MYCERT.pem -out MYCERT.der
- copy the .der cetificate to the website root directory (recommended) or copy it to a newly created directory
- set the directory MIME types to application/x-x509-ca-cert for .der extension
- browse the file using the E61 built in web browser, the certificate will install automatically

As I explained above, I couldn't work how to do the last bit but I simply sent the converted file to the phone where it installed successfully.

One other point. My mobile network (Orange in the Uk) advised me that a "service" needed to be turned on by them to get Exchange Server connections going. Whether this was what enabled email connection (and they were very vague as what exactly this "service" was) or the things I had already done was what got things going, I don't know."

It worked for me in the end so stick with it...

dc

[torero]

all, not sure if this will help. i had tried to install the certificate from the phone memory (file manager) and was getting soooo frustrated! no chance to make it recognize the .cer file. i tried then installing it from the external memory - i.e. install the file into the sd card and execute it via the file manager.... and it worked!!!

good luck you all!

[aschinnerl]

I have the same problem!

i have a small business server 2003 and exchange 2003 with sp2.

i have importet the certificate but when i go to the outlook web access side, the certificate warning is still there?

can somebody help me please?

i think the problem is that the cert. is not in the turstet root cert. it is only in the personal cert. there i can see the local name of the server like server.domain.local


Thanks

Message Edited by aschinnerl on 25-May-200707:04 PM

[mbongartz]

While importing the cert you have to mark both checkboxes.

Ohterwise go to Settings -->Security --> Certif. management --> Tab Authority --> select your Cert and cklick options --> trust settings --> set both to yes.

NOTE: Exchange Web Acces via a mobile phone works only with disabled OWA GUI.

[stephenrobert]

Hello everybody!

I have read the whole thread, and searched accross Internet, but did not find solution for this problem:

The goal is to browse a https site without the notification which is about the untrusted site. Clients are Nokia Series 60 3rd devices. The original idea was that;
- obtain the rootca's certificate
- convert it from CER to DER file (reasons mentioned some replies above)
- make it downloadable to clients, and install it to certificates store on the devices

It seemed to work, but after a switchoff-switchon procedure it did not worked only for the first https visit. I mean, when a user switched off and switched on his/her device, and wanted to visit that https site, he/she got that annoying message about the untrusted site. But after closing browser, and revisiting that https site again, the message did not appear.

So, we went on, erased the certificate, and the above-mentioned CER file was transferred to the client device. And the solution perfectly worked after switch-off-on procedures also.

The conclusion is, that maybe the openssl misforms the DER (or PEM) file, which causes this behaviour. Or, the operating system treats differently the to different file format.

Any suggestions are welcome. Thanks.

[aschinnerl]

I had the same problem.

The solution is this link:

http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html

It works perfekt for me!

Test it!