Home All Groups Group Topic Archive Search About

SSL certificates & Mobile phone access via Exchange Activesync

Author
7 Jul 2005 10:17 PM
ablack@carneys.com
I have a couple of articles on setting up Certificate services and local SSL
certificates onto a W2K3 server, but when I have done this in the past, I had
to manually download the SSL certificate onto the mobile phone before I could
start connecting via HTTPS and using Exchange Activeysnc.

I was told that if I acquired an external certificate this would fix this
issue, since the certificate would be from a trusted source.  Does anyone
know if this is true.  Also, once a certificate server is setup, I am told
that the only way to change the certificate and or the certifcate server is
to rebuild the server. Is this also true.

Author
10 Jul 2005 6:49 AM
Jeffrey Randow (MVP)
If you put a certificate on your Exchange/IIS server that has been
issued by a Certificate Authority that is also recognized by the
Smartphone/Pocket PC, then yes, there will be no problems...

You can change the certificate used on the website without having to
rebuild CertSrv...  However, you must use a third party CA if you want
a valid certificate...
---
Jeffrey Randow (Windows Networking MVP)
jeffreyr-supp***@remotenetworktechnology.com
http://www.networkblog.net (My Networking Blog)
http://www.remotenetworktechnology.com (Support Site)

On Thu, 7 Jul 2005 15:17:02 -0700, abl***@carneys.com
<ablackcarneys***@discussions.microsoft.com> wrote:

Show quoteHide quote
>I have a couple of articles on setting up Certificate services and local SSL
>certificates onto a W2K3 server, but when I have done this in the past, I had
>to manually download the SSL certificate onto the mobile phone before I could
>start connecting via HTTPS and using Exchange Activeysnc.
>
>I was told that if I acquired an external certificate this would fix this
>issue, since the certificate would be from a trusted source.  Does anyone
>know if this is true.  Also, once a certificate server is setup, I am told
>that the only way to change the certificate and or the certifcate server is
>to rebuild the server. Is this also true.

Bookmark and Share