catamf2hd

I'm a new user of ActiveSync, and am having trouble syncing my calendar with an Exchange server, wirelessly. I'm using ActivSync on an Axim X51V which is running Windows Mobile 5.0. When I try to sync, I get the following message from ActivSync:

-----------
Result:
The security certificate on the server is invalid. Contact your Exchange server administrator or ISP to install a valid certificate on the server.
-----------

I also get a "support code" of 0x80072F0D.

I contacted my systems administrator, who says that we don't have an ssl certificate installed on the exchange server, and he asks whether I can turn off the requirement of a certificate in ActivSync.

I've searched on the internet, and it seems that it was easy to turn off the requirement in earlier versions of the operating system, using something called "disablecertchk.exe" but that this doesn't work for Windows Mobile 5.0.

My questions:

1. Can I turn off the requirement of a certificate in WM 5.0 and ActivSync? (If the answer is "Yes," what sort of security risk am I taking by syncing without using a certificate?)

2. If not, what needs to be done to allow me to sync over the internet with the Exchange server?

Thanks in advance for any advice you can offer.

Vince

netsyd

Originally Posted by catamf2hd

My questions: 1. Can I turn off the requirement of a certificate in WM 5.0 and ActivSync? (If the answer is "Yes," what sort of security risk am I taking by syncing without using a certificate?) 2. If not, what needs to be done to allow me to sync over the internet with the Exchange server? Thanks in advance for any advice you can offer. Vince

1. Can't tell you for sure if you can turn off certificates and still have it sync. I'm pretty sure you can, but then everything (including passwords) would travel plaintext over the network. when you setup the server in activesync (on the device) you just need to uncheck the box that says "this server requires SSL". But again, no promises that this would solve it

2. Your administrator needs to install an SSL certificate on the server, then follow the instructions (see below). A free certificate will work if cost is the issue ...

Your administrator can get a free certificate from here , they he needs to follow the instructions I wrote up here in order to get your device configured to sync over the internet.

It really is a simple process once you work out all the bugs. I've been running this for a little while now and it has been flawless.

Now, if your administrator doesn't want to do any of it ... you are sort of up a creek because without this person's help, you won't really get far in your attempts.

__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Apple iPhone
O2 XDA Trion - WM6
T-Mobile SDA - WM6

brobinson

You can turn off certificates and have it sync. That is how I have my X50v with WM5 setup. When you setup the server sync, just uncheck the box "This server requires an encrypted (SSL) connection".

netsyd

Originally Posted by brobinson

You can turn off certificates and have it sync. That is how I have my X50v with WM5 setup. When you setup the server sync, just uncheck the box "This server requires an encrypted (SSL) connection".

Yea, I thought this was the case... I just couldn't recall for sure so I didn't want to give out false information :)

The only real issue with doing this is the information will pass plaintext across the network. This would included authentication information...

Honestly, the certificate is free... it's worth every minute to get it working to not have your domain credentials passing in plaintext...

__________________

To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.


Apple iPhone
O2 XDA Trion - WM6
T-Mobile SDA - WM6