WinMobile 5.0 (JasJar) Exchange 2003

Forums › Legacy mobile platforms (Windows Mobile, Palm OS, Web OS, Symbian, Meego, Blackberry) › WinMobile 5.0 (JasJar) Exchange 2003

1 | 2

freitasm

BDFL - Memuneh
79288 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#56733 2-Jan-2007 12:10

You just need to copy the file to your Pocket PC, open File Explorer, find the file and tap on it. A confirmation dialog will appear and you just hit OK.

It must contain the root certificate for the CA issuing the certificate, in the path. Or something like this...

There's nothing on the Jasjar configuration issued by Vodafone or i-mate preventing the certificate load action.

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#56735 2-Jan-2007 12:32

hmmmm, will have to do some more research, the automatically generated .cer file installs find on PC's but not on the JasJar.

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#56749 2-Jan-2007 17:25

freitasm: I think you agree that problems with Exchange Server upgrade, domain configuration, migration, and management cannot and should not be imputed to Windows Mobile.

After all Windows Mobile is only a clien on this thing. I have a Windows Server 2003 Enterprise Edition running with Exchange Server 2003 Enterprise Edition, plus Directory and Newsgator Enterprise Server on the same machine and have had no problems synchronising Windows Mobile devices.

I actually decided not to install RIM BES (BlackBerry Enterprise Server) because that would be more changes than you have done...

For example, I had the Palm Treo 680 here for testing (Palm OS) and found out it will not accept self issued certificates, period. No way to load your own certificates, like on Windows Mobile. Therefore no way to have encrypted synchronisation to my Exchange Server. That alone kills the Palm OS-based devices for many organisations - and possibly for you as well?

Well, I ran the synch for half a day and now it will not sync. hmmm. no events on the server side and in interesting hex value on the JasJar. I removed the SMTP connector that was installed to use the smarthost configuration as the created connector was delivering email with the internal address rather than the default address defined for the user. The emails deliver fine now, but the Jasjar can not sync

freitasm

BDFL - Memuneh
79288 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#56750 2-Jan-2007 17:36

Firewall blocking https? Or perhaps terminating long http connections? Antivirus on the server slowing down Exchange (this is a known problem)?

What error code? There's a good list a www.pocketpcfaqs.com

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#56751 2-Jan-2007 17:46

freitasm: Firewall blocking https? Or perhaps terminating long http connections? Antivirus on the server slowing down Exchange (this is a known problem)?

What error code? There's a good list a www.pocketpcfaqs.com

No firewall on the server (thats on the router) and antivirus not installed yet. It was working fine and then stopped, I think the SMTP connector change is not related. The support code is 0x85010014. I've looked this up but have only found items relating to ActiveSync 4.0. How do I find out what version of ActiveSync is running on the server (SBS 2003 Premium Edition)?

I still access the HTTPS Outlook Web Access page.

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#56830 4-Jan-2007 10:21

I've reinstalled SBS 2003 Premium on a higher spec machine and regenerated the SSL certificate. I can not Sync again without using SSL, but I'm baffled about the certificate. My previous ROM was the international ROM, so I thought maybe the VF NZ ROM would fix it, but no luck, still the certificate will not install ("Cannot access certificate"). The certificate generated by SBS is still accepted by the workstations so my only guess is something is wrong with the JasJar.

I will run the non SSL Synch locally for a couple of days and see if the upgraded hardware helps me avoid the Sync failure I encountered previously.

freitasm

BDFL - Memuneh
79288 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#56831 4-Jan-2007 10:26

Please contact me off the board and I will send you my self-signed certificate... You can try loading it on the Jasjar. If it loads, it's your certificate. Remember you have to load the root certificate for the Certificate Authority.

Sharesies

Trade NZ and US shares and funds with Sharesies (affiliate link).

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#56967 5-Jan-2007 10:17

freitasm: Please contact me off the board and I will send you my self-signed certificate... You can try loading it on the Jasjar. If it loads, it's your certificate. Remember you have to load the root certificate for the Certificate Authority.

thanks Mauricio for all your time. I have confirmed that the certificate created by the "Configure Email and internet connection" is corrupt each time, I wanted to use the strategy in article http://www.microsoft.com/technet/prodtechnol/sbs/2003/deploy/winm5.mspx#top.

I removed this certificate and removed ssl requirement from the certsrv and followed the steps in this article (http://www.microsoft.com/technet/solutionaccelerators/mobile/deploy/msfp_3.mspx) to create and install a certificate, however, I do not know how to find the client side digital certificate? The wizard created one here \\\ClientApps\SBScert (always corrupt) but the manual process does not state how to retrieve the client digital certificate.

Surely others have found that the SBScert that is created by the wizard is always corrupt? I tried it with 2 editions of SBS (CD & DVD) with the same results. Sadly my holidays are at an end and after 2 weeks I can not get this aspect operational which was the only reason I installed SBS in the first place.

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#57093 6-Jan-2007 14:42

freitasm: No tricks involved...

You can add the Exchange Server in two ways: directly on the device (open ActiveSync tap Menu and tap "Configure Server") or while connected to a PC, open ActiveSync on your PC and file the option to add a server source.

If you use HTTPS you must install the server's certificate on the device (simply copy the certificate file, and on your Pocket PC open File Explorer and tap on the file).

Of course if you are synchronising over HTTP or HTTPS then you must have either port (80, 443) open on your firewall and fowarding to the correct server.

If you want to have Direct Push then make sure the Jasjar is running the latest ROM version (with AKU 2) and your Exchange Server must be configured to allow synchronisation initiated via HTTP or HTTPS. The rest will be automatic.

I've reinstalled SBS 2003 Premium on 2 boxes, one from the CD version, the other from DVD. I've applied Exchange 2003 Service Pack 2 and all windows updates. Before I run the "Connect to the internet wizard" (one of the steps will attempt to create a self signed certificate in share \\\SBSClientApps\SBSCert), I want to know if there is a hot-fix required to allow the wizard to create a certificate recognised by Windows Mobile (JasJar)? The steps performed the first time the wizard is run can not be repeated so I hope to get my ducks in a row as will only get 2 shots at this today (take about a day to reinstall).

This is the fifth installation of SBS 2003 and so far the certificates created by the wizard are not valid for the JasJar. If I install the certificate services I can create a certificate that is accepted by the JasJar, but not accepted on the server side once the wizard has run, so I was thinking of trying the manual certificate creation on the second box without running the certificate step in the "Connect to the internet wizard"?

lyonrouge

1993 posts

Uber Geek

Trusted

Lifetime subscriber

#57118 6-Jan-2007 21:05

lyonrouge:
freitasm: No tricks involved...

You can add the Exchange Server in two ways: directly on the device (open ActiveSync tap Menu and tap "Configure Server") or while connected to a PC, open ActiveSync on your PC and file the option to add a server source.

If you use HTTPS you must install the server's certificate on the device (simply copy the certificate file, and on your Pocket PC open File Explorer and tap on the file).

Of course if you are synchronising over HTTP or HTTPS then you must have either port (80, 443) open on your firewall and fowarding to the correct server.

If you want to have Direct Push then make sure the Jasjar is running the latest ROM version (with AKU 2) and your Exchange Server must be configured to allow synchronisation initiated via HTTP or HTTPS. The rest will be automatic.

I've reinstalled SBS 2003 Premium on 2 boxes, one from the CD version, the other from DVD. I've applied Exchange 2003 Service Pack 2 and all windows updates. Before I run the "Connect to the internet wizard" (one of the steps will attempt to create a self signed certificate in share \\\SBSClientApps\SBSCert), I want to know if there is a hot-fix required to allow the wizard to create a certificate recognised by Windows Mobile (JasJar)? The steps performed the first time the wizard is run can not be repeated so I hope to get my ducks in a row as will only get 2 shots at this today (take about a day to reinstall).

This is the fifth installation of SBS 2003 and so far the certificates created by the wizard are not valid for the JasJar. If I install the certificate services I can create a certificate that is accepted by the JasJar, but not accepted on the server side once the wizard has run, so I was thinking of trying the manual certificate creation on the second box without running the certificate step in the "Connect to the internet wizard"?

Got it going at last. Out of all the docs a white papers it was this one that sorted it out.

Thanks again for all your time and now the testing can begin ...

1 | 2