Activesync certificate error

[Hfnet]

Hello all,

We are migrating to SBS 2008 from SBS 2003. I have found that using the self-signed certificates we can do almost everything, owa, rww, activesync etc. But we cannot use rdp to the server.

To make life easier we have bought a rapidssl certificate which now enables us to use rdp, and we do not get security warnings when using owa or rww.

BUT, it has not seemingly broken our pda's. They no longer sync, coming up with a 0x80072f0d error:

The security certificate on the server is not valid. Contact your Exchange Server administrator or ISP to install a valid certificate on the server.

I have checked all the obvious things, date and time, time zones, installed certificate on pda etc, but am now out of ideas.

If anyone can help I would be most grateful.

 

[Hfnet]

For anyone else experiencing this issue, I have just found a solution.

We had to download the rapidssl root certificate from

http://www.rapidssl.com/resources/install/index.html

and import that to the pda to sort the problem out.

It also appears that the sbs certificate from rapidssl needs to be installed as well.

 

[ShackDaddy]

Depending on the PDA and the age of its firmware, some root certs may not have been included in the OS. I know that, for example, there are root certs included with WM6 that weren't included in earlier builds of WM5...

It sucks though to go through the hassle of buying a third-party cert and then not having it work for the main purpose they are useful for: automatic ActiveSync deployment...

Happily, I've never had any trouble with either the GoDaddy or Digicert certs that I've been purchasing.

Dave Shackelford
ThirdTier.net