ActiveSync and Certificates - Motorola Q Forum

whowhatwhere · 09-26-2006, 02:39 PM

Hello all,

I'm trying to set up the Q with WinMobile 5.0, synching to Exchange 2003 SP2. The documentation says I must export the certificate from Exchange and then place it onto the Q. Further instructions say in order to do so one must copy the Certificate file into a folder on the Q...but Exchange only allows me to export the cert to a file that is not in the correct format, it's .pfx when I need .cer!

How does one convert .pfx to .cer? Can it be done? If not, how does one get this certificate into the .cer format?

Also, I am reading about how the device won't allow you to copy the cert into a folder as it is "locked". I've seen some discussion about "locked apps", but I'm not sure if we're talking about the same thing. Same? Different?

Suggestions? Thank you one and all in advance!

www

lo-tek · 09-29-2006, 11:17 AM

A .pfx is a cert with the private key and a .cer is a cert without the private key. It is my understanding you cannnot convert one to the other. However, if you want to export a .cer file from your exchange server, go to start, run, mmc, file, add/remove snapin, add, select certificates, computer account, local computer (assuming you're on the server with the cert you want), close, and OK. You'll have an mmc with Certificates (Local Computer.)

Go to personal, double click Certificates, and then double click on the certificate you want to export. Select the details tab, copy to file, and follow the wizard defaults making sure not to export provate key. eventually you'll get a cert exported to location you specified. Copy that cert to your phone into the system root folder, click on it, and select install.

I hope that helps.

MTG BRKR · 09-29-2006, 01:12 PM

hey guy...i use wireless sync with my exchange server just fine. didnt need to export any certs anywhere. is it possible youre tryin to do more than you need to?

LISAKATE · 10-24-2006, 08:07 PM

Thank you for your suggestion. I am having problems getting the certificate to install. I will try it and advise. Thanks again for the info to us newbees!

DMobley1022 · 01-19-2007, 11:32 AM

Quote:

Originally Posted by MTG BRKR

hey guy...i use wireless sync with my exchange server just fine. didnt need to export any certs anywhere. is it possible youre tryin to do more than you need to?

I use wireless sync myself however what this gentleman is talking about and what we are trying to do currently is sync with our Exchange 2003 without having to use the Verizon Wireless Sync. We are having trouble getting the certificates installed on the smartphones.

DMobley1022 · 01-24-2007, 11:34 AM

Quote:

Originally Posted by DMobley1022

I use wireless sync myself however what this gentleman is talking about and what we are trying to do currently is sync with our Exchange 2003 without having to use the Verizon Wireless Sync. We are having trouble getting the certificates installed on the smartphones.

We finally got it. If anyone else is trying to communicate directly with your exchange server and not use the VZW Wireless Sync, let me know can save you some trouble.

abarrand · 02-01-2007, 11:24 AM

Quote:

Originally Posted by DMobley1022

We finally got it. If anyone else is trying to communicate directly with your exchange server and not use the VZW Wireless Sync, let me know can save you some trouble.

Please let me know how you fixed this issue iwht the cert and activesync.

DMobley1022 · 02-03-2007, 07:43 PM

Quote:

Originally Posted by abarrand

Please let me know how you fixed this issue iwht the cert and activesync.

1st I would ask are you getting the cert from the server itself and not a webmail interface?

2nd Are you copying the cert and the "add root certificate utility" .exe file to a folder named Storage on the Q?

3rd does your IT department have your exchange server configured for this?

Instead of getting the cert by going to for example: https://webmail.xxxxxxx.com we got a copy of the cert from the server itself.

Also we also had to use the following software listed below as well. I'm a Verizon Wireless customer, here is that link for Verizon Wireless customers. If you are Sprint customer you can also browse to this site and a bit further down is the link for Sprint Customers:
http://www.microsoft.com/downloads/details.aspx?FamilyId=5D7E27EE-4654-480C-876D-442AED8F47AE&displaylang=en

http://motorola.custhelp.com/cgi-bin...32&p_topview=1

Let me know if this works.

Dustin

abarrand · 02-06-2007, 10:51 AM

Quote:

Originally Posted by DMobley1022

1st I would ask are you getting the cert from the server itself and not a webmail interface?

2nd Are you copying the cert and the "add root certificate utility" .exe file to a folder named Storage on the Q?

3rd does your IT department have your exchange server configured for this?

Instead of getting the cert by going to for example: https://webmail.xxxxxxx.com we got a copy of the cert from the server itself.

Also we also had to use the following software listed below as well. I'm a Verizon Wireless customer, here is that link for Verizon Wireless customers. If you are Sprint customer you can also browse to this site and a bit further down is the link for Sprint Customers:
http://www.microsoft.com/downloads/details.aspx?FamilyId=5D7E27EE-4654-480C-876D-442AED8F47AE&displaylang=en

http://motorola.custhelp.com/cgi-bin...32&p_topview=1

Let me know if this works.

Dustin

Alright I have downloaded the cert to DER specs and copied the files over to my Q. When I choose to import the file it says that it is not a valid root certificate. I created the cert for my exchange server and it is not signed by Verisign or any other 3rd party vendor.