Database Develop

*** WiFi on the Corporate Network ***

Does any one know if there is a way to use your WM6 device on a secured WPA, TKIP, PEAP network when you have your own user name and password to access regular pc.
I'm trying to use my TILT at work and everytime i try to log in it tells me that i need "personal certificate" to positively identify me.
Would it possible to retreive my personal certificate from my work loptop and transfering it somehow to my Tilt?
I really need some help with that, i've been trying this forever.
THanks in advnace

There is a solution here: http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=2434968&SiteID=1

seattleweb said:
There is a solution here: http://forums.microsoft.com/MSDN/ShowPost.aspx?PostID=2434968&SiteID=1
Click to expand...
Click to collapse
Did you try this? It sounds like a similar issue but I've never seen some of the screens they are mentioning for login credentials. I tried the registry key but still get the message that I need a personal certificate.
I'm going to try Odyssey's Access client, which is now Juniper I guess.

Juniper Odyssey Access Client works just fine with the Tilt/WM6.
I was able to connect to my company's PEAP/MS-CHAP-V2 network.

If you do a google search with keywords "p12imprt.exe pocketpc" you will find a smal program that allows you to import personal certificates in your Windows mobile.
I hope this helps.

thanks guys, i'll try all the suggestions and'll let you know

I've set up a RADIUS auth server w/WPA-TKIP @ home.... not too hard to config PEAP. I'll try it out this evening and report back the details.

careful if you try the odyssey client, maybe wait to see seattle's results. Odyssey really grabs a hold of the registry. Do an image backup before installing.

FYI...I checked that thread, and checked my registry, and I have that setting they suggest. I am getting the personal certificate error anyway.
The import certificate sounds interesting. Actually I had been told a while ago I needed to do that, and I thought I saw a way natively on my Tilt to do that, but I have no idea how to get the certificate to import. I asked our admins at my office about that, and they had no clue.
Any thoughts on how/where to get teh certificate to import? (Someone said it woudl be on my laptop that I login with, but don't know whre it is there either).

Why not just export your personal certificate from the PC and run it on the handheld, the first time you try to enroll it will ask for credentials.
Works for me anyway.

nybom said:
Why not just export your personal certificate from the PC and run it on the handheld, the first time you try to enroll it will ask for credentials.
Works for me anyway.
Click to expand...
Click to collapse
Nybom...if you can give me any hints on how to do that it would be great. That was my point in my last statements re: the laptop - I don't know how to export it nor does my admins here.

I use Windows Vista at work. WMDC has a feature that allows you to import various certificates from your corporate network. If you are using ActiveSync on XP, I would suggest looking at options there. I don’t have ActiveSync right now or I would look. I have successfully connected my Tilt to our corporate wireless, which is WPA, AES, PEAP. Hope this helps.

Exporting Personal Certificates
Export a Certificate
To export a certificate, follow these steps:
1. From the computer where the certificate was installed, start Microsoft Management Console (MMC). Start>Run>MMC
2. Add the Certificates snap-in to the console.(Ctrl M) When you are prompted, click My user account as the account to be managed.
3. In the MMC console, double-click Certificates – Current User, double-click Personal, and then click Certificates.
4. In the right pane, right-click the certificate that you want to export, point to All Tasks, and then click Export.
5. When the Certificate Export Wizard starts, click Next.
6. On the Export Private Key page, click Yes, export the private key.
The private key is required for the encrypted messages to be read from the computer where the key will be imported.
7. On the Export File Format page, leave the default settings, and then click Next.
8. On the Password page, type password for the private key.
9. On the File to Export page, type the path and the name for the exported certificate file, and then click Next. (save it to your storage card for future use)
The file name has a .pfx extension. This file is the .pfx file that is imported to other computers.
10. Click Finish.
The export certificate file is saved with the name that you specified and a .pfx extension.
To import, use File Explorer, find where you saved it to, and click on it. It will automatically place it in the correct certificate store.

Thank you so much. I was so excited.
But alas, I apparently do not have any certificates on my laptop. ( I say that because when I DClick on Personal, it says "There are no items to show in this view" ). My method of authentication to the wireless here is via AD, and past discussions everyone thought it would have pushed a cert to my PC, but that seems to not be the case.
Although there are a lot of other certificates, a couple of which are issued by my company, in the Trusted Root Certificate Authorities/Certificates folder. Should I try one of them?

ewingr said:
Thank you so much. I was so excited.
But alas, I apparently do not have any certificates on my laptop. ( I say that because when I DClick on Personal, it says "There are no items to show in this view" ). My method of authentication to the wireless here is via AD, and past discussions everyone thought it would have pushed a cert to my PC, but that seems to not be the case.
Although there are a lot of other certificates, a couple of which are issued by my company, in the Trusted Root Certificate Authorities/Certificates folder. Should I try one of them?
Click to expand...
Click to collapse
Yes, absolutely. However, when you ADD the cert in the MMC, it will have to be as a computer>local computer account rather than a personal account. Choose the Base64 option to save as a .CER. Import to your device the same way. You may also want to explore the Intermediate Certificate Authority folder on the MMC for more that relate to your company. Doesn't hurt to grab all that you think relate to your company. Mine ended up having 2 Roots and 4 Intermediates.

Thanks!
Next issue: I have no export private keys page come up, and wehn I get to the final page, keys is set to NO.
In case it makes any difference, my laptop is Windows XP Pro.
I wonder if it could be because somethign is 'locked down' by admins here.

ewingr said:
Nybom...if you can give me any hints on how to do that it would be great. That was my point in my last statements re: the laptop - I don't know how to export it nor does my admins here.
Click to expand...
Click to collapse
I also have the certificate pushed out from the AD. But if you do not have any personal certificates listed in the personal tab I don't know what to do.
In my case I went to "Internet options", tab "Content", chose "Certificates", in tab "Personal" marked the certificate with my AD account name and chose "Export". Then "Next", "Next", "Next"... all without changing anything and then saving the file.

Delta_flyer said:
Yes, absolutely. However, when you ADD the cert in the MMC, it will have to be as a computer>local computer account rather than a personal account. Choose the Base64 option to save as a .CER. Import to your device the same way. You may also want to explore the Intermediate Certificate Authority folder on the MMC for more that relate to your company. Doesn't hurt to grab all that you think relate to your company. Mine ended up having 2 Roots and 4 Intermediates.
Click to expand...
Click to collapse
but how do you import it in windows mobile, aboviously it's not the same way as xp, i got my company's .cer file now how do i install in on my tilt. Also i couldn't find any personal certificates even thouh i use my desk pc and my work loptop.
thanks

ok i installing a certificate on a WM devisce is easy just click on the cert once you transfer it to the phone.
BUt can someone telll me why i don't have my own personal certificate on my work pc and loptop. I log in to both using the same network username and pass with the company's domain selected from the drop down menu.
thanks

I can't answer your question since I've seen the same thing on both of my PCs. One had a personal cert, the other did not. I don't think a personal cert. is necessary. If you have the proper root(s) and intermediates, you should get a log on screen when it tries to connect. Once you login the first time, your set.

Need help with cert issues and direct push

I've been messing with direct push but haven't gotten it working yet, and I'm basically curious if it's even possible with my company's setup. Our IT group will not assist in any way or alter any certificates.
My company uses a wildcard cert on our OWA. The signer is in the root store on my Tilt. The CN on the cert is *.mycompany.com which obviously does NOT match the OWA address which is webmail.mycompany.com. I've read in another thread that this is required but I wasn't sure if this is true. I can't even get to our OWA in PIE. It just throws "The page cannot be displayed because the Web site cannot be authenticated". It works fine in Opera mobile. When I set up direct push, ActiveSync fails with the support code 0x80072F7D. If I intentionally botch my username or password I still get the same error, so I'm assuming it is happening due to cert issues before the connection can even be made.
Is direct push even possible with my company's cert setup or am I just poked?

If you can get the the .cer file copy it to your kaiser and open it. You should get a message saying its been successfully installed. That should be enough to get it working as long as the server is set up correctly.

if you can't login to OWA or OMA through PIE then it won't work through direct push. They have to be accessible via the browser without any prompts about certs or whatnot. The issue here seems to be a funky cert. setup.

Thanks for the responses. The cert is/was already installed on the device. Looks like the CN matching the OWA address might really be true and I'm poked. I've gone to SEVEN as a workaround. Well written (unlike the emoze OWA app which brought my phone to a screeching halt), but sometimes emails have a delay of up to 30 minutes . All well. And damn the kaiser forums are busy, I was already page 7 news

Are you trying to access OWA using https? Also, *.mycompany.com does match webmail.mycompany.com. That is the point of the wildcard. ipodzsuck.mycompany.com would also match.
It could be a private certificate. Hell, exchaneg maynot be setup to allow activsync.
Try using a browser and going to https://webmail.mycompany.com/certsrv
There is probably a certificate server that was used to generate the private cert.
It is not neccacarilly the same as the webmail server but is worth a shot. Also if you know any other server names you can try those with a "/certsrv" at the end.
Good Luck, Lew

To the best of my knowledge and extensive frustration, you can't use a self-signed cert. If you aren't using a self-cert, you should be ok, HOWEVER, getting it set up right is extremely tricky. Once we got it up, I tried to help a customer a little, never got it working properly - we got the cert working but the folders wouldn't sync.

My experience is it is very easy as long as you install the private cert on everything that is goign to connect.
Later, Lew

lewcamino said:
Are you trying to access OWA using https? Also, *.mycompany.com does match webmail.mycompany.com. That is the point of the wildcard. ipodzsuck.mycompany.com would also match.
It could be a private certificate. Hell, exchaneg maynot be setup to allow activsync.
Try using a browser and going to https://webmail.mycompany.com/certsrv
There is probably a certificate server that was used to generate the private cert.
It is not neccacarilly the same as the webmail server but is worth a shot. Also if you know any other server names you can try those with a "/certsrv" at the end.
Good Luck, Lew
Click to expand...
Click to collapse
Thanks Lew. I can indeed hit the OWA at /certsrv on any desktop, but not PIE. And yes, it's using https. I kind of doubt the exchange server is even set up to allow it. Is there any way I can tell for sure short of logging into the server? Also, I'm not sure if this has anything to do with my problems, but if you hit our OWA inside of our corp. network the cert is a different one and is self signed.

self signed certificates
I have been trying to resolve this same issue with my tilt. I have set up a self signed certificate for my exchange server. This certificate works on any pc inside or outside the local network; however, the certificate will not install as a root certificate on my tilt. After installing the certificate it appears as an intermediate certificate, but not a root certificate.
I think that att has blocked the software so that self signed certificates will not install in the root directory. Not sure of the motivation for this other than to force users to use their express mail service which costs $5 per month.
Are there any work arounds for this? Can applications be unlocked?

SOLVED: Exchange sync error 0x80072F0D

Hello,
My company uses Exchange server 2003 sp2. I've tried to sync my TyTN II several times but I always get this message: "The security certificate on the server is invalid. Contact your system administrator or ISP to install a valid certificate on the server and try again".
I'm actually able to access https://myserver.com/OMA (not http) using my nickname and password, but I don't even know what that means. I talked to the IT guys and they just sent me to a Microsoft page where it says: "This problem may occur because the device manufacturer locked the Windows Mobile 5.0-based device. This lock prevents you from installing Secure Sockets Layer (SSL) certificates correctly".
So, their only answer was: contact your manufacturer to see if the device is locked (??). (Although they also said I didn't need a SSL certificate)
¿Could anybody please help me to understand this? ¿Do I have to install a certificate? ¿Do the IT guys have to do it? I really need to solve this so any information is welcome
thanks a lot.

If it is a "self-signed" certificate (and not an official one bought f.e. via verisign.com), than you have to install it on your device to make it "valid". Additionally the Hostname provided in the certificate must exactly match the hostname of your exchange-server otherwise it won't work either. HTH

PS.: you can find out both when you access your companys exchange server via OWA (OutlookWebAccess). Once you're logged on you can examin the certificate and look if the hostname matches, if the certificate is still valid (every certificate has an expiration date) and who the "certification authority" is.

You can still use OWA if the company allows you to use it unencrypted. Just uncheck use SSL during setup.
I'd be curious if anyone would know how to rip the public key from Firefox or something so it can be imported to the phone to make it work.
I have been told if you can get your exchange admin to send you the .CERT file from the IIS webserver you can run that on your phone and get it to work. However, I believe that has the public and private key pairs, which is a security risk to your entire organization if you have the private pair!

jon_k said:
You can still use OWA if the company allows you to use it unencrypted. Just uncheck use SSL during setup.
Click to expand...
Click to collapse
domain credentials over unsecured channel, bad mojo man
Your IS guys should have a certificate for you to install which will resolve the problemI have a root ca certificate for my company installed on my phone so I have no problem using any certificate they sign.
As already said, check the hostname matches extacly and check the expiry date of the certificate.

Hey Guys, thanks for all your answers!
I'm logged on the OWA server and the certificate says "Equifax Secure global eBusiness CA-1". The expiration date is 24/02/2010. Does anybody know how can I install this on my device? I checked the hostname and it matches perfectly

If it is like the certificate I have to use to get my Tilt/Office Exchange to work, then you just double click on it and it should say "Installed" or something like that. After that, assuming you have everything else setup, it should work like a charm.

thanks a lot to all you guys! Had some problems because the certificate would install in the "intermediate" store, instead of the root store, but I found this site and followed the instructions:
http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/
It's synchronizing right now and it's way faster than activesync!

Well I was able to save, and copy the certificate by going to my companies OWA site.
I copied it via memory card, and was able to install it. Upon installing it I'm not asked for an option of where to install it (root vs. intermediate, etc)
Unfortunately by default it is going to intermediate.
I hope that this will fix it once I figure out how to install it into root.
For now it has not fixed my problem, still get an error synchronizing with the server.
Edit:
Strange, I re-installed the certificate, to make sure it was from the "head" title branch (my company has an extra level to the branch so I tried both), and this time instead of soft-reset, I completely shut-down the phone.
Powering it back up, it now sync's fine, and there is a 2nd verisign cert with a different expiration installed in the root store. My poor outlook is still syncing data as it catches up for the last couple weeks!
Doh.

WeldingRod said:
Well I was able to save, and copy the certificate by going to my companies OWA site.
I copied it via memory card, and was able to install it. Upon installing it I'm not asked for an option of where to install it (root vs. intermediate, etc)
Unfortunately by default it is going to intermediate.
I hope that this will fix it once I figure out how to install it into root.
For now it has not fixed my problem, still get an error synchronizing with the server.
Edit:
Strange, I re-installed the certificate, to make sure it was from the "head" title branch (my company has an extra level to the branch so I tried both), and this time instead of soft-reset, I completely shut-down the phone.
Powering it back up, it now sync's fine, and there is a 2nd verisign cert with a different expiration installed in the root store. My poor outlook is still syncing data as it catches up for the last couple weeks!
Doh.
Click to expand...
Click to collapse
I also had this problem, and the sync. still does not work... if someone has some idea
Thank you

hello everyone,
I got this to work by installing the .cer certificate from the self signed website certificate AND installing a .cer from the server's self signed ROOT CERTIFICATE. The root certificate is usually located on the C: drive of the server with certificate services installed. Your IT guy should know where this is. You just copy the root cert to a file just as you would the website cert. Install both on the phone...the website cert will go to "intermediate" and the rott cert will go into the "root" store. Once I did this, no more error codes and my activesync shows "connected" instead of the last time it was synced.

Hi
Had the same problem and it's solved thanks to this solution mentioned by oscarsalgar
It's working perfect !!!
Thank you very much

K'uvo man, gracias puesh hermano, me salvaste la vida puesh. Triple hijueputa q me ayudo este post man. Gracias pelado!!

Exchange account constantly asking for password

I've searched high and low for an answer to this issue.
I have an AT&T Tilt currently running NATF 5 Loaded ROM. My phone keeps asking me for the password to my mail server. I can enter it, click the save password box, and it still will ask for my password after some time. It may happen in 5 minutes or 5 hours. No real rhyme or reason as to why.
Anyone else seen this or know of a fix?
TIA!

does it actually connect to the exchange server when you enter the password?

Yes, sir. It certainly does.
Also, this happens no matter what ROM I use. My guess is that there's something server side going on. I'd like to know what so I can get it fixed.

If you're connecting to a server with an SSL certificate chain that doesn't directly lead to a trusted root one built into the phone you'll get that. At least it happened to me where I run my own exchange server with a self-signed certificate.
Check out this page:
http://blogs.msdn.com/windowsmobile/archive/2008/05/18/sslchainsaver-v2-released.aspx
And install all of the certificates in the chain onto your device. When you run the program it will make some XML files that I couldn't get to work right, but just copy the actual certificate files (from the folder it makes with your mailserver's name) onto your device and run them to install. Reboot your device and see if the problem goes away. If it doesn't, it's probably a server-side issue.

Nopple,
Thanks for the insight, man! I'm testing it now. We have a self-signed certificate. When I ran SSL Chain Saver it told me it could not get the root but grabbed what it could. I originally exported a certificate from the OWA server but I guess you need more than that when you are self-signed.
Anyway, I'm testing now and will post back once I'm done.
Thanks!

try this
use pocket ie and go to:
http://yourexchangeserver.com/oma (replace yourexchangeserver.com with the correct address of your exchange server)
Log in to your email and see if you are asked for your password.
This should tell you if your exchange server is setup for outlook mobile access. If it isn't, then you won't be able to log in. I used this quite a bit when getting our corp exchange server setup for my mobile users.

Nopple,
That did the trick!! I'll document appropriately for our internal network.
Thanks a TON for your help!

Xperia and Microsoft Exchange Server

hi friends,
I want to configure my Xperia with my official Microsoft Exchange server. THe problem i am facing that when i connect my Xperia to the PC and it is synchronized with my outlook it can download all the mails/contact etc...
But i wanted that if i am on move, i can still get the mails directly on the Xperia.
I tried to configure exchange server from Active Synchronization Menu --->configure server , and it give me msg its the same as your look web access server and everything okay, but when from Messaging Menu if i try to send the email or do Send/ Recieve for my outlook, i am not able to recieve/send emails.
Is there anyone else having the same problem, Help will be appreciated.
Thanks
Jade

??? what ???

idont understand your whattt?
either my question is confusing for you ?
Regards
Jade

I don't understand the question either.
When you start the ActiveSync application (on your device) and click Sync, it will either synchronize with Exchange or display an error message if it doesn't work. Assuming it doesn't sync successfully, what's the error message that is displayed?

Well when i configure it from STart--->Active Synchronization and put all the server details over there it configure my settings, and give me msg that the Exchange server is same as that of your outlook.
But when i press the send/recieve button for the outlook email , it keep on showing connecting and later say error Synchronizing.

Um...
You want to ActiveSync your phone with the PC over the Internet?

JYousuf said:
Well when i configure it from STart--->Active Synchronization and put all the server details over there it configure my settings, and give me msg that the Exchange server is same as that of your outlook.
Click to expand...
Click to collapse
Ah.. I assume you're entering your email address, username, password and domain, then ActiveSync tries to do the automatic configuration and then displays a text box to enter your server address? If so, the automatic configuration didn't work and you have to enter the server address manually (which is the same as the server address configured on your desktop Outlook (check your Outlook configuration if you're not sure) or the address of Outlook Web Access, maybe something like mail.whatever.com).
JYousuf said:
But when i press the send/recieve button for the outlook email , it keep on showing connecting and later say error Synchronizing.
Click to expand...
Click to collapse
Please try to sync using the ActiveSync application. It will display an error message, which will probably help to find the problem.
orelsi said:
Um...
You want to ActiveSync your phone with the PC over the Internet?
Click to expand...
Click to collapse
Microsoft Exchange is pretty cool

Have you checked both Mail for Outlook and WM Active Sync in your configuration? For your needs you may only activate Mail for the Server, not the PC connection. Look also for other conflicts like tasks and so on.

I think i am not able to elaborate my problem clearly. Let me do again
I am having a corporate account and that is configured on my Microsoft Outlook and i receive all my corporate mails over there.
Now as i did on my SE P990i, i have set the same corporate account which use Microsoft Exchange Server on my Mobile, and that i wanted to do on Xperia too. So that i can recieve the emails on my computer and on Xperia.
But i cannot configure it even having the right settings for exchange server. and it keep on showing connecting......... but do nothing.
Thanks
Jade

I made few change in the settings and now getting this msg
Microsoft Exchange:
Result:
The security certificate on the server is not valid. Contract your exchange server administrator to install a valid certificate on the sever.
View support code: 0x80072F0D
=====================
But the same Microsoft Exchange server works fine for me on P990i, and its not possible to contact my head office in USA just to ask them install any certificate for me ):
any other solution.
Regards
Jade

JYousuf said:
I made few change in the settings and now getting this msg
Microsoft Exchange:
Result:
The security certificate on the server is not valid. Contract your exchange server administrator to install a valid certificate on the sever.
View support code: 0x80072F0D
Click to expand...
Click to collapse
The most likely cause of this issue is that your company uses a self-signed security certificate instead of a commercial one, which is why your device doesn't trust the certificate. You have to install the certificate to your device to be able to use it:
Open your webmail (Outlook Web Access) site in Internet Explorer, using https (if IE gives you a certificate error too, just accept it)
Click the lock icon (either on the top or at the bottom, depending on your IE version) to view the security certificate
On the "Details" tab, click "Copy to File" and save it (default export settings) to your device or storage card
On your device, install the certificate by launching it through File Explorer.
(You could also disable SSL for the Exchange Server connection, but I don't recommend this at all.)
Also, you will most likely be able to use Push Mail with Exchange, so mails will be delivered to your device right after receiving them, without having to do scheduled or manual Send/Receive .

My friend,
Thanks alot for your reply, i have tried to follow step by step what you said, as also given on this link
http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/
I was able to generate the certificate and installed it on my Xperia, and can also see it in the certification list, but still getting the same error.
Regards
Jade

JYousuf said:
My friend,
Thanks alot for your reply, i have tried to follow step by step what you said, as also given on this link
http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/
I was able to generate the certificate and installed it on my Xperia, and can also see it in the certification list, but still getting the same error.
Regards
Jade
Click to expand...
Click to collapse
Hmm, did you install the root certificate or just the web server certificate (step 4 on the page you linked)? I'm not sure, it's possible you need the root certificate and not just the server certificate.

Well i followed all the step given on the link i pasted above. I installed the root certficated, but which server certificate you are talking about, though i followed all the step of that link.
Thanks

Still looking for some possible solution.......

You might want to ask your corporate admin for the exchange server.
They may changed the settings.

you need to enable push internet and configure your exchange for push internet. contact your mobile provider for that. and about the certificates you need to install it in your phone.