installing windows mobile 6.0 root certificates _ confused amused

5/24/2018 Installing Windows Mobile 6.0 Root Certificates _ Confused Amused - slidepdf....

http:///reader/full/installing-windows-mobile-60-root-certificates-confused-

Installing Windows Mobile 6.0 Root Certificates | Confused Amused

http://www.confusedamused.com/notebook/installing-windows-mobile-60-root-certificates/[2/4/2014 10:33:43 PM]

Installing Windows Mobile 6.0 Root Certi ficatesTuesday, October 9th, 2007

Recently I ran into a situation where we had purchased an Exchange certificate

from a fairly common certificate authority (GeoTrust) and everything worked well

with browsers automatically trusting the certificate and then we picked up a

Windows Mobile 6.0 device from Verizon. For whatever reason, Verizon orMicrosoft has decided this particular CA was not trustworthy and isnt in the default

list, so ActiveSync fails to connect to the Exchange server. Fortunately, we can

force the device to trust the certificate.

Windows Mobile 6.0 brought a change in how to install certificates. Users cannot

install a certificate into the root certificates store on a phone unless the certificate is

self-signed. This ensures that only true root certificates exist in the root store.

The pain here is that when you try installing a certificate such as the one used to

secure Outlook Web Access it gets dumped in the personal store, and ActiveSync

wont connect because it cant verify the certificate authority associated with the

certificate. The solution is to get the certificate authoritys self-signed certificate intothe root store. We can do this with the following steps:

1. Open Internet Explorer and navigate to the site securing OWA. Click the lock

next to the address bar.

![C 00](http://www.confusedamused.com/wp-content/uploads/2007/10/c-001.png)

2. Click the **View Certificates** link.

![C 01](http://www.confusedamused.com/wp-content/pictures/2007/10/c-01.png)

3. Click the **Certification Path** tab at the top.


4. Click the top certificate name first (the root CA) and then click **View

Certificate**.


5. Click the **Details** tab.


6. Click the **Copy to File** button.


7. Click **Next** to start the Certificate Export Wizard.


8. Click **Next** to export the certificate as a DER encoded binary X.509 (.CER)


9. Browse to a location where youd like to save the certificate and give it a name.


10. Click **Finish** to complete the Certificate Export Wizard.


11. You should see a dialog that the export was successful.

Hi. My name is Tom Pa

live in San Francisco C

and work with technolog

products, most of which

with the word Microsoft

Lync Server 2013

Unleashed

Brand spankin' new. Le

Lync 2013 and contrib

my daughter's college

Everybody wins.

Lync Server 2010

Unleashed

An oldie, but a goodie.

one today before it becrare collector's item.
https://mvp.support.microsoft.com/gp/aboutmvphttps://mvp.support.microsoft.com/gp/aboutmvphttp://www.microsoft.com/learning/en/us/certification/master.aspxhttp://www.microsoft.com/learning/en/us/certification/master.aspxhttp://www.amazon.com/gp/product/0672330342/ref=as_li_qf_sp_asin_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=0672330342&linkCode=as2&tag=confuamuse-20http://www.amazon.com/gp/product/0672330342/ref=as_li_qf_sp_asin_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=0672330342&linkCode=as2&tag=confuamuse-20http://www.amazon.com/gp/product/0672336154/ref=as_li_qf_sp_asin_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=0672336154&linkCode=as2&tag=confuamuse-20http://www.amazon.com/gp/product/0672336154/ref=as_li_qf_sp_asin_tl?ie=UTF8&camp=1789&creative=9325&creativeASIN=0672336154&linkCode=as2&tag=confuamuse-20






12. Now copy that .cer file you created to the device in some way. Via a storage

card, USB cable, Bluetooth, whatever. Just get the .cer in the file structure of the

phone somehow.

13. Power up the phone and click **Start**.

![W 01](http://www.confusedamused.com/wp-content/pictures/2007/10/w-01.png)

14. Find and open **File Explorer**.


15. Locate the .cer file you copied to the phone. I called mine root.cer.


16. Press **Menu** and then **Install**.


17. You should see a dialog that the install was successful. Ive seen it fail on the

first attempt before, so try a few times if you get an error. Press **OK**.


18. Navigate to the phones **Settings** option.


19. Click on **Security** and press OK.


20. Click on **Certificates** and press OK.


21. Click on **Root** and press OK.


22. Scroll to the end of the certificates list or keep pressing **More**. You should

see the certificate you installed listed at the very end of the list. If its not there, try

starting over and making sure youre exporting the certificate authoritys certificate,

and not yours.


You can now test ActiveSync and it should be able to connect to the Exchange

server without ever needing to install your OWA certificate. Its automatically trusted

because the certificate authority now exists in your root certificates store.

Comments from the Peanut Gallery

Phillip

January 9th, 2008

Thanks that worked!

scott

September 23rd, 2008





Thanks for posting this. Very helpful for a first time installation of a certificate to to

Windows Mobile.

Rich

January 29th, 2009

My copy function is grayed out. Is there something else I need to do.

Victor

February 26th, 2009

hi

I have followed above mentioned steps.

My certificate installs in intermediate and not Root.!!!

and i am still geting the same error message!!

any help, i will appreciate.

thanks

Jakob Hojer

March 24th, 2009

Thanks a lot, this was very helpful, my IT depratment hasnt been able to help me

but the step-by-step screen shots certainly helped

Anita

April 11th, 2009

So what did u do Rich, when the Copy to File button is greyed out?

ChrisE

April 24th, 2009

My copy to file button is also greyed out.

lani

May 19th, 2009

Perfect guide! Thanks a lot. I didnt have to perform steps 18-22 on my brand new

HTC Diamond2.

gilby

May 20th, 2009

Rich, you need to run IE as administrator

Mobile Developer

June 12th, 2009

Thank you for posting this very helpful for windows mobile users and developers.

Marc





February 10th, 2010

I have a new HTC HD2 device and couldnt synchronise with OWA because of

0x80072FOD error. I followed the steps deeeopped above and it works!

Thanks a lot

The most amazing is that the customer service of HTC didnt knew the answer!

Gepetto

February 10th, 2010

Its very helpfull. Tested on Samsung Omnia. Everything works fine

Kelvin Arcelay

May 2nd, 2010

Yupyour instructions are on target. Thanks

hans

May 4th, 2010

Good advice, worked on HTC s740!

Linc

June 3rd, 2010

New HTC HD2, worked perfectly, very clear, thanks, saved me a lot of grief!

d3b14n

July 16th, 2010

hey everyone,

have the same problem as victor, my cert installs as intermediate and not as root,

what can I do about it???

anyone has any answers how to solve this?

thx for your help

poldy

ITman

July 16th, 2010

I am using an HTC Diamond2 and I am amazed at how far back Windows Mobile

6.5 is.

The AppleOS on the Iphone finds the certificate automatically and says Do you

want to install it and its job done.

Why is windows mobile so useless?

Osman

July 21st, 2010

Wow! This advice is from 2007 and it is still valid
http://aalimited.net/http://aalimited.net/





I walked through step by step and my HD2 with WM6.5.1 is synchronizing again!

Thanks a lot!

Fahad

July 26th, 2010

Thanks a lot

I walked through step by step and my HD2 is synchronizing again!

Simon

August 23rd, 2010

Anyone having trouble with not being able to install certificates to the root section,

ensure you select THE TOP LEVEL certificate in the list from the OWA Certification

Path

settings. You may have more than 2 levels of certificates in the OWA list, its easy

to mistakenly select the last/lowest in the list, when you actually need the top level

one.

S.

piccolo

August 26th, 2010

Perfect !

Thanks a lot, quite straightforward guide

Jim

August 27th, 2010

works like a charm! thanks for posting this!





Richard

November 13th, 2010

Hi thanks for the tutorial, but ive try and it my root certificate install as intermediate.

ive checked that i was at the top level. have somebody resolve this issue ??

Defredo

November 19th, 2010

If you have lots of users needing it.

Zip the file and post it on your internet.

then send out this email

To all staff with a Windows Mobile company phone (i.e. not Blackberry or iPhone)

will have noticed their phones were not automatically updating for the last day or

so.

Please read the below instructions and follow on the phone itself:

1) Click this link: https://YourWebAddress/root.zip

2) Click Open.

3) Expand root.zip by clicking the + symbol.

4) Double click root.cer.

5) Click OK on the message One or more certificates were installed successfully

it will take about 10 seconds to appear after double clicking.

6) Close the Zip window, the download window and the browser.

7) Click Start in the top left corner.

8) Scroll down until you find the Tools button and click it.

9) Click ActiveSync

10) Click Sync

Your emails should now come through automatically again.

If you are still not getting emails, follow steps 7-10 again. If it still does not work,

restart the phone by holding the hang up button for 5 seconds, then click Power

Off. Once the device is off, press the hang up button again to turn back on.

Any problems, please call IT on the below number.

Apologies for the inconvenience our certificate vendor has upgraded their securityand the preloaded certificates we shipped with the phones would not accept the

high security settings.

Many Thanks,

abdul

December 31st, 2010

I have only one certificate level and when I install it goes in intermediate level not

the root. I am using Blackjack 2 windows mobile 6.1. Can any one please suggest

any help ? how to move the certificate from intermediate to root? or to disable the
https://yourwebaddress/root.ziphttp://www.hasboo.co.nr/http://www.hasboo.co.nr/https://yourwebaddress/root.zip





certificate check of active sync completely?

Daniel Huang

January 24th, 2011

Thanks very much! It helped me fixed my problem!!

K Thomas

February 3rd, 2011

Still havent got it working but at least have now realised that the Secure Server

Certification Authority certificate expired a month ago which is probably causing the

issue!

Asybo2002

March 8th, 2011

Post 21 solved it for me.

Thank you.

Chris Noble

March 17th, 2011

I love you! I was almost at the point of throwing myself out the window trying to get

Email Synchronised, Microsoft help docs are absolutely useless but with your help

its finally working!

Miller

April 19th, 2011

I have to mark here. this is the only workable method to me after I tried many kinds

of way, search on google, microsoft support.

its a total solution, no just a not clear diagnose again.

Annonymous

July 17th, 2011

Yep this worked all IT dept could do was tell me the certificate was never

designed to work with WM6.1 or lower. Sounds like it was just bad Cert creation on

their part when they compiled it without selecting the certificates top level as

described in your step 4 above. Wish I had have searched for this 2 weeks ago

rather than wait for their this can never work response.

Adi InbarApril 10th, 2012

Thanks, very helpful. I was getting error 0x80072F0D The security certificate on

the server is invalid when trying to sync with Exchange. Where I was getting

stymied was that I exported the certs from the OWA server in every format

available, but the device wouldnt recognize them as certs. The problem (which

your instructions cleared up) is that the certs need to be in DER format but with a

.cer extension, but Firefox by default exports DER certs with a .der extension.

Also, I had to export and import that *entire* certificate chain before it worked (I

dont mean using the certificate chain file format, I mean export and import each
http://www.klokwerk.co.uk/http://www.yahoo.com/http://www.yahoo.com/http://www.klokwerk.co.uk/





Name:

E-Mail Address:

Website:

individual certificate in the chain in DER format with a .cer extension).

Anon

July 24th, 2012

Thanks, Been trolling around for hours trying to sort this. Worked a treat.

Mel Smith

July 26th, 2012

Thankyou Thankyou Thankyou I have been trying to fix this issue with our Windows

6.5 phones when we migrated to our new exchange server, your a genius. You

have made my Friday

Ney

November 14th, 2012

Excellent explanation! straight forward to solve the problem, THANK YOU SO

MUCH!!!

I had the same problem with an old i-Mate JAQ which had expired its security

certificate, giving error code 0x80072FOD win mobile 5.

Dom

December 20th, 2012

Thank you so much. I had this problem with a clients samsung omnia with a trusted

certificate and your post finally resolved it. Mant thanks.

Marco Magri

January 4th, 2013

Perfect Solution and easy way to get the certificate and install it on my HTC Touch

HD running windows mobile 6.1 and synch to exchange 2010. Easy solution that Ihave been trying to search for a solution for the past few weeks.

Thanks a lot!!!!

Chime In

Comment:

Post Comment





Recent ArticlesHot off the presses! Well, relatively.

Lync MX and Skype Crash on Windows 8.1

Lync 2013 CU3 and Hosting Providers

LYSS.exe High CPU Usage

Lync Meeting Content and Attachments That

Wont Download

Lync 2013 and the RTCXDS 16 GB Transaction

Log Limit

Exchange 2013 Schema Prep Objects to Object

References without an Object

Lync 2013 Mobile Client Voicemail

Avoiding Lync 2013 Certificate Prompts

Lync 2013 Mobile Clients and Apache Reverse

Proxy

Cisco and Lync One-Way Audio

Troubleshooting

By Date

By Tag

By Subject

The ArchivesThe good, the bad, and the ugly, all still

available for your viewing pleasure.

Roll CallReally smart folks, via NextHop.

Tom Arbuthnot/ Tommy Clarke/ Michael

Greenlee/ Dustin Hannifin/ Stle Hansen/ Tim

Harrington/Adam Jacobs/ Curtis Johnstone/

Russ Kaufman/ Matt Landis/ Ken Lasko/

David Lim/ Desmond Lee/ Martin Lidholm/Justin Morris/ Thomas Ptt/ Pat Richard/ Brian

Ricks/ Jeff Schertz/ Elan Shudnow/ Mike

Stacey/ Drago Tovec/ Steven van Houttum/

John Weber/ Randy Wintle

Connect

Fine Print Copyright Tom Pacyk. All Rights ReservThis site runs on Wordpress and is hosted

Dreamhost. Opinions and content posted are my own and are in no way reflective oemployer. The world of technology is everchanging and what is true one day may nothe next. Follow my advice at your own risthere are no warranties provided here.
http://www.confusedamused.com/notebook/lyncmx-and-skype-crash-windows-81/http://www.confusedamused.com/notebook/lync-2013-cu3-and-hosting-providers/http://www.confusedamused.com/notebook/lyss-exe-high-cpu-usage/http://www.confusedamused.com/notebook/lync-meeting-content-and-attachments-that-wont-download/http://www.confusedamused.com/notebook/lync-meeting-content-and-attachments-that-wont-download/http://www.confusedamused.com/notebook/lync-2013-and-the-rtcxds-16-gb-transaction-log-limit/http://www.confusedamused.com/notebook/lync-2013-and-the-rtcxds-16-gb-transaction-log-limit/http://www.confusedamused.com/notebook/exchange-2013-schema-prep-objects-to-object-references-without-an-object/http://www.confusedamused.com/notebook/exchange-2013-schema-prep-objects-to-object-references-without-an-object/http://www.confusedamused.com/notebook/lync-2013-mobile-client-voicemail/http://www.confusedamused.com/notebook/avoiding-lync-2013-certificate-prompts/http://www.confusedamused.com/notebook/lync-2013-mobile-clients-and-apache-reverse-proxy/http://www.confusedamused.com/notebook/lync-2013-mobile-clients-and-apache-reverse-proxy/http://www.confusedamused.com/notebook/cisco-and-lync-one-way-audio-troubleshooting/http://www.confusedamused.com/notebook/cisco-and-lync-one-way-audio-troubleshooting/http://www.confusedamused.com/archives/http://www.confusedamused.com/archives/http://www.confusedamused.com/archiveshttp://blogs.technet.com/b/nexthop/http://lyncdup.com/http://www.ultimate-communications.com/http://blog.greenl.ee/http://blog.greenl.ee/http://www.technotesblog.com/http://www.technotesblog.com/http://msunified.net/http://howdouc.blogspot.com/http://howdouc.blogspot.com/http://imaucblog.com/http://imaucblog.com/http://blog.insidelync.com/http://infrastructurehelp.wordpress.com/http://windowspbx.blogspot.com/http://ucken.blogspot.com/http://davidlim66.wordpress.com/http://www.leedesmond.com/weblog/?cat=15http://mlidholm.blogspot.com/http://mlidholm.blogspot.com/http://www.justin-morris.net/http://lyncuc.blogspot.de/http://www.ehloworld.com/http://www.ehloworld.com/http://www.bricomp.com/blogs/http://www.bricomp.com/blogs/http://blog.schertz.name/http://blog.schertz.name/http://www.shudnow.net/http://mikestacy.typepad.com/http://mikestacy.typepad.com/http://www.lynclog.com/http://www.lynclog.com/http://blog.unifiedcommunications.nl/http://tsoorad.blogspot.com/http://ucmadeeasy.wordpress.com/http://www.instagram.com/tompacykhttp://www.instagram.com/tompacykhttp://www.linkedin.com/profile/view?id=6942649&trk=tab_proxhttp://www.linkedin.com/profile/view?id=6942649&trk=tab_proxhttp://www.yelp.com/user_details?userid=ZgZwpJuEuMeUhpgn_f0CFwhttp://www.yelp.com/user_details?userid=ZgZwpJuEuMeUhpgn_f0CFwhttp://www.facebook.com/tom.pacykhttp://www.facebook.com/tom.pacykhttp://www.twitter.com/tompacykhttp://www.twitter.com/tompacykhttp://www.confusedamused.com/feedhttp://www.confusedamused.com/feedhttp://ucmadeeasy.wordpress.com/http://tsoorad.blogspot.com/http://blog.unifiedcommunications.nl/http://www.lynclog.com/http://mikestacy.typepad.com/http://mikestacy.typepad.com/http://www.shudnow.net/http://blog.schertz.name/http://www.bricomp.com/blogs/http://www.bricomp.com/blogs/http://www.ehloworld.com/http://lyncuc.blogspot.de/http://www.justin-morris.net/http://mlidholm.blogspot.com/http://www.leedesmond.com/weblog/?cat=15http://davidlim66.wordpress.com/http://ucken.blogspot.com/http://windowspbx.blogspot.com/http://infrastructurehelp.wordpress.com/http://blog.insidelync.com/http://imaucblog.com/http://howdouc.blogspot.com/http://howdouc.blogspot.com/http://msunified.net/http://www.technotesblog.com/http://blog.greenl.ee/http://blog.greenl.ee/http://www.ultimate-communications.com/http://lyncdup.com/http://blogs.technet.com/b/nexthop/http://www.confusedamused.com/archiveshttp://www.confusedamused.com/archives/http://www.confusedamused.com/archives/http://www.confusedamused.com/archiveshttp://www.confusedamused.com/archives/http://www.confusedamused.com/archives/http://www.confusedamused.com/notebook/cisco-and-lync-one-way-audio-troubleshooting/http://www.confusedamused.com/notebook/cisco-and-lync-one-way-audio-troubleshooting/http://www.confusedamused.com/notebook/lync-2013-mobile-clients-and-apache-reverse-proxy/http://www.confusedamused.com/notebook/lync-2013-mobile-clients-and-apache-reverse-proxy/http://www.confusedamused.com/notebook/avoiding-lync-2013-certificate-prompts/http://www.confusedamused.com/notebook/lync-2013-mobile-client-voicemail/http://www.confusedamused.com/notebook/exchange-2013-schema-prep-objects-to-object-references-without-an-object/http://www.confusedamused.com/notebook/exchange-2013-schema-prep-objects-to-object-references-without-an-object/http://www.confusedamused.com/notebook/lync-2013-and-the-rtcxds-16-gb-transaction-log-limit/http://www.confusedamused.com/notebook/lync-2013-and-the-rtcxds-16-gb-transaction-log-limit/http://www.confusedamused.com/notebook/lync-meeting-content-and-attachments-that-wont-download/http://www.confusedamused.com/notebook/lync-meeting-content-and-attachments-that-wont-download/http://www.confusedamused.com/notebook/lyss-exe-high-cpu-usage/http://www.confusedamused.com/notebook/lync-2013-cu3-and-hosting-providers/http://www.confusedamused.com/notebook/lyncmx-and-skype-crash-windows-81/http://www.confusedamused.com/notebook/cisco-and-lync-one-way-audio-troubleshooting/http://www.confusedamused.com/notebook/lync-2013-mobile-clients-and-apache-reverse-proxy/http://www.confusedamused.com/notebook/avoiding-lync-2013-certificate-prompts/http://www.confusedamused.com/notebook/lync-2013-mobile-client-voicemail/http://www.confusedamused.com/notebook/exchange-2013-schema-prep-objects-to-object-references-without-an-object/http://www.confusedamused.com/notebook/lync-2013-and-the-rtcxds-16-gb-transaction-log-limit/http://www.confusedamused.com/notebook/lync-meeting-content-and-attachments-that-wont-download/http://www.confusedamused.com/notebook/lyss-exe-high-cpu-usage/http://www.confusedamused.com/notebook/lync-2013-cu3-and-hosting-providers/http://www.confusedamused.com/notebook/lyncmx-and-skype-crash-windows-81/

installing windows mobile 6.0 root certificates _ confused amused

Documents

certificate isself

certificate export wizard

root certificates store

root ca

rootcer windows mobile

true root certificates

pminstalling windows

root certi ficatestuesday