- Microsoft-approved certificates for MSFP on Mobile 5 and 6?
- Posted by just bob on May 2nd, 2008
Where is the list of pre-installed certificate authorities for Windows
Mobile 5 and 6 devices to support Exchange 2003 SP2 and MSFP?
We installed a godaddy.com cert and it did not unless we pre-installed it on
the devices which is not practical when devices are in the field already and
all we are trying to do is renew the certificate.
Thank you!
-Bob
- Posted by Martin Blackstone on May 2nd, 2008
Some people say GoDaddy certs work. I had the same issue you did.
So I went with Thwate.
Here is a list as well:
http://www.sembee.co.uk/archive/2007/11/02/56.aspx
"just bob" <kilbyfan@aoldotcom> wrote in message
news:r6qdnSGsQN0Fq4bVnZ2dnUVZ_oaonZ2d@supernews.co m...
- Posted by Andy David {MVP} on May 2nd, 2008
On Fri, 2 May 2008 09:10:03 -0700, "Martin Blackstone"
<martinb@myrealbox.com> wrote:
I liked the certificate so much, I bought the company.
- Posted by Martin Blackstone on May 2nd, 2008
"Andy David {MVP}" <adavid@pleasekeepinngcheesebucket.com> wrote in message
news:tggm14563le7tsnubohpq0p0aa72ih7a05@4ax.com...
- Posted by just bob on May 2nd, 2008
"Martin Blackstone" <martinb@myrealbox.com> wrote in message
news:uLCb77GrIHA.2492@TK2MSFTNGP06.phx.gbl...
didn't work but putting the old one back fixes it. Thank gosh the cert does
not expire for another two weeks. I think Godaddy will resell certs from
other CA so some of theirs will work. I just wasted $100 with them, though,
so I'm going with Thawte, too.
thanks!
- Posted by andy webb on May 3rd, 2008
If you buy the cheapo godaddy cert the RootCA isn't trusted. If you buy the
next level up, it is. Really hard to remember that when trying to just buy
what you need.
We use comodo and thawte now to avoid that problem. And, yes, we've had the
same renewal snafu.
"just bob" <kilbyfan@aoldotcom> wrote in message
news:3qadne9_UYUb14bVnZ2dnUVZ_hynnZ2d@supernews.co m...
- Posted by Rich Matheisen [MVP] on May 4th, 2008
"andy webb" <awebb@swinc.com.spamsucks.com> wrote:
https://certs.godaddy.com/Repository.go
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
- Posted by Martin Blackstone on May 4th, 2008
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:bf3q14t9ch7ue6rsijndu72f65mnm24loe@4ax.com...
Could you read it to me?
- Posted by Rich Matheisen [MVP] on May 4th, 2008
"Martin Blackstone" <martinb@myrealbox.com> wrote:
I did. Weren't you listening?
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
- Posted by just bob on May 5th, 2008
Next level up being the "class 2" ???
Thanks,
-Bob
"andy webb" <awebb@swinc.com.spamsucks.com> wrote in message
news:04654856-5221-4A4D-BDB3-12D250C2B579@microsoft.com...
- Posted by just bob on May 5th, 2008
I can read OK but can't comprehend! :-)
I'm trying to figure out which one is the "next level up" .
is it this one?
"Go Daddy Class 2 Certification Authority Root Certificate - DER Format"
Thanks!
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:098q149pka4r2ns307ufq8rlb1ch2m0qa1@4ax.com...
- Posted by just bob on May 5th, 2008
Rich, this was the answer. I emailed godaddy for help and they pointed me to
that page you mentioned and gave me instructions to install
gd_cross_intermediate and gd_intermediate and it all seems to be working. My
$107 for four years was not wasted after all. But the real test will be if
any of my 20 Windows Mobile users start having trouble... so far two of us
are OK.
Many thanks!
-Bob
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:bf3q14t9ch7ue6rsijndu72f65mnm24loe@4ax.com...
- Posted by Rich Matheisen [MVP] on May 6th, 2008
"just bob" <kilbyfan@aoldotcom> wrote:
Depends on what you're using it for. The one you mention is just the
individual certificate. It's good for a SmartPhone, PocketPC, or
something that doesn't understand the other, more complicated,
certificate file types.
This is essentially the same thing as the DER format but it contains
validation information:
Go Daddy Class 2 Certification Authority Root Certificate
And this one contains the intermediate certificates (suitable for
Windows IIS):
Go Daddy PKCS7 Certificate Intermediates Bundle (for Windows IIS)
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
- Posted by Rich Matheisen [MVP] on May 6th, 2008
"just bob" <kilbyfan@aoldotcom> wrote:
If you export their root certificate from your certificate store in
DER format you can copy it to your SmartPhone/PocketPC and then just
tap on it to install it (assuming the device isn't locked by the OEM).
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
- Posted by just bob on May 6th, 2008
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:rhiv141stii3j61l6qfeq7g1e33q8ci8p2@4ax.com...
Yes, I was hoping to avoid that and it seems I was successful by installing
the intermediates. All credit to GoDaddy to help me understand what was
needed. They say they are preinstalled on Windows Mobile 5 with AKU2 and
better, which all of ours are, thankfully, so I did not need to touch the
devices. Yea!
- Posted by Rich Matheisen [MVP] on May 6th, 2008
"just bob" <kilbyfan@aoldotcom> wrote:
They might say they they're preinstalled on AKU2, but their cert
wasn't present on my device. I had to load the cert (not a big deal).
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
- Posted by andy webb on May 7th, 2008
not a big deal for you or me, but an enormous deal for my customers in a
different state with no nearby IT admin to do the clicky clicky and get the
cert loaded.
we want certs that just work.
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:lo7124pgbokqal8enljn3iin93qdk2smv7@4ax.com...
- Posted by Rich Matheisen [MVP] on May 8th, 2008
"andy webb" <awebb@swinc.com.spamsucks.com> wrote:
Who sets up the devices for those poor ignorant people to use in the
first place?
--
Rich Matheisen
MCSE+I, Exchange MVP
MS Exchange FAQ at http://www.swinc.com/resource/exch_faq.htm
Don't send mail to this address mailto:h.pott@getronics.com
Or to these, either: mailto:h.pott@pinkroccade.com mailto:melvin.mcphucknuckle@getronics.com mailto:melvin.mcphucknuckle@pinkroccade.com
- Posted by andy webb on May 9th, 2008
they buy them from ATT or Sprint and just expect them to work. We can give
them a bit of info for config, but "install certificate" doesn't fly.
"Rich Matheisen [MVP]" <richnews@rmcons.com.NOSPAM.COM> wrote in message
news:8pk424pjh352vm7c9au15s5ku75t9ktsoe@4ax.com...
- Posted by Martin Blackstone on May 9th, 2008
Yup. Even with like maybe 20-25 WM phones, that would be a nightmare.
"andy webb" <awebb@swinc.com.spamsucks.com> wrote in message
news
6366E5E-C163-4EAC-8D78-F56921AEF844@microsoft.com...
