Exchange 2K3 and Active Sync services
Hello all,
We have an exchange 2003 server SP2 working perfectly.
I have set-up OWA and no issue until there in internal and external.
We use SSL secure communications but we have a self signed certificat. ( little ASBL withouth score of money to spend...)
I have follow this procedure :
http://www.msexchange.org/tutorials/SSL_Enabling_OWA_2003.html
I have install the crt files on my Exchange server. in certifcat mmc for local both local user and computer.
When I go to https://webmail.servername.be
I'm warned that it's not a valid certificat but I click continue with this website and I'm prompted for my user name and password...once enter it's works fine .
The not a valid certificat is not a big deal for us ....we can live with that.
The issue is when I want to connect via smartphone ( blackberry, Iphone and HTC desire and Heroe - all tested same issue)
I enter the connexion info, user name ,server, password...all is fine.
Then I'm prompted to choose wich info I want to sync I choose outlook mail, and I have the error :
Echec de création du compte, essayer plus tard. in french
Would be something like ; fail to create the account, try again later in english.
Did someone have an idea ?
Thanks a lot for your help.
March 3rd, 2011 5:38am
By the way, I have forgot to say:
When I go to this site :
https://www.testexchangeconnectivity.com/Default.aspx
I have this result :
ExRCA teste Exchange ActiveSync.
Échec du test Exchange ActiveSync.
Étapes de test
Tentative de résolution du nom d’hôte webmail.calliege.be dans DNS.
Le nom d'hôte a été résolu correctement.
Détails supplémentaires
Adresses IP renvoyées : yyy.yy.yy.yy
Tester le port TCP 443 sur l’hôte webmail.calliege.be pour s’assurer qu’il écoute/est ouvert.
Le port a été ouvert correctement.
Test du certificat SSL pour confirmer sa validité.
Échec du certificat SSL à une ou plusieurs vérification(s) de validation de certificat.
Étapes de test
Validation du nom du certificat.
Le nom de certificat a été correctement validé.
Détails supplémentaires
Nom d'hôte trouvé webmail.calliege.be dans le nom commun sujet du nouveau certificat.
Validation de l’approbation de certificat pour les périphériques Windows Mobile.
La validation de l'approbation du certificat a échoué.
Détails supplémentaires
La chaîne de certificats n’a pas pu être créée. Vous ne disposez peut-être pas des certificats intermédiaires nécessaires. Pour plus d'informations, consultez l'article KB 927465 de la base de connaissances
Microsoft.
If I sumarize it's says that
the host name has bben resolve correctly
the IP address is indeed our public address
The 443 port is open
test SSL certificat :
The name of the certificat has been validated correctly
the host name is corect
Validation of certificate trust for Windows mobile --> failed
details:
the Certificate chain cannot be created.
for more info see KB 927465
In have check the KB but no hit...
Thanks ,
Elisa
Free Windows Admin Tool Kit Click here and download it now
March 3rd, 2011 5:52am
Ok Guys no worries...
I have find out the issue
IIS
exchange properties
Directory security
Authentification and access control
select integrated Windows authentification
that was it ifsomeone has teh same issue hope it could help.
March 3rd, 2011 9:14am