"James Hurrell" <"j_a_hurrell at hotmail com"> wrote in message
>I have a user that has come to me today and said he needs to sync his brand
>new iPhone with Exchange. I know that I could enable IMAP and get him
>synching mail that way, but he would also like Contacts and Calendar, hence
>the built in Exchange route.
> I've read a lot about this on the web and it seems that the sticking point
> is usually the self-signed cert that the iPhone doesn't like.
> I have OMA enabled via CEICW and that works fine in a browser. The user
> fills in the necessary details on the iPhone and the message he gets is
> this when he attempts to complete the Exchange account setup:
> Unable to verify certificate
> The certificate from BLAH for account BLAH could not be verified.
> I've read that some people have had success by manually installing the
> cert on the iPhone, but I wondered if it wouldn't be a whole lot easier
> just to get myself a third party trusted certificate and install that in
> SBS and avoid the whole "certificate" issue on the iPhone? What do you
> I have found this, which is good:
> But can anyone tell me what is the preferred way to remove the existing
> self-signed cert before I install the third party? Should i run the CEICW
> and opt NOT to generate a cert?
> And lastly, who should I get my cert from?
As others have mentioned, you can simply accept the certificate when setting
up an ActiveSync connection on the iPhone. I've done many, and they simply
work with the self signed certs on an SBS, or a self-created cert using a
private CA in an AD environment. Matter of fact, the beauty of the iPhone
(not talking about ATT's coverage, which is horrendous), they simply work
with ActiveSync without anything else to do other than accept the cert when
prompted during the ActiveSync setup.
Maybe there is something up wtih the phone, or someone had changed
something, added an app to it, etc, that can be causing it. Have you tried
resetting the phone to factory defaults and trying again?
Also with your Exchange installation, have you ran the SBSBPA and the EXBPA?
Download details: Exchange Best Practices Analyzer UpdateJan 15, 2008 ...
This download contains the latest XML and ExBPA.chm files. ... Fix-ups for
critical errors seen when running against SBS2003. ...
Also, run the following to insure all ports and necessary sservices are
available for ActiveSync to work:
Microsoft Exchange Server Remote Connectivity AnalyzerSelect the test you
want to run: ... Microsoft Office Outlook Connectivity Tests ... Exchange
Remote Connectivity Analyzer has encountered an error. ...
This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.
Please reply back to the newsgroup or forum for collaboration benefit among
responding engineers, and to help others benefit from your resolution.
Ace Fekay, MVP, MCT, MCITP EA, MCTS Windows 2008 & Exchange 2007, MCSE &
MCSA 2003/2000, MCSA Messaging 2003
Microsoft Certified Trainer
Microsoft MVP - Directory Services
If you feel this is an urgent issue and require immediate assistance, please
contact Microsoft PSS directly. Please check http://support.microsoft.com
for regional support phone numbers.