| Author |
ActiveSync For K850 against Exchange 2007 |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Well I'm running an Exchange 2007 for a while, with self-made certificates. Those certificates works perfectly on any Win Mobile 6 devices, but I'm not able to import it on the K850, it only says invalid certificate. So have anyone any fix to solve this???
Any help appreciated
[ This Message was edited by: hullabuba on 2007-10-14 11:40 ]
Edit: Removed the negative smiley from the title.
[ This Message was edited by: hullabuba on 2008-03-03 14:38 ] |
|
|
dm.wood
Joined: Oct 17, 2007
Posts: 3
PM |
Ok I managed to import the certificate without any problems. Im using a Root Cert from a Windows 2003 CA Server.
When you export the cert from the server make sure you are exporting the "Root" certificate that is used to sign all the other certs that you can create. (I originally exported my Webserver cert and this caused the same problem that you have).
You need to export it in X509 DER format. This will give you a certificate file with the *.cer extension.
I transfered the file to the K850i using Bluetooth and OBEX file transfer. If the file is valid the phone automatically detects that it is a certificate file and prompts you to install it. You can then see it listed under the security settings in the phone.
By the way ..no joy with Activesync yet. I have checked and re-checked all settings. The Root Cert I am using works fine on other Windows Smartphones so I am sure it is not a problem with the cert itself. All my settings are the same on each phone as well.
I can see the phone connecting in the IIS server logs however the codes in these logs seem to indicate there is a logon failure.
• 401.1 - Logon failed.
• 401.2 - Logon failed due to server configuration.
I am not sure whats wrong as all the other Smartphones dont have this problem so I do not think there is a problem with the server config.
Lets see if we can work together to crack this! A portion of my log file is below for reference. I have replaced my domain name with the word "domain" and my email address with "emailaddressremoved" for security reasons 
2007-10-16 20:59:10 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&DeviceId=D12F9EDFEDB4B106C1B62BEB3277E843&DeviceType=SmartPhone&Cmd=GetItemEstimate&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C3I1810S4596R0S0L0H0P 443 domain.comdarren 193.113.235.168 MSFT-SPhone/5.1.2000 200 0 0
2007-10-16 21:04:58 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645 443 - 193.113.235.169 SonyEricssonK850i/R1CA 401 2 2148074254
2007-10-16 21:05:03 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 - 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2007-10-16 21:05:03 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 ARIQDarren 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2007-10-16 21:05:03 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C1I459S1110R0S0L0H0P 443 domain.comdarren 193.113.235.169 SonyEricssonK850i/R1CA 403 0 0
2007-10-16 21:11:42 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645 443 - 193.113.235.182 SonyEricssonK850i/R1CA 401 2 2148074254
2007-10-16 21:11:44 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 - 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2007-10-16 21:11:44 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 ARIQDarren 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2007-10-16 21:11:44 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C1I459S1110R0S0L0H0P 443 domain.comdarren 193.113.235.182 SonyEricssonK850i/R1CA 403 0 0
[ This Message was edited by: dm.wood on 2007-10-16 23:33 ]
[ This Message was edited by: dm.wood on 2007-10-16 23:35 ]
[ This Message was edited by: dm.wood on 2007-10-16 23:37 ] |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Thanks for your info, and yes you are totally right, I had to export the certificate from the CA not the Exchange server. After this was done the Activ-Sync works nearly optimal. The Contacts and epost are fully synched, but the calendar fails.. Maybe next FW?? |
dm.wood
Joined: Oct 17, 2007
Posts: 3
PM |
Ok now I have a question for you regarding the Activesync settings 
As i said in my previous message my connection to my Exchange server using active Activesync fails on my K850i. However, it works on all my other Smartphones which run Windows Mobile 5.
I get the message: "Session faled Communication Interrupted"
I have no real idea where to start with this. I have checked that all of the information in the Activesync Connection parameters is correct many times.
I can also see the phone connecting to the Exchange Server through the IIS log files however it appears that something is then failing and I am not sure what.
Any ideas? Do you manage your own Exchange Server? Or are you using a hosted solution?
Any help you can give would be much appreciated
I do not think your Calendar problem is related to the FW .. as your phone is synchronising your contacts and email. If it was a FW issue you would most likely not be able to synchronise at all.
What synch settings are you using for your Calendar on the phone?
[ This Message was edited by: dm.wood on 2007-10-17 21:24 ] |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Ok, this is my settings:
General:
Server address: https://exchange.server.com
Domain:domain
Username:username
Password:*********
Programs:
v E-post
- Calendar
v Contacts
E-post:
Havent changed it
Calendar:
Havent changed it
Advanced:
Push:Off
Sync.interval:Off
Allowed connection:Homenetwork
Connection:SE
Secure connection:Yes
I have norwegian settings so excuse the bad translation..
I've spoken with SE, and they says it might be to much entries in the calendar? So I will check with a new account without any entries later
This is my own Exchange 2007
Hope this helps you anyway
I also noticed that the certificate is not necessary if your IIS ignore it. We have no problems accessing the calendar sync with any of our WM 6.0 devices...
[ This Message was edited by: hullabuba on 2007-10-18 11:38 ] |
MagnusM
Joined: Jan 17, 2007
Posts: 4
PM |
Hello,
We just received our first K850's to our office. We have both environments for Autosync, Exchange 2003 and Exchange 2007. We can confirm that we have the same problem with our 2007 server. We can sync contacts and mail but not our calendar on the 2007 server. The 2003 works fine. It doesn't seem to matter if you have a lot of entries in your calendar or not.
Regards,
Magnus |
MagnusM
Joined: Jan 17, 2007
Posts: 4
PM |
I have just been on the phone with SonyEricsson support, they were very helpful. The K850 doesn't have support for "Additional Security Settings" in the activesync 2.5 protocol. That might be the reason for our problems. They couldn't understand why I could sync even though we have the additional settings in place on our server. I suspect there is a bug involved.
So try and disable those settings and see if you have the same problems.
/Magnus |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Hello Magnus.
Welcome to the bug
Did the disable settings help you? And where to disable it?
/Hulla |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Just to follow this thread up... 
A new bug? First time I did the active sync. It synced all external and all internal mails, fine . But after some settings I deleted the settings and created a new, then it only syncked the external mails... Tried to made a new settings then it syncked only internal mails. So for now I only get external mails, this MUST be a new bug... |
MagnusM
Joined: Jan 17, 2007
Posts: 4
PM |
We did disable the Device Security on the exchange connector and the policy in Exchange 2007. But it didn't actually change anything. Our environment with servers is quite complex so we might have missed something in the testing. We did test the phone with a 2003 server outside our corporate environment and that did work fine. |
dm.wood
Joined: Oct 17, 2007
Posts: 3
PM |
Hi guys please see my other post in the MS Technet forums. I spent 5 days reading IIS Server and Exchange logs to track the problem down without any help from Sony.
Jump here: http://forums.microsoft.com/T[....].aspx?PostID=2297397&SiteID=17
Would have been nice to see Sony make this "bug" known by including an advisory in the packaging or documentation.
Perhaps Sony didnt know about the security issue as I see the post has been read over 400 times .. doubt it though.
There are also limitations as to the folders you can sync. My post details how I cleared down both the phone and removed any trace of it from the Mobile Admin tool before successfully managing to sync.
I do have this working on 2 K850i phones now without any problems.
Hope this helps some of you still having issues!
[ This Message was edited by: dm.wood on 2007-10-28 02:26 ] |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Hi. Seems to solve the bug for Ex 2003, but Ex 2007 does not have the mobileadmin page your refferring to, so Im still stucked... |
MagnusM
Joined: Jan 17, 2007
Posts: 4
PM |
On 2007-10-28 11:39:50, hullabuba wrote:
Hi. Seems to solve the bug for Ex 2003, but Ex 2007 does not have the mobileadmin page your refferring to, so Im still stucked...
The Mobileadmin page can be found in your 2007 Webmail, in the settings view. |
hullabuba
Joined: Oct 07, 2005
Posts: 39
From: Norway
PM |
Yeah found it, but it didnt help me |
Lord_NiCO
Joined: Dec 24, 2002
Posts: 3
PM |
Have you tried to change this setting on the Exchange server?
"Confirm with your IT staff that device security settings on the server allow access to devices that do not fully support password settings. This option is available in:
Exchange System Manager > Global Settings > Mobile Services > Device Security
If this checkbox was unchecked, you will get a a connection failed, although a Windows Mobile device would still sync properly."
This due to that K850i only supports the following security features:
Wipe: PIM data and settings are supported.
Exchange 2003 Device security Settings: NOT supported.
Exchange 2007 Additional Security settings: NOT supported.
[ This Message was edited by: Lord_NiCO on 2007-11-02 13:59 ]
[ This Message was edited by: Lord_NiCO on 2007-11-02 14:16 ] |
|
|
Posted: 2007-10-14 10:44
