Welcome to Esato.com




ActiveSync For K850 against Exchange 2007


Click to view updated thread with images




Posted by hullabuba
Well I'm running an Exchange 2007 for a while, with self-made certificates. Those certificates works perfectly on any Win Mobile 6 devices, but I'm not able to import it on the K850, it only says invalid certificate. So have anyone any fix to solve this???

Any help appreciated



[ This Message was edited by: hullabuba on 2007-10-14 11:40 ]

Edit: Removed the negative smiley from the title.

[ This Message was edited by: hullabuba on 2008-03-03 14:38 ]


Posted by dm.wood
Ok I managed to import the certificate without any problems. Im using a Root Cert from a Windows 2003 CA Server.

When you export the cert from the server make sure you are exporting the "Root" certificate that is used to sign all the other certs that you can create. (I originally exported my Webserver cert and this caused the same problem that you have).

You need to export it in X509 DER format. This will give you a certificate file with the *.cer extension.

I transfered the file to the K850i using Bluetooth and OBEX file transfer. If the file is valid the phone automatically detects that it is a certificate file and prompts you to install it. You can then see it listed under the security settings in the phone.

By the way ..no joy with Activesync yet. I have checked and re-checked all settings. The Root Cert I am using works fine on other Windows Smartphones so I am sure it is not a problem with the cert itself. All my settings are the same on each phone as well.

I can see the phone connecting in the IIS server logs however the codes in these logs seem to indicate there is a logon failure.

• 401.1 - Logon failed.
• 401.2 - Logon failed due to server configuration.

I am not sure whats wrong as all the other Smartphones dont have this problem so I do not think there is a problem with the server config.

Lets see if we can work together to crack this! A portion of my log file is below for reference. I have replaced my domain name with the word "domain" and my email address with "emailaddressremoved" for security reasons


2007-10-16 20:59:10 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&DeviceId=D12F9EDFEDB4B106C1B62BEB3277E843&DeviceType=SmartPhone&Cmd=GetItemEstimate&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C3I1810S4596R0S0L0H0P 443 domain.comdarren 193.113.235.168 MSFT-SPhone/5.1.2000 200 0 0
2007-10-16 21:04:58 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645 443 - 193.113.235.169 SonyEricssonK850i/R1CA 401 2 2148074254
2007-10-16 21:05:03 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 - 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2007-10-16 21:05:03 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 ARIQDarren 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2007-10-16 21:05:03 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C1I459S1110R0S0L0H0P 443 domain.comdarren 193.113.235.169 SonyEricssonK850i/R1CA 403 0 0
2007-10-16 21:11:42 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645 443 - 193.113.235.182 SonyEricssonK850i/R1CA 401 2 2148074254
2007-10-16 21:11:44 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 - 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 401 1 0
2007-10-16 21:11:44 192.168.0.10 PROPFIND /exchange/emailaddressremoved/NON_IPM_SUBTREE/Microsoft-Server-ActiveSync/SonyEricssonK850i/SEMC358874010597645 - 80 ARIQDarren 192.168.0.10 Microsoft-Server-ActiveSync/6.5.7638.1 207 0 0
2007-10-16 21:11:44 192.168.0.10 POST /Microsoft-Server-ActiveSync User=darren&Cmd=FolderSync&DeviceType=SonyEricssonK850i&DeviceId=SEMC358874010597645&Log=V4TNASNC:0A0C0D0FS:0A0C0D0SP:1C1I459S1110R0S0L0H0P 443 domain.comdarren 193.113.235.182 SonyEricssonK850i/R1CA 403 0 0




[ This Message was edited by: dm.wood on 2007-10-16 23:33 ]

[ This Message was edited by: dm.wood on 2007-10-16 23:35 ]

[ This Message was edited by: dm.wood on 2007-10-16 23:37 ]

Posted by hullabuba
Thanks for your info, and yes you are totally right, I had to export the certificate from the CA not the Exchange server. After this was done the Activ-Sync works nearly optimal. The Contacts and epost are fully synched, but the calendar fails.. Maybe next FW??

Posted by dm.wood
Ok now I have a question for you regarding the Activesync settings

As i said in my previous message my connection to my Exchange server using active Activesync fails on my K850i. However, it works on all my other Smartphones which run Windows Mobile 5.

I get the message: "Session faled Communication Interrupted"

I have no real idea where to start with this. I have checked that all of the information in the Activesync Connection parameters is correct many times.

I can also see the phone connecting to the Exchange Server through the IIS log files however it appears that something is then failing and I am not sure what.

Any ideas? Do you manage your own Exchange Server? Or are you using a hosted solution?

Any help you can give would be much appreciated

I do not think your Calendar problem is related to the FW .. as your phone is synchronising your contacts and email. If it was a FW issue you would most likely not be able to synchronise at all.

What synch settings are you using for your Calendar on the phone?






[ This Message was edited by: dm.wood on 2007-10-17 21:24 ]

Posted by hullabuba
Ok, this is my settings:
General:
Server address: https://exchange.server.com
Domain:domain
Username:username
Password:*********
Programs:
v E-post
- Calendar
v Contacts
E-post:
Havent changed it
Calendar:
Havent changed it
Advanced:
Push:Off
Sync.interval:Off
Allowed connection:Homenetwork
Connection:SE
Secure connection:Yes

I have norwegian settings so excuse the bad translation..
I've spoken with SE, and they says it might be to much entries in the calendar? So I will check with a new account without any entries later
This is my own Exchange 2007
Hope this helps you anyway

I also noticed that the certificate is not necessary if your IIS ignore it. We have no problems accessing the calendar sync with any of our WM 6.0 devices...

[ This Message was edited by: hullabuba on 2007-10-18 11:38 ]

Posted by MagnusM
Hello,

We just received our first K850's to our office. We have both environments for Autosync, Exchange 2003 and Exchange 2007. We can confirm that we have the same problem with our 2007 server. We can sync contacts and mail but not our calendar on the 2007 server. The 2003 works fine. It doesn't seem to matter if you have a lot of entries in your calendar or not.

Regards,
Magnus

Posted by MagnusM
I have just been on the phone with SonyEricsson support, they were very helpful. The K850 doesn't have support for "Additional Security Settings" in the activesync 2.5 protocol. That might be the reason for our problems. They couldn't understand why I could sync even though we have the additional settings in place on our server. I suspect there is a bug involved.

So try and disable those settings and see if you have the same problems.

/Magnus

Posted by hullabuba
Hello Magnus.

Welcome to the bug
Did the disable settings help you? And where to disable it?

/Hulla

Posted by hullabuba
Just to follow this thread up...
A new bug? First time I did the active sync. It synced all external and all internal mails, fine . But after some settings I deleted the settings and created a new, then it only syncked the external mails... Tried to made a new settings then it syncked only internal mails. So for now I only get external mails, this MUST be a new bug...

Posted by MagnusM
We did disable the Device Security on the exchange connector and the policy in Exchange 2007. But it didn't actually change anything. Our environment with servers is quite complex so we might have missed something in the testing. We did test the phone with a 2003 server outside our corporate environment and that did work fine.

Posted by dm.wood
Hi guys please see my other post in the MS Technet forums. I spent 5 days reading IIS Server and Exchange logs to track the problem down without any help from Sony.

Jump here: http://forums.microsoft.com/T[....].aspx?PostID=2297397&SiteID=17

Would have been nice to see Sony make this "bug" known by including an advisory in the packaging or documentation.

Perhaps Sony didnt know about the security issue as I see the post has been read over 400 times .. doubt it though.

There are also limitations as to the folders you can sync. My post details how I cleared down both the phone and removed any trace of it from the Mobile Admin tool before successfully managing to sync.

I do have this working on 2 K850i phones now without any problems.

Hope this helps some of you still having issues!

[ This Message was edited by: dm.wood on 2007-10-28 02:26 ]

Posted by hullabuba
Hi. Seems to solve the bug for Ex 2003, but Ex 2007 does not have the mobileadmin page your refferring to, so Im still stucked...

Posted by MagnusM

On 2007-10-28 11:39:50, hullabuba wrote:
Hi. Seems to solve the bug for Ex 2003, but Ex 2007 does not have the mobileadmin page your refferring to, so Im still stucked...


The Mobileadmin page can be found in your 2007 Webmail, in the settings view.

Posted by hullabuba
Yeah found it, but it didnt help me

Posted by Lord_NiCO

Have you tried to change this setting on the Exchange server?

"Confirm with your IT staff that device security settings on the server allow access to devices that do not fully support password settings. This option is available in:

Exchange System Manager > Global Settings > Mobile Services > Device Security

If this checkbox was unchecked, you will get a a connection failed, although a Windows Mobile device would still sync properly."



This due to that K850i only supports the following security features:

Wipe: PIM data and settings are supported.
Exchange 2003 Device security Settings: NOT supported.
Exchange 2007 Additional Security settings: NOT supported.



[ This Message was edited by: Lord_NiCO on 2007-11-02 13:59 ]

[ This Message was edited by: Lord_NiCO on 2007-11-02 14:16 ]

Posted by sveintore
For the guys that has gotten this to work:
When receiving a new mail, does it "lock up/freeze" for 5-10 seconds before you can press any keys? (or is it just with me)

Don't remember what I did to make it work, but not going to use it if it's going to be like this

Posted by tkao2025
I'm glad some people are having the same problems as I'm having....I'm having problem syncing my calendar with exchange. Like others mail and contacts sync fine, but once calendar syncs, it freezes on for example 2/96 sync'd. I have to do a battery pull...does anyone know if this is a known bug SE is aware of and will it be fixed with next firmware....hopefully soon!!!

Posted by hullabuba
The new firmware solved the calendar issues against Exchange 2007, for me tough.

[ This Message was edited by: hullabuba on 2007-12-08 09:19 ]

Posted by tkao2025
What's the latest firmware? Mine's R1CA037 and I tried to update last night and it said it was the latest.

Posted by hullabuba
Thats the one.

Posted by tkao2025
Hmmmm interesting cause I'm still having the calendar issue.

Posted by hullabuba
Yay! Youre right
Even the mails,contacts and calendar do sync. It is close to impossible to get the contacts, and calendar to do a full sync. But this fw is better than the prev so seems like we just have to wait for the next to come...

Posted by tkao2025
Hopefully very soon....

Posted by hullabuba
I'm not quite sure, but after installed Service Pack 1 on the Exchange 2007 server, with the service packs for .net framework, the sync has totally stopped for the k850

I know there is a new firmware soon available, will this help out?

Posted by Jabes
We installed Exchange 2007 SP1 yesterday, and my K850i has now stopped synchronising also.

I have had a quick look at the exchange settings, and everything still seems correct.

So:

Exchange 2007 - Firmware 29 - fails
Exchange 2007 - Firmware 37 - works
Exchange 2007 SP1 - Firmware 37 - ?? doesn't work on initial application of SP1

Best wishes
James


Posted by hullabuba
Yes you have it right...

The sync works fine with other devices, so it's back to Sony Ericsson again!



Posted by Jabes
I do not have any access to Sony Ericsson so if you are reporting the issue I will sit tight to hear your results.

I am on Orange (UK) so as soon as the 38 firmware is available to me I will upgrade and post results here.

Posted by hullabuba
Found the solution!

It kind of work again (not full but like before)

On the Exchange Server with Service Pack1 remove Service Pack1 for . NET framework 3.0. This is just a add/remove programs and it works just as its "suppose" to do right after you've uninstalled that.

Edit: Hmm seems like the calendar and contacts works now? At least my calendar worked fine. Didn't bother to check if the contacts 493 worked...

[ This Message was edited by: hullabuba on 2008-01-07 13:29 ]

Posted by Jabes
Good investigation

I don't think our guys will want to remove this service pack. I wonder if it is a new setting within it?

How did you come to find out it was the .net framework 3.0 SP1

Best wishes
James


Posted by hullabuba
How did this come up?

In fact I had Exchange SP1 running for a few days, with none problems. After the SP1 for both .NET Framework 2.0 and .NET Framework 3.0 it collapsed.

So I thought that since .NET Framework 3.0 is not "that important" for the Exchange server, I could start with it, and as mentioned above it really solved the problems.

Not sure what this really doing, but we can run fine without it for now at least.

Posted by Jabes
Have checked and we do not have .net framework 3.0SP1 installed. We have 2.0SP1 installed, but this is a pre-req for Exchange 2007 SP1 apparently.

We do have .net framework 3.0 installed, just not SP1.

Best wishes
James


Posted by hullabuba
Weird.

Have the same here, and it works just as it suppose to do.
Maybe try to install the sp1 pack, and then remove it???


Posted by Jabes
I've now upgraded to the 038 firmware and it still doesn't work ;-(

Best wishes
James


Posted by hullabuba
Hmm.

Does your Windows Mobile 6.0 devices connect?

Posted by Jabes
Yes, all windows mobile devices work properly. We have hundreds of them.

The k850i (mine is the only one!) worked perfectly until SP1 was applied. I have checked and I still have the right policies applied to my account.

Best wishes
James


Posted by Jabes
I emailed sony ericsson support and they suggested removing the handset from the exchange server, and deleting it from the handset. I had already removed the partnership from the exchange server, so I deleted and re-created it on the handset...

...and what do you know? it worked!


Best wishes
James


Posted by hullabuba
Glad it worked.

One thing I've noticed about the calendar sync, is that it sync them all, but when the last one is done it replies with the error message...

Posted by Tervel
Maybe this is the wrong place to ask this question, but does anyone Here know whether SE is planning on adding the PIN feature for ActiveSync on their handsets that have ActiveSync push capability? My company is cleaning up the "exceptions" list in exchange and I'm about to loose my ability to check email with my phone

Posted by hullabuba
With the new Xperia it will be implemented. Don't think the K850i and simular will have it.

Posted by betahelix
HI
I also have a k850, and since we changed to excahnge 2007, my sync also stopped working.
I simply cant get my phone to sync, all it says is "sync interrupted".
I once saw my phone in mobile devices, and i deleted the phone (not wipe).
But no change.
Ill emailed our exchange admin, and he told me it should work.
He tried on Nokia phones, and no problem..

Any one have an idea?

It seems like it isnt in contact at all, since it dosnt show in "mobile devices" on the webinterface


Click to view updated thread with images


© Esato.com - From the Esato mobile phone discussion forum