Reply
Contributor
Pre p100eww (Sprint)
mikesm
Posts: 15
Registered: 06-06-2009
0
Accepted Solution

Pre complains about SSL certifcate on exchange server

Hi.  I just got a Pre and am trying to set it up to talk to an exchnage server.  The Pre complains and won't set up the connection with this error message: "'SSL certificate error. Is the date and time correct?".  The date and time are correct, but the server is running a self signed certifcate.  This does not cause any problems with the iPhones that a bunch of people here use. 

 

How do I fix this?  There doesn't appear to be any settings to adjust this behavior.


Post relates to: Pre p100eww (Sprint)

Moderator
Pre Plus p100una (AT&T)
Tribbles
Posts: 389
Registered: 06-06-2005
0

Re: Pre complains about SSL certifcate on exchange server

You can see your ROM version in Device Info - under Phone | VERSION. 

 

Have you updated the phone yet to 1.0.2? Give it a try if your phone is on 1.0.1 still.

 

Go to the Updates application and hit the button to check for updates.

Regular Contributor
Pre p100eww (Sprint)
wizll
Posts: 58
Registered: 01-15-2007
0

Re: Pre complains about SSL certifcate on exchange server

my connection to exchanged worked in webOS 1.0.1. upgrading to webOS 1.0.2 now. hope everything remains ok for me.

 

Contributor
Pre p100eww (Sprint)
mikesm
Posts: 15
Registered: 06-06-2009
0

Re: Pre complains about SSL certifcate on exchange server

It's running 1.0.2.  It looks like I am going to have to use the certificate manager to import the cert.  Ugh.

 

Why can't this be supported with just a warning dialog like the iPhone does?

Moderator
HP TouchPad (WiFi)
Ridius
Posts: 1,167
Registered: 03-21-2007
0

Re: Pre complains about SSL certifcate on exchange server

[ Edited ]

Hi mikesm,

 

If it's a self-signed certificate, than you'll have to add the root to the phone using the Certificate Manager. I know you said earlier that it was self signed, but I'd double-check just to be sure. This is because the error you mentioned usually doesn't point to a self-signed certificate. Also, as a workaround, you can try setting the date manually rather than having the phone pull the time and timezone from the network:

  1. Choose Date & Time from the Launcher
  2. Tap the toggle button off for Network Time and set it manually
  3. Tap the toggle button off for the Network Time Zone and set it manually
  4. Close the card
Try that and see if the certificate error goes away.
Message Edited by Ridius on 06-06-2009 11:10 AM
Ridius

Please do not send me direct messages unless I ask you to. Random Direct Messages asking for support will be ignored. Please post your question/help request in an existing forum thread or create a new one so that everyone can benefit.

If you like IRC, feel free to drop by #webOShelp on Freenode. I hang out in there quite a bit.
Contributor
Pre p100eww (Sprint)
mikesm
Posts: 15
Registered: 06-06-2009
0

Re: Pre complains about SSL certifcate on exchange server

I found a guide on precentral that shows what's needed to load the certificate.  I'll try that and see if it functions.

 

Others are complaining about the issue that it appears the exchange connector on the Pre doesn't support an EAS PIN.  Is that true?  Is there a workaround for it?  My company doesn't use that, but it's pretty commonly found.

 

 

Moderator
HP TouchPad (WiFi)
Ridius
Posts: 1,167
Registered: 03-21-2007
0

Re: Pre complains about SSL certifcate on exchange server

I honestly don't know. I'll have to research that. I know that the Pre does have a lock feature where you have to enter a PIN to unlock and use the phone, but I don't know if EAS ties into that or not.
Ridius

Please do not send me direct messages unless I ask you to. Random Direct Messages asking for support will be ignored. Please post your question/help request in an existing forum thread or create a new one so that everyone can benefit.

If you like IRC, feel free to drop by #webOShelp on Freenode. I hang out in there quite a bit.
Newbie
Pre p100eww (Sprint)
Dracostian
Posts: 6
Registered: 06-06-2009
0

Re: Pre complains about SSL certifcate on exchange server

Just to clarify for those who don't know, this is default behavior on most phones.  You'll often see self-signed certificates in smaller organizations that don't want to pay the marginal fee for a trusted certificate.    I've seen this occur on a Blackjack, HTC Touch Pro, Blackberry 8830, and quite a few other phones. 

 

If you are connecting your phone to an Exchange server and don't want to go through the steps to do this, your IT support (if it exists) should be able to help you do it.  

 

uds
Regular Visitor
Pre p100eww (Sprint)
uds
Posts: 8
Registered: 06-06-2009
0

Re: Pre complains about SSL certifcate on exchange server

I am having this same problem. Our company exchange server is using a self-signed certificate. I hope we get help from Palm on this one.
uds
Regular Visitor
Pre p100eww (Sprint)
uds
Posts: 8
Registered: 06-06-2009

Re: Pre complains about SSL certifcate on exchange server

After good research, and patience, I was able to successfully connect to our work exchange server.

 

  1. Update your Palm Pre from Version1.01 to 1.02.
    1. To find your version information, click on the launcher button, and select the Device Info button.
    2. To update your palm pre, click on the updates button to update to the latest version.
  2. After you phone has successfully updated, it is critical that you install the root certificate of your exchange server to avoid any problem.
    1. Contact your IT Dept, on how to retrieve the root certificate.
    2. You can simply also navigate to your OWA email site and download the website certificate to you computer.
  3. Use the USB cable to connect the phone to your computer.
    1. Copy the downloaded exchange ssl certificate and place it in the downloads folder of Palm Pre.
    2. Disconnect the USB cable
  4. Install the certificate on your phone
    1. click on the launcher button, and select the Device Info button.Scroll to the bottom of the screen. Click the More Info button.Tap the Preferences tab on the top of the screen. Select the Certificate Manager. Install the security certificate.
  5. Connect to Exchange with your proper login authentication.
  6. That's It.

I did all these earlier without upgrading my phone to no avail,however once I upgraded to version 1.02, I was able to easily connect to Exchange even though our server uses a self signed security certificate.

 

I hope this information is useful to some folks. Good Luck!