PDA

View Full Version : ActiveSync 4.5 B2 - Get Device Certificates?

ADB100
08-02-2007, 11:05 AM
In the latest ActiveSync 4.5 Beta2 there is an option to get device Certificates (Tools, Advanced Tools, Get Device Certificates). In this menu is also Active Information Rights Management, however both of them are greyed out and cannot be selected. In the help there are details about what these are and how to use them, but they obviously don't work. I assume from the help the PC must be a member of an Active Directory network (mine is).
Does anyone know if these features are disabled due to this being a Beta release of ActiveSync or are there some changes that have to be made to AD to get them working? There is little information on Microsofts website.

Andy
ADB100
22-02-2007, 11:46 AM
A quick update on this and a request for some assistance from people running any version of WM6 on their Wizard please.

I have been informed that the 'Get Device Certificates' option only works with WM6 devices and NOT WM5. Since I haven't taken the plunge and installed any of the WM6 ROMs that are floating around can someone check whether this option is available when running ActiveSync 4.5 (final release NOT the Beta).
I think your PC will need to be on an AD Network with a CA installed - I can't verify if this is the case since the Help file and any information I can find on the web is pretty limited.
Can anyone running Vista check what options there are for Certificate Enrollment in the Mobile Device Centre?

Thanks

Andy
ADB100
24-02-2007, 04:42 PM
Anyone please?
ADB100
27-02-2007, 05:21 PM
For anyone who is interested the 'Get Device Certificates' does work when the attached device is running WM6...... You also need to be on an AD network with a CA installed in it since the certificates that are listed are all the templates that are installed in AD.

http://adbutterworth.users.btopenworld.com/images/getdevcert.jpg

I have sucessfully enrolled my Wizard running WM6 for the ClientAuth and User certificates. This is much more friendlier and flexible than the enrollment utility included with the device (though not really any easier).

Andy
SlamDance
06-02-2008, 08:40 PM
What is an AD? How about a CA? Thanks. I'm trying to use this tool because the wifi on my titan is really flakey and I'm hoping it won't be after I've installed the correct certificates.
ADB100
06-02-2008, 09:17 PM
What is an AD? How about a CA? Thanks. I'm trying to use this tool because the wifi on my titan is really flakey and I'm hoping it won't be after I've installed the correct certificates.

AD is M$'s Active Directory - As far as I know the 'Get Device Certificates' from ActiveSync only works in a M$ Active Directory environment with an AD-integrated Certificate Authority (CA) Server where the PC that is running ActiveSync is a member of an AD Domain. If you don't have AD & a CA then this won't work for you.
There are other Certificate Enrollment tools - HTC provide one with their devices, however most of these only Enroll against a M$ CA. I found this page a while ago:

http://www.jacco2.dds.nl/networking/pfximprt.html

This allows you to import certificates on WM5/6, I have never used it though as I have an AD environment.

HTH

Andy