MS Exchange Certificates

[phantom27]

I don't have a droid... yet...

I must know if it will work with my work MS Exchange Server. Our IT guy forces us to install a certificate (.cer) to access the server (web server). Will .cer files install on the droid?

I must know this BEFORE purchasing it. Thanks.

 

[witzfl]

I have also had to download two certificates, they downloaded, where they went I do not know and cannot find on phone, they are suppose to get autoloaded into the root.

I can get my calendar from the office exchange but that is it, contacts and email do not come through. This phone does not have security sign in except for the swipe code thingy, and this must not be good enough for the work security.

Threads are around on this. I think - - HOPE - - it will be a fix for google real soon, if not in 30 days, the phone goes back.

This will be the 'Droid Destroyer'

 

[phantom27]

I don't use the PIN security in exchange (at least I never have). All our OWA server requires is a password (entered at setup) and an installed certificate. Will this work?

 

[witzfl]

Yes we have to have pin security and remote wipe, and it seems that is where most of the issue comes in, I read here where it has worked for a lot of people, which must the less secured setup, without a problem.

i am hoping it gets an upgrade for this fast or i will have a Droid for sale.

Otherwise I like phone and this is a great site, still having problems trying to get my contacts and phone book from ny V9 to this phone.

 

[phantom27]

So, no one has answered my question. Can you install a certificate with the .cer extension?

 

[mooshu47]

I was attempting to install a certificate yesterday and the droid wanted a .p12 file, not a .cer file. I'm not an expert on x509 stuff but I believe the certs can be exported in .p12 format. I'll know for sure when I get back to work on Monday.

 

[Toasterhead]

Yes please! I downloaded the certificate and installed an app called Linda file manager. I found the certificate on my phone, but I cannot figure out how to install the damn thing.

 

[spamwax]

I am having issues with installing .p12 certificates for my work's wireless network. I put it on the root of SD card and then used the option "Install from SD card", it shows the .p12 file and even asks me to provide the password for the certificate in order to install it. But that's it, no matter how many times I tried the certificate file with different passwords and even with no password, it kept popping up the "Enter the password" dialog box

 

[phantom27]

My cert doesn't ask for a password when I install it on a WM phone. Are you saying that it will ask in Android?

 

[Jacqueline]

The nice thing about having an open system is we have options. If your setup doesn't work with the built-in mail, Touchdown provides certificate support. I believe they have a free trial so you can verify it works with your certs. I saw mention of .cer but not .p12.
This .pdf shows how to configure it. Look for the Setting the Client Certificate section on page 21.
http://www.nitrodesk.com/tddownloads/tdstartup.pdf

Also, here's a quick list of features supported.
NitroDesk Inc. - TouchDown features

 

[phantom27]

The nice thing about having an open system is we have options. If your setup doesn't work with the built-in mail, Touchdown provides certificate support. I believe they have a free trial so you can verify it works with your certs. I saw mention of .cer but not .p12.
This .pdf shows how to configure it. Look for the Setting the Client Certificate section on page 21.
http://www.nitrodesk.com/tddownloads/tdstartup.pdf

Also, here's a quick list of features supported.
NitroDesk Inc. - TouchDown features

Thank you, I have heard about Touch Down. Here is the problem that I have discovered from my research. I use Exchange for ALL my contacts and all my phone numbers. I have about 500 contacts and the only way to manage them is by using exchange. So If I can't get exchange to sync with a DROID then it's a deal breaker. (I guess I could convert everything to my gmail but I still need to get my exchange email - requiring a .cer file.)

 

[spamwax]

My cert doesn't ask for a password when I install it on a WM phone. Are you saying that it will ask in Android?

If your personal certificates are password protected, you will need to provide it whenever you want to use them on a different machine/system. It's not android-only behavior. My point was that even providing the password, Droid had problems installing it.

 

[phantom27]

I think I understand (*Scratches head). You are saying that my .cer file without a password should work fine. Right?

 

[spamwax]

I think I understand (*Scratches head). You are saying that my .cer file without a password should work fine. Right?

I haven't seen any option for .cer files yet, the one I tried just shows files with .p12 extensions. Maybe you'll need to export your certificates using that format and give it a try.

 

[phantom27]

I don't know that much about certificates. How do I convert a .cer to .p12? Is that something I can do?

PS - I hope I can figure it out since I ordered my Droid today!!!!

 

[iceweezl]

P12 includes a private key in addition to the public key in the certificate. P7/PEM (.CER) includes the public key as part of the certificate - but not necessarily a private key.

If your organization uses a P7/PEM type certificate and a private key, then you will also have a .KEY file in addition to the .CER file. You can use those two files to convert to a P12 certificate.

If your organization does not use a private key, then you are somewhat limited.

 

[NewDroid]

I was also using a couple of .cer certificates to access Exchange with my Treo. I bought the Droid, but so far only the calendar syncs (and to a separate default app called Corporate Calendar).

I went through the SD card, but to answer your question directly, NO, the Droid does NOT want to accept .cer cetificates. It is specifically looking for a .p12. Not sure if there is something that needs to be configured on the Exchange Server side to correspond with a .p12 (which would then have to be supplied by the IT organization), or if there is a way to just apply your own private key to create the .p12.

 

[Appendix]

I don't have a droid... yet...

I must know if it will work with my work MS Exchange Server. Our IT guy forces us to install a certificate (.cer) to access the server (web server). Will .cer files install on the droid?

I must know this BEFORE purchasing it. Thanks.

I got this reply from support:

Dear HTC customer,

Thank you for contacting our Customer Support Center. We are dedicated to providing you with the best quality service and answering all of your questions and concerns.

Currently it is not possible to install certificates on the Hero, we have forwraded this question to our main office but are still awaiting a reply whether this will get included in a future update or not.

 

[peterdeg]

I am having issues with installing .p12 certificates for my work's wireless network. I put it on the root of SD card and then used the option "Install from SD card", it shows the .p12 file and even asks me to provide the password for the certificate in order to install it. But that's it, no matter how many times I tried the certificate file with different passwords and even with no password, it kept popping up the "Enter the password" dialog box

<BUMP>
I'm having this exact problem. Can't find a solution anywhere.
Any ideas?

 

[tman065]

Touchdown works with certificates. It has a 30 day free trial.

I have nearly 300 contacts that Touchdown manages for me, plus I get email, calendar and tasks. I enter contacts into Touchdown, and they are automatically added to my Gmail and to my phone itself. Slick.

The only problem with Touchdown is with recurring events and recurring tasks. These can be viewed, but not edited on my phone. If I make changes to either, the event / task changes to a one-time deal.

Other than that, I have no problems with my corporate stuff.

 

[tfleming23]

I had this issue initially. What I did to get around it was to go to the owa site in the browser. When I went to log in it gave me a choice to accept the certificate, once I did it worked instantly.

Touchdown works very well also. My company recently switched me to Good, which is ok.

 

[lobug]

Its all About...: Adding .cer certificates on your Android Phone
Shows how to actually achieve this. Worked fine for me. Try it out.
Its all About...: Adding .cer certificates on your Android Phone

 

[Corinna]

RealmB's Android Certificate Installer was the only thing that worked for me:

1. Go to RealmB from your computer: RealmB's Android Certificate Installer
2. Upload your certificate
3. RealmB creates a link for you. Open it in your mobile browser
4. Download the certificate.
Done. Be a happy camper after all the unnecessary search you've gone through for something that should be built into the solution of any phone today

 

[mswhite60]

Thank you, I have heard about Touch Down. Here is the problem that I have discovered from my research. I use Exchange for ALL my contacts and all my phone numbers. I have about 500 contacts and the only way to manage them is by using exchange. So If I can't get exchange to sync with a DROID then it's a deal breaker. (I guess I could convert everything to my gmail but I still need to get my exchange email - requiring a .cer file.)

I use Touchdown, and manage a 2000 user contact list synced to my phone via TD. Works beautifully.