1. Check out our app, Forums for Android! Download and leave feedback here!

MS Exchange Certificates

Discussion in 'Android Devices' started by phantom27, Nov 7, 2009.

  1. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    I don't have a droid... yet...

    I must know if it will work with my work MS Exchange Server. Our IT guy forces us to install a certificate (.cer) to access the server (web server). Will .cer files install on the droid?

    I must know this BEFORE purchasing it. Thanks.
     

    Advertisement

  2. witzfl

    witzfl Member
    5

    Nov 5, 2009
    7
    0
    5
    I have also had to download two certificates, they downloaded, where they went I do not know and cannot find on phone, they are suppose to get autoloaded into the root.

    I can get my calendar from the office exchange but that is it, contacts and email do not come through. This phone does not have security sign in except for the swipe code thingy, and this must not be good enough for the work security.

    Threads are around on this. I think - - HOPE - - it will be a fix for google real soon, if not in 30 days, the phone goes back.

    This will be the 'Droid Destroyer'
     
  3. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    I don't use the PIN security in exchange (at least I never have). All our OWA server requires is a password (entered at setup) and an installed certificate. Will this work?
     
  4. witzfl

    witzfl Member
    5

    Nov 5, 2009
    7
    0
    5
    Yes we have to have pin security and remote wipe, and it seems that is where most of the issue comes in, I read here where it has worked for a lot of people, which must the less secured setup, without a problem.

    i am hoping it gets an upgrade for this fast or i will have a Droid for sale.

    Otherwise I like phone and this is a great site, still having problems trying to get my contacts and phone book from ny V9 to this phone.
     
  5. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    So, no one has answered my question. Can you install a certificate with the .cer extension?
     
  6. mooshu47

    mooshu47 Active Member
    15

    Nov 7, 2009
    28
    0
    15
    I was attempting to install a certificate yesterday and the droid wanted a .p12 file, not a .cer file. I'm not an expert on x509 stuff but I believe the certs can be exported in .p12 format. I'll know for sure when I get back to work on Monday.
     
  7. Toasterhead

    Toasterhead New Member
    5

    Nov 8, 2009
    1
    0
    5
    Yes please! I downloaded the certificate and installed an app called Linda file manager. I found the certificate on my phone, but I cannot figure out how to install the damn thing.
     
  8. spamwax

    spamwax Member
    15

    Nov 6, 2009
    17
    0
    15
    I am having issues with installing .p12 certificates for my work's wireless network. I put it on the root of SD card and then used the option "Install from SD card", it shows the .p12 file and even asks me to provide the password for the certificate in order to install it. But that's it, no matter how many times I tried the certificate file with different passwords and even with no password, it kept popping up the "Enter the password" dialog box :(
     
  9. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    My cert doesn't ask for a password when I install it on a WM phone. Are you saying that it will ask in Android?
     
  10. Jacqueline

    Jacqueline Well-Known Member
    36

    Sep 7, 2009
    393
    6
    36
    Florida
    The nice thing about having an open system is we have options. :D If your setup doesn't work with the built-in mail, Touchdown provides certificate support. I believe they have a free trial so you can verify it works with your certs. I saw mention of .cer but not .p12.
    This .pdf shows how to configure it. Look for the Setting the Client Certificate section on page 21.
    http://www.nitrodesk.com/tddownloads/tdstartup.pdf

    Also, here's a quick list of features supported.
    NitroDesk Inc. - TouchDown features
     
  11. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    Thank you, I have heard about Touch Down. Here is the problem that I have discovered from my research. I use Exchange for ALL my contacts and all my phone numbers. I have about 500 contacts and the only way to manage them is by using exchange. So If I can't get exchange to sync with a DROID then it's a deal breaker. (I guess I could convert everything to my gmail but I still need to get my exchange email - requiring a .cer file.)
     
  12. spamwax

    spamwax Member
    15

    Nov 6, 2009
    17
    0
    15
    If your personal certificates are password protected, you will need to provide it whenever you want to use them on a different machine/system. It's not android-only behavior. My point was that even providing the password, Droid had problems installing it.
     
  13. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    I think I understand (*Scratches head). You are saying that my .cer file without a password should work fine. Right?
     
  14. spamwax

    spamwax Member
    15

    Nov 6, 2009
    17
    0
    15
    I haven't seen any option for .cer files yet, the one I tried just shows files with .p12 extensions. Maybe you'll need to export your certificates using that format and give it a try.
     
  15. phantom27

    phantom27 Active Member
    Thread Starter
    16

    Nov 7, 2009
    35
    1
    16
    I don't know that much about certificates. How do I convert a .cer to .p12? Is that something I can do?

    PS - I hope I can figure it out since I ordered my Droid today!!!!
     
  16. iceweezl

    iceweezl New Member
    5

    Nov 10, 2009
    1
    0
    5
    P12 includes a private key in addition to the public key in the certificate. P7/PEM (.CER) includes the public key as part of the certificate - but not necessarily a private key.

    If your organization uses a P7/PEM type certificate and a private key, then you will also have a .KEY file in addition to the .CER file. You can use those two files to convert to a P12 certificate.

    If your organization does not use a private key, then you are somewhat limited.
     
  17. NewDroid

    NewDroid New Member
    5

    Nov 11, 2009
    1
    0
    5
    I was also using a couple of .cer certificates to access Exchange with my Treo. I bought the Droid, but so far only the calendar syncs (and to a separate default app called Corporate Calendar).

    I went through the SD card, but to answer your question directly, NO, the Droid does NOT want to accept .cer cetificates. It is specifically looking for a .p12. Not sure if there is something that needs to be configured on the Exchange Server side to correspond with a .p12 (which would then have to be supplied by the IT organization), or if there is a way to just apply your own private key to create the .p12.
     
  18. Appendix

    Appendix New Member
    5

    Nov 16, 2009
    1
    0
    5

    I got this reply from support:

    Dear HTC customer,

    Thank you for contacting our Customer Support Center. We are dedicated to providing you with the best quality service and answering all of your questions and concerns.

    Currently it is not possible to install certificates on the Hero, we have forwraded this question to our main office but are still awaiting a reply whether this will get included in a future update or not.

    :(
     
  19. peterdeg

    peterdeg New Member
    5

    May 4, 2010
    2
    0
    5
    IT Security
    Sydney, Australia
    <BUMP>
    I'm having this exact problem. Can't find a solution anywhere.
    Any ideas?
     
  20. tman065

    tman065 Active Member
    35

    Nov 16, 2009
    35
    0
    35
    Badged Thug
    Touchdown works with certificates. It has a 30 day free trial.

    I have nearly 300 contacts that Touchdown manages for me, plus I get email, calendar and tasks. I enter contacts into Touchdown, and they are automatically added to my Gmail and to my phone itself. Slick.

    The only problem with Touchdown is with recurring events and recurring tasks. These can be viewed, but not edited on my phone. If I make changes to either, the event / task changes to a one-time deal.

    Other than that, I have no problems with my corporate stuff.
     
  21. tfleming23

    tfleming23 Well-Known Member
    36

    Nov 8, 2009
    201
    9
    36
    I had this issue initially. What I did to get around it was to go to the owa site in the browser. When I went to log in it gave me a choice to accept the certificate, once I did it worked instantly.

    Touchdown works very well also. My company recently switched me to Good, which is ok.
     
  22. Corinna

    Corinna New Member
    5

    Oct 15, 2010
    1
    0
    5
    RealmB's Android Certificate Installer was the only thing that worked for me:

    1. Go to RealmB from your computer: RealmB's Android Certificate Installer
    2. Upload your certificate
    3. RealmB creates a link for you. Open it in your mobile browser
    4. Download the certificate.
    Done. Be a happy camper after all the unnecessary search you've gone through for something that should be built into the solution of any phone today :p
     

    Attached Files:

  23. mswhite60

    mswhite60 Well-Known Member
    36

    Nov 13, 2009
    127
    4
    36
    I use Touchdown, and manage a 2000 user contact list synced to my phone via TD. Works beautifully.
     

Share This Page

Loading...