Question : active sync error with new certificate

I have Exchange server 2003 with Windows Mobile 5.0.  The activesync worked fine.  My SSL certificate expired, so I renewed it, and then had to install the new certificate.  The new cert works fine ( see mail.ivyventures.com ).  But now the new phones give an error on sync.  The error is related to the SSL cert, and when I specifiy to sync without SSL, Activsync works.  I thought perhaps I need to erase the Activsync account settings and remake them, but I can not change the username or domain name, or erase the server source all together.

1) how do I fix the sync, OR 2) how do I rename the accouint settings in activesync (I do not want to reset the phone because users have many applications installed.)

Answer : active sync error with new certificate

The GoDaddy certificates are native to most Windows Mobile 5 with MSFP and Mobile 6 devices. Motorola devices don't seem to have the certificates for them for some reason.

The most common reason for the failure with these certificates is the root certificates not correct on the server. GoDaddy changed their roots slightly.
The thing I have found is that it can appear to work in Internet Explorer on a desktop, but not in the device. I have screenshots of correct and incorrect root certificates on my web site here: http://www.amset.info/ssl/wmerror.asp

The devices don't expect the old certificate for any reason - they check the certificate each time.

Before you start looking at importing the certificate on to each device ensure the server is correct.

Simon.

--
Once your question has been answered, please remember to accept an answer and close the question.