Home / server / Questions / 241234
Accepted
Yannone
Asked: 2011-03-01 09:05:50 +0800 CST

Exchange ActiveSync is not working with Android's 'verify certificate' setting, what do I need to do to make them work together?

  • 772

All other methods of Activesync and web access to my Exchange server are working fine with no errors or issues, but when we attempt to configure Android phones for the server, it will only work with 'verify certificate' checked off.

Ideally, I'd like my users to be able to use the default configuration, which includes the 'Verify Certificate' option.

My primary question is: 'What does Verify Certificate do?', as I imagine if I knew that, I might have some idea why it isn't working.

ssl exchange-2010 activesync ssl-certificate android

2 Answers

  1. Verify Certificate will require all certificates in the chain to be valid--trusted, within the date range, etc. It might be your OWA certificate, or an intermediate one neither present on the server nor device--see http://support.microsoft.com/kb/927465

    • 1
  2. Best Answer

    Some versions of Android do not trust certificates from some of the GeoTrust CA's.

    https://code.google.com/p/android/issues/detail?id=10807

    https://code.google.com/p/android/issues/detail?id=10985

    • 1