Exchange and SSL Certificate Issue - Kindle Fire HDX 7" & 8.9" Q&A, Help & Troubleshoot

Hi There!
I have the new Kindle HDX 8.9 and I am trying to setup my exchange account on it.
I am using a secure connection and when I go into the security settings and tick the "accept all SSL certificates, and click save, it's not connecting, which I believe is because it's not actually saving the settings at all, and when I go back in, it's unticked.
Anyone got any ideas on how I can make this work ?
I can't use Non SSL at this point in time. I was hoping I could log into amazon and set up my account settings and send to device, but I don't see anywhere to do this.

Related

ActiveSync problem

I upgraded to the new a.30.07 and I can not do a wireless Activesync, I get "Synchronization failed. Try again, and if the condition persists, reset your device. Erroe code 0x80004005" I have done a hard reset and retried with out any apps installed and I still get this error message. Has anybody had this probelm and fixed it, or can someone point me in a direction?
TIA
Trub
Did it work before you did the upgrade, if so check your VPN connection settings.
FYI I've never been able to get it to work!
HTH
Qman said:
Did it work before you did the upgrade, if so check your VPN connection settings.
FYI I've never been able to get it to work!
HTH
Click to expand...
Click to collapse
Yeah I got it to work again. I did another hard reset and it started working again. It doesn't use a VPN connection, rather SSL and you have to tell your XDA to accept any SSL certificate, unless you can afford to buy a cert from Verisign.
Great! 8)
I'm interested in seeing your configuration / settings if you're will to post them. :wink:
Qman said:
Great! 8)
I'm interested in seeing your configuration / settings if you're will to post them. :wink:
Click to expand...
Click to collapse
I'm running Exchange 2003 on Windows 2003, by default under the user properities, all Mobile Services are enabled under the Exchange Features tab. Also, your Windows box has to be able to dish out SSL certificates so enable Certificate Services, create a certificate and install it into your default web site. Then you need to install a cab file on your XDA called AS_Cert_OFF.CAB, just Google it. Then in Activesync on the XDA, under options, server enter the server IP and your username, password and domain and then try to sync. Things are different if you are using MIS 2002 with Exchange 2000, as MIS can not reside on the same box as Exchange, and I've never gone down that road.
Here is some good information about troubleshooting the Always-Up-To-Date Notification feature of Exchange 2003.
http://support.microsoft.com/default.aspx?scid=kb;en-us;822176&Product=exch2003

[Q] How to remove lock/security code?

Settings -> lock+wallpaper.
There is no option to disable the password, but only to change password.
Does anyone know?
What I am asking is about "Set the keys and screen to lock automatically" mentioned here.
srikat said:
There is no option to disable the password, but only to change password.
Click to expand...
Click to collapse
That's weird.. My device offers the option to disable the password. Its right abov the "Change Password" button...
Attached a photo as I am not sure how to take screenshots.
That's weird. I can toggle this option. Have you tried changing the password and then to disable it? Maybe there is some kind of policy that prevents you from disabling your password, if you're connected to an exchange server...
You are right.
I googled "windows phone exchange server lock security code" and see many discussing this.
If you sync with Exchange, you are hit by a Exchange policy (if the admin of the Exchange server hasn't disabled it) that narrow this down to 30 sec-15min
Click to expand...
Click to collapse
I think this is a standard thing with phones connected to an exchange server.
For security you have to have a lock code enabled.
It's not just with the Lumia 800

[Q] Google Chrome on Nexus 7 - Logging in to Hardware Devices - FIXED

Hi. I've got a Nexus 7 with Google Chrome, when I try to login to any of the hardware on my network by inputting the local IP number I get '404 Access denied' with no option to input the necessary username & password. I'm assuming there must be some way of logging in to the likes of my router, can somebody tell me how I can login to such devices. TIA - Andy.
Edit: Bugger! It seems to work today. I think that the resource I was trying last night won't let you login over it's own WiFi connection, when I try via ethernet or over another WiFi connection I get an authentication panel. Must be a security restriction.

Email client not syncing over 3G, only works over wifi.

Hi,
I search over the forum but didn't find the answer to my question.
I'm the happy owner of a GS3 stock rom, not rooted, fresh out of the box.
It works verry well. I'm impressed by the device itself but I struggle with a problem.
My exchange account won't syncronize over 3G. Every few minutes, I get a message saying "unable to connect to [my account]"
gmail client works just fine but I have two email addresses (pro and home).
This is not a connectivity issue as other apps works great aover 3G and this is not a network limitation as I can connect thru other wifi networks.
I can do all necessary test and I had a look in all settings I can find without any succes until now.
I had 3 FW update since I own the device, each time I hope it will solve my probelm...
Thanks for your help.
Best regards from Belgium,
JC
Did you checked out if in Settings _Data Usage- not added to exceptions to sync only over WiFI ?
marbedMB said:
Did you checked out if in Settings _Data Usage- not added to exceptions to sync only over WiFI ?
Click to expand...
Click to collapse
Thanks for your answer.
I checked and I can find any exceptions (I can't find the options, to be clear). Under the Data Usage, I have mobile data and Wifi pages but I don't find any way to manage exceptions.
There is a similar issue with the hotmail app - SSL auth error on 3G - Fine on Wi-Fi
The way to resolve that issue is to uninstall the app - remove any accounts associated to it (the hotmail sync account removed authomatically) reboot the phone - then set everything back up BUT DO SO ON 3G and not Wi-Fi!!! For some strange reason this sorts out the issue and can then connect on both 3G and Wi-Fi.
This is obviously specific to the hotmail app - but as this is also email it may also resolve your issue - Worth a shot at least. .Good Luck
ohyesman said:
There is a similar issue with the hotmail app - SSL auth error on 3G - Fine on Wi-Fi
The way to resolve that issue is to uninstall the app - remove any accounts associated to it (the hotmail sync account removed authomatically) reboot the phone - then set everything back up BUT DO SO ON 3G and not Wi-Fi!!! For some strange reason this sorts out the issue and can then connect on both 3G and Wi-Fi.
This is obviously specific to the hotmail app - but as this is also email it may also resolve your issue - Worth a shot at least. .Good Luck
Click to expand...
Click to collapse
Thanks for the info.
How can I uninstall the stock email app? I will try to clear my account but not uninstall the app and see if it solves my problem. I will try it tonight when I will be back in my country and not in roamuing anymore.
Thanks
I don't use the stock app at all - I guess you can remove the associated accounts under settings/accounts then go to app manager and clear cache and data.
My issue was due to a self signing certificate or something - guess that a hidden setting somewhere changes when you accept but wasn't working correctly when setting up accounts over Wi-Fi.
Hope it works for you. You not the option to get a specific mail provide app from the playstore? - Could be another option
I will let you know
I'm quite happy with the stock mail app for now. If I can solve my problem by reseting my account over 3G, I will keep it.
JCfromBelgium said:
I will let you know
I'm quite happy with the stock mail app for now. If I can solve my problem by reseting my account over 3G, I will keep it.
Click to expand...
Click to collapse
Any resolution on this? My wife is having the same problem on a new exchange account she added to her One X
jschramm said:
Any resolution on this? My wife is having the same problem on a new exchange account she added to her One X
Click to expand...
Click to collapse
I resolved this issue by:
- deleting the Exchange Active Sync eMail Account I set up over WiFi (Email->Settings->Delete Account);
- created an EAS Account over 3G, selected "Accept every SSL Certificate" (Email->Settings->Add Account).
It seems that creating an EAS Account over WiFi prevents the same account to access the server over 3G/EDGE/... connection.
Tried on Sony Xperia Tablet Z SGP321, default mail app, with Android 4.2.2.
LP
Alen
Problem solved!
Hi,
I have also an Galaxy S5 Android and sinds we have Exchange 2010, it does not synchronize any more. If I put my phone on SAVE MODE, it doesn't work. If I DISABLE the SAVE MODE it works.
Go to Setting => Power saving => put Power saving mode OFF
good luck.
JCfromBelgium said:
Hi,
I search over the forum but didn't find the answer to my question.
I'm the happy owner of a GS3 stock rom, not rooted, fresh out of the box.
It works verry well. I'm impressed by the device itself but I struggle with a problem.
My exchange account won't syncronize over 3G. Every few minutes, I get a message saying "unable to connect to [my account]"
gmail client works just fine but I have two email addresses (pro and home).
This is not a connectivity issue as other apps works great aover 3G and this is not a network limitation as I can connect thru other wifi networks.
I can do all necessary test and I had a look in all settings I can find without any succes until now.
I had 3 FW update since I own the device, each time I hope it will solve my probelm...
Thanks for your help.
Best regards from Belgium,
JC
Click to expand...
Click to collapse

No 'Use System Certificates' in wifi settings

Hi,
I am connecting to my university's wifi and I am unable to use their settings. From their settings, I am to choose PEAP for EAP Method. MSCHAPV2 for phase 2 authentication and Use System Certificates for CA Certificate however my phone only gives me the options of Select Certificate and Do Not Authenticate.
Is there something I haven't installed or am I missing something.
Thanks
Did you solve this? I'm having the same
No, still haven't figured it out. Been working by using do not authenticate.
I'm monitoring this thread daily - I have to settle for a "guest" connection at my work (College) until a system cert. option becomes available - it is tremendous pain logging in all the time etc... I'm surprised this issue isn't more prevalent. This seems to be the only thread with this issue raised.
I am having the exact same issue with my university wifi login
I've also been having this exact issue trying to login to my Universities wifi really stressing me out. Hopefully a solution is found soon
Problem solved
Hi there,
I encountered exactly the same problem on my S9 and have solved it now. The problem is the system certification is not installed on our devices. The solution is quite simple. Just download and install the App "eduroam CAT", and then it will automatically search for the eduroam of your university. After inputting your user name and password, it will automatically download the required certification and directly connect to the eduroam network. Hope this helps.
doubledou said:
Hi there,
I encountered exactly the same problem on my S9 and have solved it now. The problem is the system certification is not installed on our devices. The solution is quite simple. Just download and install the App "eduroam CAT", and then it will automatically search for the eduroam of your university. After inputting your user name and password, it will automatically download the required certification and directly connect to the eduroam network. Hope this helps.
Click to expand...
Click to collapse
unfortunately i've tried that and its still not working. Glad to hear your wifi is working however
doubledou said:
Hi there,
I encountered exactly the same problem on my S9 and have solved it now. The problem is the system certification is not installed on our devices. The solution is quite simple. Just download and install the App "eduroam CAT", and then it will automatically search for the eduroam of your university. After inputting your user name and password, it will automatically download the required certification and directly connect to the eduroam network. Hope this helps.
Click to expand...
Click to collapse
Thanks! Worked for me on Galaxy A7 2017 on Android 8 (where the option "use system certificates" doesn't exist) when connecting to Eduroam on the University of São Paulo.
ssadtru said:
Hi,
I am connecting to my university's wifi and I am unable to use their settings. From their settings, I am to choose PEAP for EAP Method. MSCHAPV2 for phase 2 authentication and Use System Certificates for CA Certificate however my phone only gives me the options of Select Certificate and Do Not Authenticate.
Is there something I haven't installed or am I missing something.
Thanks
Click to expand...
Click to collapse
Can the IT department for the school provide you with a downloadable certificate file so you can choose that?
This is something they should be able to do (provided they know how)
I have an S9 and the same problem. I solved it as follows:
Since my university doesn't say where to download the CA certificate, I went to my Windows 10 laptop that was logged in to the WiFi of the uni because I think it gets downloaded when I connect with Windows (or maybe Windows asked me to confirm the certificate?).
I exported (using binary format) the CA certificate - "thawte" was the issuer
I emailed it to myself, and from my email on my phone, saved the attached certificate to Android's file system.
I imported/installed the certificate in the Android 8 system.
Finally, I chose it (it appeared in "CA Certificate" drop-down menu) when signing in to WiFi
My theory is that often University IT departments outsource WiFi to third-party companies whose main goal is to make them easy to use on Windows/MacOS. Since many people don't have the latest Android (8), they don't understand what is going on.
Ideally, the IT folks should tell you where to download the certificate (so you won't have to export it from another PC), as in the explanation given at the University of Illinois (Google the text "How to manually set up IllinoisNet on the Android OS" since XDA won't let me post links).
how were you able to find out which certificate was tied to your uni's wifi? i finally got all of the other steps down, but finding out which one is relevant is still hard for me to do.
My university advertises cat.eduroam.org as solution for no certificates. Haven't tried it myself, as I didn't need it, but worth a shot.
After upgrading to Oreo on my S7, I was having the same problem for both my Uni's wifi and with eduroam. I solved it in a similar way as TheFuhrmanator. Make sure you've connected to Uni's wifi on your Windows 10 laptop at least 1 time to make sure the connection works.
Go to the Windows 10 Certificate manager (Start -> type 'certificate' -> Manage Computer Certificates)
Expand the folder Trusted Root Certification Authorities -> Certificates
Right click USERTrust RSA Certification Authority (and maybe AddTrust External CA Root) and export them to DER Encoded Binary format. I found the exact ones to export from https://it.umn.edu/wifi-windows-10-setup-guide
Copy the exported files to phone
On phone, go to Lock Screen and Security -> Other Security Settings -> Install certificates from storage (select the option to use the certificate for WiFi)
Connect to eduroam and select USERTrust RSA Certification Authority or whatever you named it
Process that we have worked out for certificate installation and connection
This isn't eduroam-specific, but our organization created this documentation, at wifi.lihc.on.ca with the installation process. We created a PEM-encoded ".cer" for our particular certificate chain, including the root and the two other required chained certificates.
The process is relatively painless, all things considered, but still an unnecessary step where the device already has the certificate installed.
I don't have "USERTrust RSA Certification Authority" only "AddTrust External CA Root"
Hello there
Just in case anyone still has this problem. I figured it out for my specific case with both the CAMPUS and EDUROAM networks at my university. The wifi network configuration required me to select for both cases:
EAP method: PEAP
Phase 2 Authentication method: MSCHAPV2
CA certificate: Greyed out and set to "Use system certificates"
Online certificate status, Choose : DO NOT VALIDATE
Even after I typed the username and password, the connect button would be disabled and I was always requested to provide a domain address, otherwise I would not be able to connect. So I downloaded the CA certificate configuration provided at https://cat.eduroam.org/# for my school in Canada. The file you download does not do anything in android so "double-click" gives no joy . Now, my aha! moment came when I opened the file on a texteditor, somewhere around all the encrypted gibberish you will see something that says:
</CA><ServerID>xxxx.yyyy.zzz</ServerID>
I suppose that would be the certificate authority address for my school. So, I added this address in the domain address and voilá! Connect button enabled and connection working all good for both cases. I hope this gets helps whomever now. Important to mention, I found this post looking for the problem but now I have a Google Pixel 5, but I'm sure the solution will work with any android phone.
----EDIT----
I just realized something else. I noticed someone said they will just keep using the GUEST network at their school even if it meant logging in everyday which is pretty stupid and annoying at this point in time. IN MY CASE, when tried the GUEST school network as a likewise temporary solution, I would be redirected to the school's wifi portal for authentication. It turns out, this portal has the same address as the CA authority (https://xxxx.yyyy.zzz/WHATEVER?STUFF......).
My point being, if your case does not involve EDUROAM of any form to allow you to get a config file and see the CA authority address, well, it stands to reason that it is the same server for both CAMPUS and GUEST networks used for authentication. At least is worth the try this address if you are out of options.
Cheers!
Flogisto said:
Hello there
Just in case anyone still has this problem. I figured it out for my specific case with both the CAMPUS and EDUROAM networks at my university. The wifi network configuration required me to select for both cases:
EAP method: PEAP
Phase 2 Authentication method: MSCHAPV2
CA certificate: Greyed out and set to "Use system certificates"
Online certificate status, Choose : DO NOT VALIDATE
Even after I typed the username and password, the connect button would be disabled and I was always requested to provide a domain address, otherwise I would not be able to connect. So I downloaded the CA certificate configuration provided at https://cat.eduroam.org/# for my school in Canada. The file you download does not do anything in android so "double-click" gives no joy . Now, my aha! moment came when I opened the file on a texteditor, somewhere around all the encrypted gibberish you will see something that says:
</CA><ServerID>xxxx.yyyy.zzz</ServerID>
I suppose that would be the certificate authority address for my school. So, I added this address in the domain address and voilá! Connect button enabled and connection working all good for both cases. I hope this gets helps whomever now. Important to mention, I found this post looking for the problem but now I have a Google Pixel 5, but I'm sure the solution will work with any android phone.
----EDIT----
I just realized something else. I noticed someone said they will just keep using the GUEST network at their school even if it meant logging in everyday which is pretty stupid and annoying at this point in time. IN MY CASE, when tried the GUEST school network as a likewise temporary solution, I would be redirected to the school's wifi portal for authentication. It turns out, this portal has the same address as the CA authority (https://xxxx.yyyy.zzz/WHATEVER?STUFF......).
My point being, if your case does not involve EDUROAM of any form to allow you to get a config file and see the CA authority address, well, it stands to reason that it is the same server for both CAMPUS and GUEST networks used for authentication. At least is worth the try this address if you are out of options.
Cheers!
Click to expand...
Click to collapse
I'm working to resolve this for my university. What CA file are you referring to, here? The certificate does not contain a ServerID tag, and our university does not issue certificates from this eduroam page.

Categories

Resources