Wednesday, October 25, 2006

So I finally got around to setting up my SBS 2003 server up for Mobile. I installed Exchange 2003 Service Pack 2 (Without the need for a reboot I might add) which went quite smoothly and added some extra functionality to my Mobile Settings in System Manager.

This service pack seems to give you a lot more features for OTA programming, very nice.

So I decided to plug in my trusty Motorola Q (In all truths, this is my Q 2.0, my first one took a bump or 2 too many and had to be recycled at the local Verizon store; boy do I hate dealing with them...). First thing is first, I tried to install the root certificate for SSL from my domain to my Q. Nope! Continued to receive the error "Security permission was insufficient to update your device"... Argh.....

So after some research and not much from help from Verizon's Data Support team (What a joke!), this is what I came up with. Note, this also works if your server's SSL root server is GoDaddy. Download GoDaddy's Root Certificate.

Steps to Add a Root Certificate to a Motorola Q (or other Windows Mobile 5 Device) - Please note MODIFYING YOUR REGISTRY CAN BE HARMFUL TO YOUR DEVICES' HEALTH

  1. Download and install Windows Mobile Registry Editor, I tried several, the shining star by far is Resco Explorer, the registry module is included with the trial download.
  2. Start "Resco Registry"
  3. Navigate to HKLM\Security\Policies\Policies
  4. Change these 3 registry keys:
    00001001 - change value from 2 to 1
    00001005 - change value from 16 to 40
    000010017 - change value from 128 to 144
  5. Close Registry Editor

Now you can install you .CER certificate file, and SSL to your Exchange Server will work as needed.