Requirement of certificate KeyUsage for ActiveSync

I have a RT Surface and a Nokia Lumia 920 (Windows Phone 8).

The Mail app works fine on my Nokia Lumia 920, I installed the enterprise root cert and also my file PKCS #12 (P12) personal, and the phone now syncs with our company very well Exchange Server.

I installed the same root certificate and also the same file PKCS #12 on my RT Surface, however, the Mail app refused to work on the Surface RT.  I also tried touchdown (3rd party ActiveSync email app) and it didn't work either.  With the built-in Mail app, it allows me to configure settings (email address, password, domain, user name, server) and enterprise messaging configuration appears on the mail app.  But it gives me an error message "unable to synchronize.

The touchdown, after setting up my user information, I see on the paper of a "Forbidden" error code.

I'm solving this problem with my IT admins and one thing that comes to mind is the X.509v3 certificate KeyUsage extension in my PKCS #12 file.  I'll check everything what are they keyUsage flags that I need to enable so that it can be used to authenticate to the exchange server for ActiveSync.

Thank you.

Hello

 
The question you posted would be better suited in the TechNet Forums. I would recommend posting your query in the TechNet Forums.
 
Hope this information helps.

Tags: Windows

Similar Questions

  • Required: a portable charger for an iPhone 4 that can be used in Germany and the United States

    Required: a portable charger for an iPhone 4 that can be used in Germany and the United States

    Does anyone have recommendations?

    The original charger is International, all you need is a converter of pin code.

  • Error - "Launcher requires the write permission for World of Warcraft key to locate and launch the game successfully. Please turn on write access to the registry key with the help of an administrator account"

    Original title - edit registry of the world of Warcraft Launcher to write

    I downloaded the patch more recent game in my computer, I did a cleanup of the system and tried to log in again, but now the States window it "(Launcher requires permission in writing for World of Warcraft key to locate and launch the game successfully." Please allow write access to the registry key by using an administrator account)", how can I access the registry to resolve this problem? Help please

    Hello DaTurtle !

    I had exactly the same problem, I have not found the sollution here...

    But I found how to fix very easy !

    You do a right click on the WOW icon at the office-
    then browse to the location of the file -
    It will appear a lot of files-
    Click on the WoW program file instead of the pitcher-
    will start your wow game-
    Log in as normal-
    then he will come to the top to update...

    After the update your wow will work as usual!

    It worked on my computer, please respond!

    Hans_Craft

  • I have to download updates certificates root for my XP laptop?

    I have to download updates certificates root for my XP laptop?

    Yes, you should.  Read the description of the update and it becomes clear why you should do it.

  • Pop-up - configuration of Qest QuickCare says ' not found required versions! need for versions of IE 5.5 SP2 and above to install

    "Cannot find required versions! need for versions of IE 5.5 SP2 and above to install Qwest QuickCare. "what this mean I have installed SP2? Does this mean that I have installed SP2 wronge

    Hello

    always check the compatibility of vista programs on the link below

    http://www.Microsoft.com/Windows/compatibility/Windows-Vista/default.aspx

    If a program is compatible with vista you can try right click on the setup.exe, and then selecting run as administrator

    It is not compatible with vista, you can try running it in a previous operating system mode

    This does not work for all programs

    read the information below

    http://www.howtogeek.com/HOWTO/Windows-Vista/using-Windows-Vista-compatibility-mode/

  • Replacement for activesync on Windows 7 64 bit

    Remember - this is a public forum so never post private information such as numbers of mail or telephone!

    Ideasreplacement for activesync on win7 64-bit helps

    • You have problems with programs
    • Error messages
    • Recent changes to your computer
    • What you have already tried to solve the problem

    See http://www.microsoft.com/windowsmobile/en-us/downloads/microsoft/device-center-download.mspx

    ActiveSync is not compatible with Windows 7.

  • Conflict of Certificate SSL RV082 Cisco for ActiveSync

    I have a Cisco RV082 session before my exchange server. I have the port forwarding for 443 to my exchange server.

    My ActiveSync (iPhone, Droid) users get a connection error when HTTPS is enabled on the Firewall tab using the MS Connection Tester, it appears that the ActiveSync connection picks up the cert of Cisco, installed on the RV082 and not the cert I on the Exchange Server.

    If I turn off HTTPS then it all works.

    That would be fine except that I seem to need HTTPS to my VPN connection enabled to work.

    Help!

    I saw this question on RV0xx V3 devices. The devices are built with more security, but the device will always meet the demands of SSL certificates and not transfer the request even if the port forward is activated. Even when the port which is transferred 443 is not the router will always respond with its own SSL certificate. If you experience this kind of configuration problems. Please if you do not need ensure the management to distance, SSL VPN, or secure disable management LAN HTTPS under the firewall settings. If you need these parameters so please call in and create a case. More business with this number, we create the problem gets noticed and solved. There is no rejection of bug at this time for the same problem, I know. Please call Small Business Support Center at 1-866-606-1866. If the technician you speak with what is not aware of the problem please have a talk with me.

    Thank you

    Cisco Small Business Support Center

    Randy Manthey

    CCNA, CCNA - security

  • [Q] how to build and install an SSL certificate signed for the management of a Cisco 5508 WLC?

    Our security policy requires that all web pages admin must be signed by our CA business. I have successfully implemented a SSL certificate 3rd party Auth Web our WLAN of comments, but I need to install a self-signed certificate for the management of the WLC himself. I followed the instructions here:

    http://www.Cisco.com/en/us/Tech/tk722/tk809/technologies_configuration_example09186a00806e367a.shtml

    but it was more useful for Web auth. I can't find a specific document explaining how it should be done for the management interface.

    Any help much appreciated.

    (1) Please use a password. Empty passwords regularly give problems.

    (2) you don't recombine the key with the certificate before you download to the WLC:

    Combine the CA.pem certificate with the private key, and then convert the file to a .pem file.

    Type this command in the OpenSSL application:

    openssl>pkcs12 -export -in CA.pem -inkey mykey.pem -out CA.p12 -clcerts
    -passin pass:check123 -passout pass:check123


    !--- This command should be on one line.

    openssl>pkcs12 -in CA.p12 -out final.pem -passin pass:check123 -passout pass:check123

    Note: In this command, you must enter a password for the parameters -passin' and -passout . The password is set to the setting -passout must match the setting SubscriptionId is configured on the WLC. In this example, the password is configured at the time the -passin' and settings -passout is check123. Step 4 of the procedure in the section download the WLC third certificate of this document deals with the configuration of the SubscriptionId parameter.

    The final.pem is the file that is transferred via TFTP to the Cisco WLC.

    Now that you have the certificate of the third-party CA, you must download the certificate to the WLC.

  • Setting TLS in IE7 on XP, require client certificates omitting

    Hello
    Applied Oracle 10.1.3.5 CPUJUL2010 application server.

    Our servers are unable to authenticate the certificates with the "SSLVerifyClient require" setting. No problem with that for about a year, and our "Use TLS 1.0" setting IE not a be checked.

    In the OHS error log:
    [13 August 2010 13:09:49 07579] [error] Call SSL to NZ function nzos_Handshake failed with error 29014 (server, client 192.168.113.26 app1:443)
    [13 August 2010 13:09:49 07579] [error] Unknown error
    [13 August 2010 13:09:49 07578] [error] Call SSL to NZ function nzos_Handshake failed with error 28864 (server, client 192.168.113.26 app1:443)
    [13 August 2010 13:09:49 07578] [error] Error SSL IO [index: the customer unexpectedly stopping the connection]
    [13 August 2010 13:09:50 07581] [error] Call SSL to NZ function nzos_Handshake failed with error 29014 (server, client 192.168.113.26 app1:443)
    [13 August 2010 13:09:50 07581] [error] Unknown error
    [13 August 2010 13:09:50 07577] [error] Call SSL to NZ function nzos_Handshake failed with error 28864 (server, client 192.168.113.26 app1:443)
    [13 August 2010 13:09:50 07577] [error] Error SSL IO [index: the customer unexpectedly stopping the connection]

    Not sure if this is a coincidence, but the latest Microsoft patches have been applied the night before, everything's gone belly up.
    If I uncheck "Use TLS 1.0" leaving only "use SSL 3.0", it works!
    Does anyone else have this problem?

    Thank you!

    http://support.Microsoft.com/kb/980436/

    To resolve this problem, you can import certain keys in the registry to enable a compatibility mode. The advanced option "Use TLS 1.0" doesn't have to be unchecked.

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SecurityProviders\SCHANNEL]
    "AllowInsecureRenegoServers" = DWORD: 00000001
    "AllowInsecureRenegoClients" = DWORD: 00000001
    "UseScsvForTls" = DWORD: 00000001

    It worked for us

  • Sapphire RadeonHD 7950 Mac Edition requires updates of drivers for MacPro5, 1 and El Capitan?

    Installed Sapphire RadeonHD 7950 MacPro 5.1 2010 Edition Mac running El Capitan.

    There is a disc including drivers, but it would of course be dated now, since it is no longer manufactured.

    The card requires new updates of pilot for El Capitan?

    Map of boots and seems will work perfectly, although PhotoShop CC 2015 says "Photoshop has encountered a problem with the display driver and disabled temporarily development that use the graphics electrician... check the website of the manufacturer for the latest version of the software.     Verification of Photoshop preferences, it has performance / CPU graph OFF controlled use (which is where the GPU to accelerate the calculations and OpenCL settings are)

    I see threads from 2014 on compatibility with the OpenCL 7950, but those who were dated and reference the Lion and the Mavericks.

    Anyone have any recent experience with the 7950 and MacPro5, 1 in this respect?

    Tony

    Update of the news...     SapphireTech has only drivers for Windows... no drivers updated to OS X.

    Supplied driver disk has "(RADEON HD 7950 pour Mac.kg) but without indication of edition driver."

    OS X see:

    AMD Radeon HD 7950:

    Chipset model: AMD Radeon HD 7950

    Type: GPU

    Bus: PCIe

    Slot: Slot-1

    The PCIe track width: x 16

    VRAM (Total): 3072 MB

    Seller: ATI (0 x 1002)

    Device ID: 0x679a

    Revision ID: 0x0000

    ROM revision: 113-E2080C-101

    EFI Driver Version: 01.00.624

    You are not sure if they are newer than the drivers on the CD, but I think drivers have been updated by Apple after Mavericks?

    Tony

  • During the installation of Firefox 4 beta, he told me that it does not work on my Mac. When I go to system requirements, need a page for Firefox3.6 requirements. Where can I find the requirements for the beta?

    The link to the minimum configuration for Firefox 4 beta takes you to a page that gives you the requirements for Firefox 3.6 instead. I guess that the requirements for the beta are different, that I can't seem to install the beta on my Mac. Where can I find the beta version of system requirements?

    Firefox 4 will not work on the Mac PPC, for Mac it needs the Intel processor. There is an accumulation of third parties based on Firefox 4 beta, which should work on Mac PPC, for details, see http://www.floodgap.com/software/tenfourfox/

  • Connect my PDA (WM6.1) to my laptop for activesync

    I use the HTC Touch Diamond2 and tries to connect to the PC using Vista + Windows Mobile Device Center

    I have try the parameter listed in the next page then, but when I'm doing
    "Now the remote PC is questioned if ActiveSync is running on it. If everything works well, you will get at least 'ActiveSync' as service remotely. Select it and click on "Finish". »
    I couldn't find the 'ActiveSync' as service remotely, even I put the com port than 7 in the center of the Mobile device
    http://APS2.toshiba-tro.de/KB0/HTD9602MY0000R01.htm

    I use Vista SP2 + Bluetooth Stack for Windows 5.10.17 (F) given by my laptop Fujitsu.

    I wonder why I can't find the remote 'ActiveSync' service after peeling upward with my laptop.

    Could someone help?

    Your Bluetooth stack version is quite old. Try to update if Fujitsu offers a newer version to support features such as selective suspend. Maybe that's the problem here. If you can't get a more recent version, then I would try to install the version that is available on the Toshiba site:
    http://APS2.toshiba-tro.de/Bluetooth/?page=download
    Try to set up this new. If it worked then uninstall the battery Bluetooth again, but keep the settings. The uninstall wizard asks. Now reinstall your original version of 5.10.17 (F). The version is old, once again, but I guess that most recent drivers remain in the system.

  • Cannot match Smartphone with Satellite A100 for ActiveSync

    Hi, on board.

    I can't use ActiveSync to sync my phone with the laptop; It seems that the twinning of 2 devices fails.
    With USB connection I can ActiveSync successfully.

    My devices are:
    * Toshiba Satellite A100 (PSAA9) with ActiveSync 4.2 and Toshiba Bluetooth Stack 4.20.01
    * HTC MTeor with Windows Mobile 5.0 SmartPhone

    I tried to follow the HowTo in:
    http://APS.toshiba-tro.de/Bluetooth/

    How-> ActiveSync via Bluetooth (TOSHIBA PC - smartphone with Windows Mobile 5)

    I find cela the opportunity to say that it is wrong that the HowTo is not in the English language.

    In any case, I followed him through until page 8, 18 statement, where the third picture shows the box in ActiveSync checked; my phone doesn't have this box: it has "Serial Port".
    I check "Serial Port" (also tried not to check...) and continue until the 21 statement. Well, it stops there; I don't understand that messagebox; in fact nothing happens, not in the laptop or the phone and they don't get matched.

    Found here a recent thread, asserting the need to define COM7 in the registry. I did it. Oddly enough, COM7 is not my LoalCOM server, but a customer LocalCOM; COM8 is the LocalCOM server.
    I tried also with COM8.

    I tried to remove Bluetooth Stack completely and reinstall (embedded version and latest version).
    I reinstall ActiveSync 4.2.
    I also tried with ActiveSync 4.5 BETA.

    Nothing worked for me.
    Help, please.

    Note: I have activesynced the same phone via bluetooth successfully with a HP laptop which has its own bluetooth software with, I think, virtual serial port driver of widdcomm.

    Thank you.

    Hello

    This Smartphone is not known to me, but I really put t know why you try to use BT between MTeor and laptop when connecting USB works. Using this connection, you can do whatever you want.

    BT on Smartphone is useful if you want to connect the small BT headset, but I don't see the reason to try this when the USB connection is working successfully.

    If there is no success I put t think it is Toshiba related question and also try to contact HTC support. They know more about the own products.

    http://www.Europe.HTC.com/support/support.HTML?device=htcmteor

    Good luck!

  • Requirement of Snapfish? for eprint

    Just bought a HP Photosmart 7520 and am trying to register to use eprint.  I get the instructions installation but cannot save because I must have a password account Snapfish.  Nowhere in any documentation or videos I see this requirement.  I'm not joining Snapfish, you mean, I can't use eprint?  Darn ugly that I need to get an account with Snapfish in order to use a feature that I pay for when I buy the printer.   Can you clarify this or advise me how to use eprint without Snapfish?

    Thank you... Ralph

    Thank you.  It seems that somehow I must have been moved by HP.  I followed your instructions and will now test the feature, but at least I'm registered (yet not too happy Snapfish requirement)... Ralph

  • What are the requirements of the system for the labview runtime engine 2011

    Hello

    I'm looking for (ideally 2011 release) LabVIEW runtime engine requirements. The only information I can find a few States what operating systems it supports. I am eager to check the specifications of a target (Touch Panel computer - probably running Windows XP Embedded), to allow this execution. More precisely the amount of non-volatile storage system required - because we will need to specify a CompactFlash card. Clearly the application exe take little space like XPe will, but I'm eager to know the needs of the TENS.

    Andy

    Not sure about flash complact...  I can't remember seeing it in the relase notes, but follow the link below for the Manual:

    It should support the touch screen (I don't remember if you still need an additional plugin for this... I'll check).

    http://www.NI.com/PDF/manuals/371778g.PDF

    Look at page 2, the middle column

    or below the basic requirements:

Maybe you are looking for