GoDaddy originally had certs sign by Starfield (which was in the WM5 root cert store). They have subsequently changed this. When I replaced a bunch of GoDaddy certs, I ran into this issue.
Importing certs is easy on WM5 PocketPC Phone edition (I should have made that clear), but not so easy on Smartphones - your smartphone may be configured to require a signed executable if you want to run an app on the phone. You can go down the cab file method - there are also instructions on the Windows Mobile team's blog. But if you have 100 or 1000 of these devices, that is not a trivial process. Cheers Ken From: Simon Butler [mailto:[EMAIL PROTECTED] Sent: Saturday, 19 January 2008 10:09 PM To: NT System Admin Issues Subject: RE: SSL certificates No, that isn't correct. GoDaddy's root certificate was first added to Windows Mobile 5 with the MSFP upgrade. As most devices have a MSFP build available they should be able to get one with the root certificate included. If there is still a problem with a missing certificate, both the root and the intermediate certificate can be imported on to any device using the cabinet file method. There is no GUI or other tool to do it. It takes a few more minutes to setup, but as you can combine the two certificates in to a single cabinet file, for the few minutes it takes to create one more than makes up for the savings made. Instructions: http://www.amset.info/pocketpc/certificates3.asp However almost all Windows Mobile devices on the market now support the GoDaddy certificate. Simon. ________________________________ From: Ken Schaefer [mailto:[EMAIL PROTECTED] Sent: 19 January 2008 00:56 To: NT System Admin Issues Subject: RE: SSL certificates Yeah - WM5 devices are not capable of requesting the entire certificate chain if your cert (e.g. from GoDaddy) is signed by an intermediate CA not in the device's cert store. I believe that this was added in WM6 (but I'm not 100% sure) Cheers Ken From: Rick Corgiat [mailto:[EMAIL PROTECTED] Sent: Saturday, 19 January 2008 5:24 AM To: NT System Admin Issues Subject: RE: SSL certificates Be sure to investigate whether or not mobile devices will work with the lesser know cert providers. I recently had a tough time getting an older Cingular phone to work with a GoDaddy cert. Rick ________________________________ From: Joe Heaton [mailto:[EMAIL PROTECTED] Sent: Friday, January 18, 2008 9:54 AM To: NT System Admin Issues Subject: SSL certificates Someone recently mentioned an SSL issuing authority that they were using outside of Verisign. We have a certificate that is coming up for renewal, and I want to look around at other options, but don't want to get sucked into a bad issuing authority. Joe Heaton ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
