Next you need to get the certificate onto the Windows Phone device. If you’ve used a private CA to issue your certificate you can download the root certificate from the web enrolment page on the CA.ĭownload the CA certificate in DER format to your computer. This is fine for test lab or training scenarios but I do not recommend it for production environments. If you can’t, or won’t, acquire an SSL certificate from a trusted CA then you can also install the root certificate onto your Windows Phone device so that SSL certificates from that CA will work. Install the Root Certificate on the Windows Phone Device Microsoft has published this list of certificate authorities that are trusted by Windows Phone (PDF). I generally go with Digicert for Exchange SSL certificates, however you can choose another provider if you wish. You’ll also avoid certificate related errors for other service such as Outlook Web App and AutoDiscover. If you install an SSL certificate from a certificate authority that is already trusted by the Windows Phone device you will avoid this error when you’re configuring the device for ActiveSync. Install an SSL Certificate from a Trusted Certificate Authority There are a basically two ways to resolve this issue. This will commonly occur with Exchange servers that are still configured to use a self-signed certificate, or that have a certificate issued from a private CA.

This error can occur when the root certificate authority that generated the SSL certificate being used by the Exchange server is not trusted by the Windows Phone device. Contact a support person or your service provider.

There is a problem with the certificate for. When you are connecting a Windows Phone device to an Exchange server using ActiveSync for the first time you may encounter the following error:

Microsoft activesync windows phone 7