Versamail and Go Daddy root certificate

[dpeters11]

We just renewed our root certificate on our OWA server, and are now having issues with PalmOS devices (including Centro, 755P and 780) connecting to Server Activesync through Versamail. They get an error that it "can't sync because of the SSL Certificate and to check if the unit has the right date and time"

We use GoDaddy, and have for several years. The devices were working fine with the old cert, but not the new one. We have other devices on Windows Mobile 5 and 6, as well as iPhone and they are working fine.

I tried using the Certificate Modification tool on the Palm site to install the current root, but that didn't help. Palm Support just says to go back to the old certificate. Does anyone have any suggestions?

[dpeters11]

We just renewed our root certificate on our OWA server, and are now having issues with PalmOS devices (including Centro, 755P and 780) connecting to Server Activesync through Versamail. They get an error that it "can't sync because of the SSL Certificate and to check if the unit has the right date and time"

We use GoDaddy, and have for several years. The devices were working fine with the old cert, but not the new one. We have other devices on Windows Mobile 5 and 6, as well as iPhone and they are working fine.

I tried using the Certificate Modification tool on the Palm site to install the current root, but that didn't help. Palm Support just says to go back to the old certificate. Does anyone have any suggestions?

Got some more info, hoping someone can help me. Apparently Palm does not support unicode SSL certs, GoDaddy is telling us our CSR is causing the cert to be created in unicode, and we need to submit it in ASCII. Can this be done in IIS 6? They actually said that it needs to be in "Print String Format" instead of UTF-8, but I think they're talking ASCII instead of Unicode.

[mitemom]

Got some more info, hoping someone can help me. Apparently Palm does not support unicode SSL certs, GoDaddy is telling us our CSR is causing the cert to be created in unicode, and we need to submit it in ASCII. Can this be done in IIS 6? They actually said that it needs to be in "Print String Format" instead of UTF-8, but I think they're talking ASCII instead of Unicode.

Did you ever find a solution to this problem?

Is there someone else who will cell the correct cert?

[hostchecker]

i have problems with that

[Jackized]

We are also having this problem now. Our certificate from GoDaddy expired. We renewed it with GoDaddy and now our Palm's do not sync. Our windows phones sync just fine. GoDaddy told me the same thing. They said our CSR needs to be in "Print String Format" instead of UTF-8. They said they converted to a new format. We are thinking of buying a certificate from some other company.

[mitemom]

We are also having this problem now. Our certificate from GoDaddy expired. We renewed it with GoDaddy and now our Palm's do not sync. Our windows phones sync just fine. GoDaddy told me the same thing. They said our CSR needs to be in "Print String Format" instead of UTF-8. They said they converted to a new format. We are thinking of buying a certificate from some other company.

Did you find somewhere to buy another certificate that works?

[khiliah]

The issue on this is because all servers are moving to the new format, and Palm hasn't updated their software. It's not GoDaddy's fault, it's not Verisign's fault, it's not comodo's fault, it's Palm.

So, here's a work around. Find an old 2003 windows server, it usually has a default setting to generate the CSR's in the old style. Generate it on that one, rekey your certificate, download the new one and install it on the old server.

After that, you need to export the private/public keys from the old server over to your normal server. GD certificates can be exported/imported on multiple servers. On that note, they don't have documentation on how to do exports/imports because it depends on your server and that's a server function, not an ssl function so if you need to know how to export/import certs from server to server, you've got to look it up online or get microsoft to help.

If this just sucks all around, yell at Palm to get off their butts and update, or get off of palm systems, they're going to crap anyway and this is a fine example of them letting their software rot when the rest of the world has moved on.