Hi

I am trying to deploy CRM mobile, I have used the CRM Mobile 1.2 diagnostic
tool that is available for download and everything looks ok. However when I
click on Mobile CRM in the Programs folder on the device and enter username
and password, it comes up with "The SSL Certificate is invalid. Please
contact your administrator". Has anyone encountered the same problem? Or
can anyone help me?

Thanks.

RE: CRM mobile invalid ssl certificate by DeanWierman

DeanWierman
Wed Feb 23 16:03:03 CST 2005

On the Cert Diag tool, did you use the buttons on the right hand side which
will remotely launch IE (on the device) with each service? These should work
without error. Are you using the same device when you use the Tool and when
you try to connect?

"aba" wrote:

> Hi
>
> I am trying to deploy CRM mobile, I have used the CRM Mobile 1.2 diagnostic
> tool that is available for download and everything looks ok. However when I
> click on Mobile CRM in the Programs folder on the device and enter username
> and password, it comes up with "The SSL Certificate is invalid. Please
> contact your administrator". Has anyone encountered the same problem? Or
> can anyone help me?
>
> Thanks.
>

RE: CRM mobile invalid ssl certificate by aba

aba
Wed Feb 23 18:37:02 CST 2005

yes I am using the same device when I use the tool and trying to connect. I
used the buttons on the left hand side then I used the right hand side and
everything showed as expected, but when I launch the Mobile CRM from
"Programs", it says invalid SSL certificate.

"Dean Wierman" wrote:

> On the Cert Diag tool, did you use the buttons on the right hand side which
> will remotely launch IE (on the device) with each service? These should work
> without error. Are you using the same device when you use the Tool and when
> you try to connect?
>
> "aba" wrote:
>
> > Hi
> >
> > I am trying to deploy CRM mobile, I have used the CRM Mobile 1.2 diagnostic
> > tool that is available for download and everything looks ok. However when I
> > click on Mobile CRM in the Programs folder on the device and enter username
> > and password, it comes up with "The SSL Certificate is invalid. Please
> > contact your administrator". Has anyone encountered the same problem? Or
> > can anyone help me?
> >
> > Thanks.
> >

RE: CRM mobile invalid ssl certificate by onayamspaydavid_mcguire

onayamspaydavid_mcguire
Thu Feb 24 08:03:01 CST 2005

Test the certificate on both the 'host' and the mobile by going to
https://crmserver/ssCERDA. If that works, then the certificate works.

If it doesn't, then you will have to trust the certificate before continuing.

"aba" wrote:

> yes I am using the same device when I use the tool and trying to connect. I
> used the buttons on the left hand side then I used the right hand side and
> everything showed as expected, but when I launch the Mobile CRM from
> "Programs", it says invalid SSL certificate.
>
> "Dean Wierman" wrote:
>
> > On the Cert Diag tool, did you use the buttons on the right hand side which
> > will remotely launch IE (on the device) with each service? These should work
> > without error. Are you using the same device when you use the Tool and when
> > you try to connect?
> >
> > "aba" wrote:
> >
> > > Hi
> > >
> > > I am trying to deploy CRM mobile, I have used the CRM Mobile 1.2 diagnostic
> > > tool that is available for download and everything looks ok. However when I
> > > click on Mobile CRM in the Programs folder on the device and enter username
> > > and password, it comes up with "The SSL Certificate is invalid. Please
> > > contact your administrator". Has anyone encountered the same problem? Or
> > > can anyone help me?
> > >
> > > Thanks.
> > >

RE: CRM mobile invalid ssl certificate by ShawnDieken

ShawnDieken
Fri Feb 25 15:19:02 CST 2005

Hi-

Can you explain a little more about how the certificate was generated?

Is this server a CA Certificate Server as well as the CRM Server?

What is the specific name the Certificate is issued to and what is the
netbios and FQDN name of the CRM Server?

Was it a Self SSL Certificate?

This will determine how you create your deployment package.

Once I know this information I will be able to assist you further.


Thanks!
Shawn Dieken
Microsoft Business Solutions Support


This posting is provided "AS IS" with no warranties, and confers no rights.




"Dave McGuire" wrote:

> Test the certificate on both the 'host' and the mobile by going to
> https://crmserver/ssCERDA. If that works, then the certificate works.
>
> If it doesn't, then you will have to trust the certificate before continuing.
>
> "aba" wrote:
>
> > yes I am using the same device when I use the tool and trying to connect. I
> > used the buttons on the left hand side then I used the right hand side and
> > everything showed as expected, but when I launch the Mobile CRM from
> > "Programs", it says invalid SSL certificate.
> >
> > "Dean Wierman" wrote:
> >
> > > On the Cert Diag tool, did you use the buttons on the right hand side which
> > > will remotely launch IE (on the device) with each service? These should work
> > > without error. Are you using the same device when you use the Tool and when
> > > you try to connect?
> > >
> > > "aba" wrote:
> > >
> > > > Hi
> > > >
> > > > I am trying to deploy CRM mobile, I have used the CRM Mobile 1.2 diagnostic
> > > > tool that is available for download and everything looks ok. However when I
> > > > click on Mobile CRM in the Programs folder on the device and enter username
> > > > and password, it comes up with "The SSL Certificate is invalid. Please
> > > > contact your administrator". Has anyone encountered the same problem? Or
> > > > can anyone help me?
> > > >
> > > > Thanks.
> > > >

RE: CRM mobile invalid ssl certificate by aba

aba
Mon Feb 28 19:17:02 CST 2005

The CA Certificate Server is also the CRM Server.
We followed the instruction under "Setting up a server certificate by using
your own certification authority" section in the CRM Mobile Implementation
Guide. I believe that it is not Self SSL.

Certificate issued to: businessnamecrm
NETBIOS: businessnamecrm
FQDN: businessnamecrm.business.com

Thanks for your help. Look forward to your reply.

"Shawn Dieken" wrote:

> Hi-
>
> Can you explain a little more about how the certificate was generated?
>
> Is this server a CA Certificate Server as well as the CRM Server?
>
> What is the specific name the Certificate is issued to and what is the
> netbios and FQDN name of the CRM Server?
>
> Was it a Self SSL Certificate?
>
> This will determine how you create your deployment package.
>
> Once I know this information I will be able to assist you further.
>
>
> Thanks!
> Shawn Dieken
> Microsoft Business Solutions Support
>
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
>
>
>
> "Dave McGuire" wrote:
>
> > Test the certificate on both the 'host' and the mobile by going to
> > https://crmserver/ssCERDA. If that works, then the certificate works.
> >
> > If it doesn't, then you will have to trust the certificate before continuing.
> >
> > "aba" wrote:
> >
> > > yes I am using the same device when I use the tool and trying to connect. I
> > > used the buttons on the left hand side then I used the right hand side and
> > > everything showed as expected, but when I launch the Mobile CRM from
> > > "Programs", it says invalid SSL certificate.
> > >
> > > "Dean Wierman" wrote:
> > >
> > > > On the Cert Diag tool, did you use the buttons on the right hand side which
> > > > will remotely launch IE (on the device) with each service? These should work
> > > > without error. Are you using the same device when you use the Tool and when
> > > > you try to connect?
> > > >
> > > > "aba" wrote:
> > > >
> > > > > Hi
> > > > >
> > > > > I am trying to deploy CRM mobile, I have used the CRM Mobile 1.2 diagnostic
> > > > > tool that is available for download and everything looks ok. However when I
> > > > > click on Mobile CRM in the Programs folder on the device and enter username
> > > > > and password, it comes up with "The SSL Certificate is invalid. Please
> > > > > contact your administrator". Has anyone encountered the same problem? Or
> > > > > can anyone help me?
> > > > >
> > > > > Thanks.
> > > > >

RE: CRM mobile invalid ssl certificate by sdieken

sdieken
Wed Mar 02 22:40:08 CST 2005

------=_NextPart_0001_217F3839
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Hi-

Thanks for your reply.

1. Can you please explain a little more about your environment?
How is your CRM environment setup? (ie: How many servers, What operating
systems are installed on each?, What applications are installed on each?,
What are the hardware specs?)
I am looking for something like this:
1 - CRM\SQL Win2K3 3GHZ 2GB RAM
1 - DC Win2K Dual 3GHZ with 2GB RAM
1- PPC Device make\model
Ect...

2. If you are using a CA server, then you will need to have 2 Certificates
Installation items in your deployment package.
1 for your root certificate (from the trusted root authorities store) and 1
for your server certificate (from the personal store)

3. You will also need to modify the mobile installation item within your
CRM Mobile deployment package on the Settings2 and Setting3 tabs, to point
to the https://businessnamecrm/ URL's instead of the FQDN that is there by
default. There are 3 URL's that need to be changed within those 2 tabs.

4. You will also need to use the 'Work' Setting within Active Sync, since
you are using the NETBIOS name and it has no periods in the name.
Navigate to Tools, then select Options, select the Rules top tab and in the
Pass Through section there should be two options. Make sure yours is set
to 'Work'.

5. Verify that NSLOOKUP works between all your servers. From a command
prompt type NSLOOKUP CRMSERVERNAME and see if you get any errors. If you
do, you will need to verify that the host and pointer records for your
servers exist and are pointed to the correct IP's within DNS.

Once you have this setup, you should be able to successfully sync your
device.

Thanks!
Shawn Dieken
Microsoft Business Solutions Support


This posting is provided "AS IS" with no warranties, and confers no rights.
------=_NextPart_0001_217F3839
Content-Type: text/x-rtf
Content-Transfer-Encoding: 7bit

{\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\f0\fs20 Hi-
\par
\par Thanks for your reply.
\par
\par 1. Can you please explain a little more about your environment?
\par How is your CRM environment setup? (ie: How many servers, What operating systems are installed on each?, What applications are installed on each?, What are the hardware specs?)
\par I am looking for something like this:
\par 1 - CRM\\SQL Win2K3 3GHZ 2GB RAM
\par 1 - DC Win2K Dual 3GHZ with 2GB RAM
\par 1- PPC Device make\\model
\par Ect...
\par
\par 2. If you are using a CA server, then you will need to have 2 Certificates Installation items in your deployment package.
\par 1 for your root certificate (from the trusted root authorities store) and 1 for your server certificate (from the personal store)
\par
\par 3. You will also need to modify the mobile installation item within your CRM Mobile deployment package on the Settings2 and Setting3 tabs, to point to the https://businessnamecrm/ URL's instead of the FQDN that is there by default. There are 3 URL's that need to be changed within those 2 tabs.
\par
\par 4. You will also need to use the 'Work' Setting within Active Sync, since you are using the NETBIOS name and it has no periods in the name.
\par Navigate to Tools, then select Options, select the Rules top tab and in the Pass Through section there should be two options. Make sure yours is set to 'Work'.
\par
\par 5. Verify that NSLOOKUP works between all your servers. From a command prompt type NSLOOKUP CRMSERVERNAME and see if you get any errors. If you do, you will need to verify that the host and pointer records for your servers exist and are pointed to the correct IP's within DNS.
\par
\par Once you have this setup, you should be able to successfully sync your device.
\par
\par Thanks!
\par Shawn Dieken
\par Microsoft Business Solutions Support
\par
\par
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par }
------=_NextPart_0001_217F3839--


RE: CRM mobile invalid ssl certificate by aba

aba
Thu Mar 03 21:19:03 CST 2005

Thanks Shawn

We have actually resolved this issue by calling MBS support. Spent a long
time on the phone trying to fix the problem, but eventually it was fixed. It
turned out that we have not correctly set up MS CRM, issues with host headers
and port numbers. Everything works well for the mobile now.

Thank you!

"Shawn Dieken" wrote:

> Hi-
>
> Thanks for your reply.
>
> 1. Can you please explain a little more about your environment?
> How is your CRM environment setup? (ie: How many servers, What operating
> systems are installed on each?, What applications are installed on each?,
> What are the hardware specs?)
> I am looking for something like this:
> 1 - CRM\SQL Win2K3 3GHZ 2GB RAM
> 1 - DC Win2K Dual 3GHZ with 2GB RAM
> 1- PPC Device make\model
> Ect...
>
> 2. If you are using a CA server, then you will need to have 2 Certificates
> Installation items in your deployment package.
> 1 for your root certificate (from the trusted root authorities store) and 1
> for your server certificate (from the personal store)
>
> 3. You will also need to modify the mobile installation item within your
> CRM Mobile deployment package on the Settings2 and Setting3 tabs, to point
> to the https://businessnamecrm/ URL's instead of the FQDN that is there by
> default. There are 3 URL's that need to be changed within those 2 tabs.
>
> 4. You will also need to use the 'Work' Setting within Active Sync, since
> you are using the NETBIOS name and it has no periods in the name.
> Navigate to Tools, then select Options, select the Rules top tab and in the
> Pass Through section there should be two options. Make sure yours is set
> to 'Work'.
>
> 5. Verify that NSLOOKUP works between all your servers. From a command
> prompt type NSLOOKUP CRMSERVERNAME and see if you get any errors. If you
> do, you will need to verify that the host and pointer records for your
> servers exist and are pointed to the correct IP's within DNS.
>
> Once you have this setup, you should be able to successfully sync your
> device.
>
> Thanks!
> Shawn Dieken
> Microsoft Business Solutions Support
>
>
> This posting is provided "AS IS" with no warranties, and confers no rights

RE: CRM mobile invalid ssl certificate by sdieken

sdieken
Thu Mar 03 22:52:04 CST 2005

------=_NextPart_0001_21852929
Content-Type: text/plain
Content-Transfer-Encoding: 7bit

Great to hear!

Thanks for the update.

Have a great day!

Shawn Dieken
------=_NextPart_0001_21852929
Content-Type: text/x-rtf
Content-Transfer-Encoding: 7bit

{\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\f0\fs20 Great to hear!
\par
\par Thanks for the update.
\par
\par Have a great day!
\par
\par Shawn Dieken
\par }
------=_NextPart_0001_21852929--