[Today’s post comes to us courtesy of Damian Leibaschoff from Commercial Technical Support]
As you all know, a successful synchronization from a mobile device using SSL requires that the device trusts the certificate installed in SBS. If we are using the self-issued certificate that is automatically generated when the Internet Address Management Wizard is completed then we will need to complete steps in the phone to get the root certificate properly installed so it can trust the self-issued certificate on the server, this is not required if using a third party trusted certificate from a well-known public certification authority and this is the recommended solution for SBS.
If we must use a self-issued certificate, there are multiple ways to accomplish the same end result of getting the device to trust it. Our goal is to get the certificate from \serverpublicdownloadsCertificate Distribution PackageSBSCertificate.cer into the phone so we can install it.
With Windows Phone 7 you could attach the file as part of an email sent to a Windows Live (@hotmail.com for example) account that is already configured and synching on the phone, once the e-mail is received by the phone, you can install the cert by just tapping on the attachment.
You can also get to the certificate directly from the phone using Internet Explorer. For this, you can follow these steps: