A few weeks ago we noticed that our i-Phone users were not able to get their e-mail via the “push” methodology; instead they had to manually download their e-mail like they did before the 2.0 update. It left us scratching our heads a bit because it had worked seamlessly just a few weeks prior, and we had not done anything of significance with our network.

We noticed that whenever a user went to the i-Phone mail folder, they would receive a “Certificate Invalid” notice, however since the device would still manually download e-mail we didn’t give it much thought. After some trial and error on many different fronts that included reloading e-mail accounts on the i-Phones, restarting Services (and Reboot) on the Exchange Server 2003 we turned our attention back to the “Certificate Invalid” notice. Simple enough, we found that a Certificate had expired on the Exchange side, and the suspicions mounted of this being the culprit.

After interpolating a nice article on how to create a certificate, we set out to renew the Certificate that had expired. To do so, we went to IIS Manager > Web Sites > (right click) Default Websites, then Properties > Directory Security Tab > Server Certificate. After selecting the Server Certificate button, we followed the Wizard to renew the Certificate which was simple and straightforward. Once it was renewed, our problem was solved immediately and the “push” e-mail began to flow.

Labels: Exchange Server 2003, i-Phone