SCMDM 2008 SP1 Support for Windows 2008 CA
Just noticed that Michael Jimenez recently blogged and announced official Microsoft support for Windows 2008 Enterprise Edition Certificate Authority with SCMDM 2008 SP1.
I have successfully used the KB951840 patch on down-level devices to remove the error message that otherwise will appear. On the device it will complain that the Root certificate is not installed, even though the certificate chain locally shows it is there. :-) This will also prohibit the IPSec VPN from coming up.
Also as a recap of the different Windows Mobile build numbers and AKUs as I posted previously, you should also be aware of the Password Reset Client on the down-level devices. The important difference being that you could deploy the Password Reset .CAB file out to the devices once enrolled in SCMDM, but the Windows 2008 CA patch you are unable to since the VPN won’t come up without it..
Windows 2008 CA Patch (KB951840) installable on:
Windows Mobile 6.1 devices, Build 19184.108.40.206 and higher. Un-necessary to install on Windows Mobile 6.1.4 devices (Build 207220.127.116.11) or higher.
Password Reset Client installable on:
Windows Mobile 6.1.1 devices, Build 19518.104.22.168 and higher. But stated supported for only for Windows Mobile 6.1.4 devices and higher. So I assume un-necessary to install on Windows Mobile 6.5 devices but I shall test on the newly released emulator. :-)