Information Regarding SSL-ized Connections from Handheld Devices

Many installations of GroupWise WebAccess are using SSL to encrypt the data between the browser and the WebAccess application. This is advisable for security reasons. There are a few issues regarding this and using handheld or wireless devices to access WebAccess.

For the web server to communicate with a web browser, they must exchange certificates. As a result, the device that is accessing the WebAccess system must be able to support certificates. Most of the handheld and wireless devices come preconfigured with a set list of trusted root certificate authorities. What this means is that if you have used Novell's certificate server to generate a certificate for the web server, you will not be able to use the handheld devices to access WebAccess. You must request and install a certificate from one of the certificate vendors that the device has in its trusted root list.

If you're using a cellular phone to access WebAccess that has SSL enabled on the web server, you must check with the cellular phone service provider to ensure that its gateway has your web server's certificate issuer on its trusted root list. Otherwise, the data will not pass through the cellular phone's network and down to your cell phone.

The safest thing is to have the web server use a certificate that was obtained from a vendor contained in the trusted root list of the devices that will be used to access the WebAccess system. Chapter 27, "Securing Your GroupWise System via SSL," includes some pointers about how to enable a certificate on a NetWare platform web server.