Many mail servers will require an encrypted connection for ActiveSync, and so will need to establish an SSL protected session. The server’s certificate may automatically be accepted by the BlackBerry device.
If the certificate is not accepted, you will see an error message, with the option to trust the certificate. It is likely that trusting the certificate directly from the error message will not resolve the issue, and your phone will subsequently give the error message: ‘The certificate could not be added to the Trusted Key Store due to IT Policy restrictions.’ To resolve this issue:
• Open the BlackBerry browser and go to your server URL specified in AstraSync. Generally this is your OWA address.
• Trust the certificate here following the popup that appears.
• Return to AstraSync to see whether the error has gone away.
If the problem still persists:
• On the device’s main menu, select Settings > Security Options > Certificates
• Find the ‘mail.example.com’ certificate relating to your server and select it
• Press ‘Menu’
• Select ‘Trust’
• Press ‘Menu’ again on the certificate
• Select ‘Details’
• Select ‘Fetch Status’