If you have issued SSL certificates using your own Windows Certificate Authority or bought certificates from a third party verdor like Equifax, OpenSSL or Verisign that contain multiple intermediate certificates in the chain for Outlook Web Access or Exchange Activesync, you will realize that you need to install *all* the certificates in the certificate chain for Exchange Activesync to work properly. It was a time consuming (and confusing for some) process untill now. The Windows Mobile team has introduced a free tool that automatically saves all the certificates in the chain to the desktop. This tool can also create an CertificateStore XML file which can be pushed over rapiconfig or put in a CAB file for installation on devices.

Here is a step by step on how to use this tool:

1) Download this tool here
2) Extract the contents of the Zip file into a folder on your desktop say C:\Test
3) Open the command prompt and navigate to C:\Test\bin\release by typing cd C:\Test\bin\release
4) Type sslchainsaver mail.yourdomain.com
5) All the certificates (root and intermediate) are extracted to a folder under C:\Test\bin\release named mail.yourdomain.com
6) Copy all the certificates to your device
7) Install them one by one on the device by tapping on them in the same order as listed on the actual certificate from File Explorer
8) Soft reset your device and thats it.

You can also use the mail.yourdomain.com.xml that gets created under C:\Test\bin\release to create a cab file for large scale device deployement.