So you've got your brand spanking new PDA or phone with push email thinking it will work nicely out of the box with exchange.....wrong!

Firstly if you've already spent time on this and are implementing this in a corporate environment don't waste more time with self signed or some cheap SSL certs as it will just cause more pain. Go straight over to Third-Party Certificates Compatible with Windows Mobile Powered Devices at MS and be done with it (Thawte & Verisign are more expensive but it 'just works') p.s If you have windows mobile 5 with MSFP the cheap GoDaddy TurboSSL cert may also work, it did for me. (note the addition of MSFP which is a requirement)

Here are some of my mental notes for the basics:

And a list of annoying error messages with fixes that worked for me