Page 3 - Contents
Contents 1 Document revision history.................................................................................................................6 2 What's New in BlackBerry Enterprise Server 5.0 SP4.........................................................................7 3 Overview: BlackBerry...
Page 6 - Document revision history
Document revision history Date Description 14 February 2013 Initial version 7 November 2013 Updated for maintenance release 6 1 Feature and Technical Overview Document revision history 6
Page 10 - Architecture: BlackBerry Enterprise Server
BlackBerry Enterprise Server architecture Architecture: BlackBerry Enterprise Server The BlackBerry Enterprise Server consists of various components that are designed to perform the following actions:• Permit BlackBerry device users to access your organization's tools and data from BlackBerry device...
Page 14 - Architecture: Remote BlackBerry
Component Description Users can install the BlackBerry Device Manager when they install the BlackBerry Desktop Software or at another time. The BlackBerry Device Manager is an optional component, but it is required to support a bypass connection to the BlackBerry Router. Architecture: Remote BlackBe...
Page 17 - Architecture: Remote BlackBerry Router
Component Description BlackBerry Administration Service The BlackBerry Administration Service permits you to manage the BlackBerry MDS Connection Service, configure the central push server, and configure the browsing and application features. BlackBerry Configuration Database The BlackBerry Configur...
Page 24 - BlackBerry Administration Service
BlackBerry Enterprise Server components and features BlackBerry Administration Service The BlackBerry Administration Service is a web application you use to manage user accounts; assign user groups, administrative roles, and software configurations and apply IT policies to user accounts; and manage ...
Page 25 - BlackBerry Configuration Panel
Feature Description and known only to the BlackBerry Administration Service. Alternatively, you can use external authentication, which permits administrators to log in to the BlackBerry Administration Service using the same information that administrators use to access your organization's messaging ...
Page 26 - Contact information that the BlackBerry Mail Store
Database tables in the BlackBerry Configuration Database that store contact information The BlackBerry Mail Store Service synchronizes contact information to two database tables in the BlackBerry Configuration Database. Table name Description MsDomains This table contains a list of domains and messa...
Page 27 - How the BlackBerry Mail Store Service accesses; Configuring the BlackBerry Mail Store Service instance
Contact information Database property name Database property name in BlackBerry Configuration Database version 4.1 Description mailbox path MailboxKey UserConfig.MailboxDN This property specifies the unique mailbox path. messaging server path ServerName UserConfig.ServerDN This property specifies th...
Page 28 - BlackBerry messaging and collaboration; BlackBerry Messaging Agent; Wireless messaging features
contact list, the BlackBerry Configuration Database might not contain the contact information for all user accounts on your organization's messaging server.If the BlackBerry Configuration Database does not contain contact information for a user account, you cannot create the user account by searchin...
Page 31 - BlackBerry Collaboration Service
Feature Description personal contact subfolders Users with BlackBerry devices that are running BlackBerry Device Software version 5.0 or later can view personal contact subfolders on their BlackBerry devices and change contact information.Users can specify which contact subfolders that they want to ...
Page 32 - Instant messaging features
• BlackBerry Client for use with Microsoft Office Communications Server 2007• BlackBerry Client for use with Microsoft Office Communications Server 2007 R2• BlackBerry Client for use with Microsoft Lync Server 2010• BlackBerry Client for IBM Sametime• BlackBerry Client for Novell GroupWise Messenger...
Page 34 - BlackBerry Synchronization Service; Synchronization features
Feature Description BlackBerry Client for use with Microsoft Office Communications Server 2007, users can send instant messages to contacts that are not included in their contact lists. dormant mode The collaboration clients enter dormant mode after five minutes of inactivity. In dormant mode, the a...
Page 35 - BlackBerry Attachment Service
Feature Description between BlackBerry devices and email applications. You can use IT policies to configure the settings for wireless data synchronization. support for different types of user access The BlackBerry Enterprise Server requires access to the organizer application databases for all users...
Page 36 - BlackBerry MDS Connection Service
Format Extension audio .amr, .mp3, .wav, .wma Corel WordPerfect 7-10 .wpd HTML .htm, .html images .bmp, .gif, .jpeg, .jpg, .png, .ppm, .tif, .tiff, .wmf Microsoft Excel 97-2003, 2007, 2013*, and XP .xls, .xlsx Microsoft PowerPoint 97-2003, 2007, 2013*, and XP .pps, .ppsx, .ppt, .pptx Microsoft Word ...
Page 38 - BlackBerry Applications; BlackBerry Browser Applications; BlackBerry Java Applications
BlackBerry Applications BlackBerry devices support BlackBerry Applications and BlackBerry Browser Applications. Application developers in your organization can create BlackBerry Applications using BlackBerry development tools or third-party development tools. You can install and manage BlackBerry Ja...
Page 40 - BlackBerry device management; Controlling third-party applications on BlackBerry; BlackBerry Policy Service
BlackBerry device management You can use the BlackBerry Enterprise Server to control how you implement, maintain, and upgrade BlackBerry devices across your organization. Controlling third-party applications on BlackBerry devices Feature Description control the installation and removal of third-part...
Page 41 - BlackBerry Router
Feature Description wireless delivery When you configure an IT policy, all rules take effect when the BlackBerry Policy Service delivers the IT policy to a BlackBerry device over the wireless network. The BlackBerry device stores new IT policy rule values in the user configurations on the BlackBerry...
Page 42 - BlackBerry Web Desktop Manager
When the BlackBerry Enterprise Server detects a BlackBerry Router, it identifies the IP address of the computer that hosts the BlackBerry Router and writes the IP address to the BlackBerry Configuration Database. When BlackBerry device users activate devices that are running BlackBerry Device Softwa...
Page 43 - Comparison of BlackBerry Web Desktop Manager and
Feature Description BlackBerry Device Software management Users can use the BlackBerry Web Desktop Manager to update the BlackBerry Device Software on their BlackBerry devices. control user's access to features You can specify the BlackBerry Web Desktop Manager features that users can access using I...
Page 50 - Algorithms that the BlackBerry Enterprise Solution; How the BlackBerry Enterprise Solution uses AES to encrypt data
Encrypting data that the BlackBerry Enterprise Server and a BlackBerry device send to each other To encrypt data that is in transit between the BlackBerry Enterprise Server and a BlackBerry device in your organization, the BlackBerry Enterprise Solution uses BlackBerry transport layer encryption. Bl...
Page 52 - Encrypting the device transport key on a
• if you use software tokens, contents of the .sdtid file seed that is stored in flash memory• all data that is associated with third-party applications that a user installs on the device• in the BlackBerry Browser, content that web sites or third-party applications push to the device, any web sites...
Page 53 - Using an IT policy to manage BlackBerry
You can configure an allowed list to determine which devices can access a BlackBerry Enterprise Server. A device that meets the criteria that you specify in the allowed list can associate with the BlackBerry Enterprise Server when the device activates over the wireless network.You can define the fol...
Page 54 - Using IT administration commands to
For more information, see the BlackBerry Enterprise Server Policy Reference Guide. Using IT administration commands to protect a lost or stolen device The BlackBerry Enterprise Server includes IT administration commands that you can send over the wireless network to protect sensitive data on a Black...
Page 56 - BlackBerry Enterprise Server high
BlackBerry Enterprise Server high availability High availability permits you to provide minimum downtime for BlackBerry services if BlackBerry Enterprise Server components stop responding or if they require maintenance. BlackBerry Enterprise Server high availability consists of a minimum of two Blac...
Page 57 - How the BlackBerry Enterprise Server
Both BlackBerry Enterprise Server instances in the BlackBerry Enterprise Server pair include, by default, the BlackBerry Attachment Service, BlackBerry Dispatcher, BlackBerry MDS Connection Service, BlackBerry Messaging Agent, BlackBerry Policy Service, BlackBerry Router, and BlackBerry Synchronizat...
Page 58 - Conditions for failover to a standby; How a primary BlackBerry Enterprise Server
The BlackBerry Enterprise Server components calculate their health scores by examining their operating health, the stability of their connections to other components, and the health scores of the other components.The health score of the BlackBerry Enterprise Server consists of various health paramet...
Page 59 - health score is above the promotion threshold; health score is below the promotion threshold
• informs the standby BlackBerry Enterprise Server that it self-demoted Scenario: What happens after a primary BlackBerry Enterprise Server stops responding If a primary BlackBerry Enterprise Server stops responding, the standby BlackBerry Enterprise Server performs one of two actions depending on w...
Page 60 - BlackBerry Configuration Database high
Scenario: What happens after the health score of a primary BlackBerry Enterprise Server falls below the failover threshold The following scenario can occur if the messaging server, BlackBerry Infrastructure, and BlackBerry Configuration Database are available.1. The standby BlackBerry Enterprise Ser...
Page 61 - BlackBerry Configuration Database mirroring
database stops responding, the BlackBerry Enterprise Server opens an active connection to the mirror database automatically. Database mirroring provides fault tolerance for the BlackBerry Enterprise Solution.If your organization's environment includes a version of Microsoft SQL Server that is earlie...
Page 62 - Scenario: What happens after the principal BlackBerry; the mirror BlackBerry Configuration Database
The primary BlackBerry Enterprise Server connects to the messaging server and processes the messaging data that it sends to and receives from BlackBerry devices.The standby BlackBerry Enterprise Server opens standby connections to the principal BlackBerry Configuration Database and the messaging ser...
Page 65 - Wi-Fi enabled devices; Types of Wi-Fi networks
Wi-Fi enabled devices Wi-Fi enabled BlackBerry devices permit users with qualifying data plans to access BlackBerry services over a mobile network, Wi-Fi network, or both networks simultaneously.When users can access a mobile network and Wi-Fi network simulaneously, users can perform multiple tasks ...
Page 66 - Wireless access points
Type Description permit VPN connections through the firewall. You can configure a home Wi-Fi network with layer 2 security and password authentication. You must configure BlackBerry devices to support the authentication that the home Wi-Fi network requires.A home Wi-Fi network permits users to acces...
Page 68 - Connecting Wi-Fi enabled BlackBerry; Direct connections between BlackBerry devices and
Component Description BlackBerry Internet Service The BlackBerry Internet Service is an email and Internet service for BlackBerry devices that is designed to provide subscribers with automatic delivery of email messages, mobile access to email message attachments, and convenient access to Internet c...
Page 69 - Wi-Fi connection when a VPN connection or direct
After BlackBerry devices connect to the Wi-Fi network using a Wi-Fi profile, the BlackBerry devices try to make a direct IP connection to the BlackBerry Router. With some network architectures, a VPN session might be required to complete the direct connection to the BlackBerry Router.Wi-Fi enabled B...
Page 70 - BlackBerry services that are available over
BlackBerry services that are available over Wi-Fi connections For more information about supported services and features, contact your organization's wireless service provider. Not all BlackBerry data plans support Wi-Fi access to BlackBerry data services.When you configure a Wi-Fi network to open a...
Page 72 - Characteristics of the IEEE 802.11a wireless
BlackBerry services Service provider with GSM/EDGE network or UMA network Wi-Fi network and service provider with GSM/EDGE network Wi-Fi network and no service provider with GSM/EDGE network or UMA, and no UMA available Enterprise Wi-Fi network and service provider with GSM/EDGE network, and no UMA,...
Page 73 - Characteristics of the IEEE 802.11b wireless
Characteristic Description nonoverlapping channels up to 19 sources of interference • Bluetooth wireless technology• some satellite systems• 5 GHz cordless phones throughput speed 23 Mbps Characteristics of the IEEE 802.11b wireless networking standard that Wi-Fi enabled BlackBerry devices support C...
Page 74 - Security features of a Wi-Fi enabled device
Characteristics of the IEEE 802.11g wireless networking standard that Wi-Fi enabled BlackBerry devices support Characteristic Description fallback speeds 48, 36, 24, 18, 12, 9, and 6 Mbps frequency 2.4 GHz maximum speed 54 Mbps nonoverlapping channels 3 sources of interference • Bluetooth wireless t...
Page 76 - Messaging process flows; Process flow: Sending a message to a BlackBerry
BlackBerry Enterprise Server process flows Messaging process flows Process flow: Sending a message to a BlackBerry device 1. A message arrives in a user’s mailbox. Microsoft Exchange notifies the BlackBerry Messaging Agent.2. The BlackBerry Messaging Agent applies global filter rules to the messages...
Page 77 - Process flow: Sending a message from a BlackBerry
7. The BlackBerry device sends a delivery confirmation to the BlackBerry Dispatcher. The BlackBerry Dispatcher sends the delivery confirmation to the BlackBerry Messaging Agent.If the BlackBerry Messaging Agent does not receive a delivery confirmation within four hours, it sends the message to the w...
Page 79 - Process flow: Searching an organization's address
7. The BlackBerry Messaging Agent verifies the validity of the attachment content, and stores the content in memory as the content arrives.During the delivery of the attachment content, if the BlackBerry Messaging Agent does not receive content from the BlackBerry device for 15 minutes, the BlackBer...
Page 80 - Instant messaging process flows; Process flow: Starting an instant messaging session
8. The BlackBerry device sends a delivery confirmation to the BlackBerry Dispatcher, which sends it to the BlackBerry Messaging Agent.If the BlackBerry Enterprise Server does not receive a delivery confirmation within four hours, it resubmits the contact lookup results to the wireless network. 9. Th...
Page 88 - Message attachment process flows; Process flow: Viewing a message attachment
9. The BlackBerry Collaboration Service requests the file size from the IBM Sametime server, and sends data to the IBM Sametime server to begin the file transfer process.By default, the media transfer state on the BlackBerry Collaboration Service is set to transfer. 10. The sender's client sends the...
Page 89 - Process flow: Viewing an attachment using a link
1. A user receives a message with an attachment on a BlackBerry device.2. The BlackBerry Messaging Agent verifies that the format of the attachment is valid for conversion. If the format is not valid and the user’s BlackBerry device is based, the Open Attachment menu item does not appear on the user...
Page 91 - Organizer data process flows; Process flow: Synchronizing organizer data for the first
Organizer data process flows Process flow: Synchronizing organizer data for the first time on a BlackBerry device 1. A user activates a new BlackBerry device or upgrades an existing BlackBerry device and receives the service book for the BlackBerry Synchronization Service. 2. The BlackBerry device r...
Page 92 - Process flow: Synchronizing subsequent changes to
the appropriate location. The BlackBerry device and BlackBerry Enterprise Server do not delete records during the initial synchronization process.After the BlackBerry Synchronization Service registers a database for wireless data synchronization, it can no longer be synchronized or restored using th...
Page 94 - Mobile data process flows; Process flow: Requesting BlackBerry Browser content
The BlackBerry device compresses and encrypts the request, and sends the request to the BlackBerry Dispatcher over port 3101. 3. The BlackBerry Dispatcher uses the device transport key of the BlackBerry device to decrypt and decompress the request, and sends the request to the BlackBerry Synchroniza...
Page 98 - Process flow: Pushing application content to a
5. The BlackBerry Dispatcher compresses the content, encrypts it using the device transport key of the BlackBerry device, and sends the encrypted content to the BlackBerry Router. 6. The BlackBerry Router sends the encrypted content to the wireless network over port 3101.7. The wireless network veri...
Page 99 - Process flow: Installing a BlackBerry Java Application
User accounts that do not appear in the BlackBerry Configuration Database, or that are pending deletion, cannot receive the push content.The central push server responds to the push application to acknowledge that it is processing the request, and sends the push content to the BlackBerry MDS Connect...
Page 101 - Process flow: Activating a BlackBerry device over the
BlackBerry device management process flows Process flow: Activating a BlackBerry device over the wireless network A user receives or purchases a new BlackBerry device.1. The user contacts your organization's IT department to activate the BlackBerry device.2. You create a temporary activation passwor...
Page 103 - Glossary
Glossary AES Advanced Encryption Standard AJAX Asynchronous JavaScript and XML API application programming interface ASCII American Standard Code for Information Interchange BlackBerry Domain A BlackBerry Domain consists of the BlackBerry Configuration Database with its users and any BlackBerry Ente...
Page 107 - Provide feedback
Provide feedback To provide feedback on this content, visit www.blackberry.com/docsfeedback . 11 Feature and Technical Overview Provide feedback 107
Page 108 - Legal notice
Legal notice © 2013 BlackBerry. All rights reserved. BlackBerry ® and related trademarks, names, and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world.Adobe and Acrobat are trademarks of Adobe Systems Incorporated. Bluetooth is a t...