BlackBerry SWD-20120924140022907 - Manuals

Log in to the BlackBerry Administration Service for the first time To open the BlackBerry Administration Service, you can use a browser on any computer that has access to the computerthat hosts the BlackBerry Administration Service. Before you begin: To manage a BlackBerry device using the BlackBerr...

Possible solution Add the web address for the BlackBerry Administration Service to the list of trusted web sites in Windows Internet Explorer,and install the certificate for the BlackBerry Administration Service in the certificate store of your computer.1. In Windows Internet Explorer, navigate to t...

Creating administrator accounts Administrative roles and permissions You create roles for administrator accounts or assign preconfigured roles to administrator accounts so that you can specify what tasks an administrator can perform on the BlackBerry Enterprise Server.You can specify the actions tha...

Permission name Security role Enterprise role Senior Helpdesk role Junior Helpdesk role Server only role User only role Import or export groupswithin roles X Import new users X X X Import or export users X X X X Import user updates X X X Import or export emailmessage filters for a user X X X Export ...

2. Click Create a role . 3. Type a name and description for the role. 4. Click Save . 5. In the Role information section, click the name of the role that you created. 6. Click Edit role . 7. Switch the appropriate tabs to turn on the appropriate permissions. 8. Click Save all . After you finish: Ass...

If your environment includes a Microsoft Exchange resource forest, you must create the administrator account in theresource forest. Before you begin: Verify that you can configure the authentication type and roles for an administrator account. 1. In the BlackBerry Administration Service, on the Blac...

Related information Create a group to manage similar user accounts, 84 Specify an email address for the BlackBerry Administration Service You can specify the email address that the BlackBerry Administration Service sends BlackBerry Enterprise Server systemmessages or activation passwords from. Befor...

Using an IT policy to manage BlackBerry Enterprise Solution security You can use an IT policy to control and manage BlackBerry devices, the BlackBerry Desktop Software, and the BlackBerry Web Desktop Manager in your organization's environment. An IT policy consists of multiple IT policy rules that m...

To use an IT policy rule on a BlackBerry device, you must verify that the BlackBerry Device Software version supports the IT policy rule. For example, you cannot use the Disable Camera IT policy rule to control whether a BlackBerry device user can access the camera on the device if the BlackBerry De...

Preconfigured IT policy Description Medium Security with No 3rd PartyApplications Similar to the Medium Password Security, this policy requires a complexpassword that a user must change frequently, a security timeout, and amaximum password history. This policy prevents users from making theirdevices...

IT policy rule Default IT policy Individual- Liable Device IT policy Basic Password Security IT policy Medium Password Security IT policy Medium Password Security with No 3rd Party Applications IT policy Advanced Security IT policy Advanced Security with No 3rd Party Applications IT policy Disable F...

b. Click Edit IT policy . c. On a tab for an IT policy group, configure values for the IT policy rules. d. Click Save All . After you finish: For more information, see the BlackBerry Enterprise Server Policy Reference Guide . Create an IT policy based on an existing IT policy 1. In the BlackBerry Ad...

• Location of the data source file• File encryption password that you use to protect the data source file 5. Click Next . 6. Click Add all IT policies . Related information Preconfigured IT policies, 40 Import IT policy rules from an IT policy pack You can import the IT policy rules that Research In...

Assign an IT policy to a group 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Group . 2. Click Manage groups . 3. In the Manage groups section, click the group that you want to assign an IT policy to. 4. On the Policies tab, click Edit group . 5. In t...

Sending an IT policy over the wireless network If your organization's environment includes C++ based BlackBerry devices that are running BlackBerry Device Software version 2.5 or later or Java based devices that are running BlackBerry Device Software version 3.6 or later, the BlackBerry Enterprise S...

Option 1: Applying one IT policy to each user account, 50 Option 2: Applying multiple IT policies to each user account, 51 Option 1: Applying one IT policy to each user account You can configure the BlackBerry Enterprise Server to apply only one IT policy to a user account when a user account is a m...

Change the method that the BlackBerry Enterprise Server uses to resolve conflicting IT policies You can change the method that the BlackBerry Enterprise Server uses to determine what IT policy to apply to a useraccount when a user account belongs to multiple groups that have different IT policies. I...

BlackBerry Enterprise Server resolves the conflicting rules. The preview displays the conflicting IT policy rules and theresolved settings for each rule. If an IT policy rule is not conflicting in the multiple IT policies that you selected, the previewdoes not display the policy rule in the results....

expires. If the time limit expires, the BlackBerry Enterprise Server deactivates the BlackBerry device PINs. The permitted range for this option is 0 hours to 8760 hours. If you specify 0 hours, BlackBerry devices deactivate when the IT policy cannot apply automatically. Deactivate BlackBerry device...

5. In the Destination drop-down list, choose whether you want the BlackBerry device, the BlackBerry Desktop Software, or both to be able to use the IT policy rule. 6. Click Save . After you finish: Add the IT policy rule to an IT policy. Change or delete IT policy rules for third-party applications ...

10. Click Close . Delete an IT policy 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy . 2. Click Manage IT policies . 3. In the list of IT policies, click an IT policy. 4. Click Delete IT policy . 5. Click Yes – Delete the IT policy . Related in...

Configuring security options Encrypting data that the BlackBerry Enterprise Server and a BlackBerry device send to each other To encrypt data that is in transit between the BlackBerry Enterprise Server and a BlackBerry device in your organization, the BlackBerry Enterprise Solution uses BlackBerry t...

Change the symmetric key encryption algorithm that the BlackBerry Enterprise Solution uses 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > BlackBerry Enterprise Server . 2. Click the ...

The BlackBerry Administration Service includes lists of permitted manufacturers and models of devices that you associated with the BlackBerry Enterprise Server previously.You can permit a user to override the Enterprise Service Policy so that a device can connect to the BlackBerry Enterprise Server ...

Permit a user to override the Enterprise Service Policy Before you begin: Turn on the Enterprise Service Policy. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User . 2. Click Manage users . 3. Search for a user account. 4. Click the display name for ...

To require the BlackBerry device user to use PGP encryption when forwarding or replying to messages, you can configure the PGP Force Digital Signature IT policy rule and the PGP Force Encrypted Messages IT policy rule.The PGP Support Package for BlackBerry smartphones is designed to support encoding...

Enforcing secure messaging using classifications You can use message classifications to require S/MIME-enabled users or PGP enabled users to sign, encrypt, or sign and encrypt email messages that they send from the BlackBerry devices.You use the Message Classification IT policy rule to configure one...

Delete a message classification 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy . 2. Click Manage IT policies . 3. In the list of IT policies, click an IT policy. 4. Click Edit IT policy . 5. On the Security tab, at the bottom of the screen, cli...

• You or a BlackBerry device user turns on content protection for the BlackBerry device.• An application uses the RIM Cryptographic API to create a private key or symmetric key.• A third-party application turns on the garbage collection process by registering with the memory cleaner application on t...

For more information about the IT policy rules that you can use to change when the memory cleaner application runs, see the BlackBerry Enterprise Server Policy Reference Guide . Best practice: Configuring additional memory cleaner settings for BlackBerry devices Scenario Recommendation Remove decryp...

Configuring the BlackBerry Enterprise Server environment Best practice: Running the BlackBerry Enterprise Server Best practice Description Do not change the startup type for the BlackBerry Enterprise Server services. When you install or upgrade the BlackBerry Enterprise Server, the setup application...

Configuring certain BlackBerry Enterprise Server components to use proxy servers You can configure the BlackBerry MDS Connection Service and the BlackBerry Collaboration Service to use proxy servers to access web addresses on the Internet and your organization's intranet. You should use a proxy meth...

Configure a BlackBerry Enterprise Server component to authenticate to a proxy server on behalf of BlackBerry devices You can configure the BlackBerry MDS Connection Service and the BlackBerry Collaboration Service to authenticate to aproxy server on behalf of BlackBerry devices. Before you begin: If...

Configuring multiple BlackBerry Enterprise Server instances to use the same BlackBerry Enterprise Server component To help make a BlackBerry Domain more scalable, you can configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry MDS Connection Service or BlackBerry Collabo...

Configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry Collaboration Service You can configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry Collaboration Service toconnect to your organization's instant messaging server, and to manage reque...

• If you are running a 32-bit version of Windows, go to HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion \BlackBerry Enterprise Server\Agents. • If you are running a 64-bit version of Windows, go to HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node \Research In Motion\BlackBerry Enterprise Server\Agents. 5. If ...

3. Click OK . 4. Perform one of the following actions:• If you are running a 32-bit version of Windows, go to HKEY_LOCAL_MACHINE\SOFTWARE\Research In Motion \BlackBerry Enterprise Server\Agents. • If you are running a 64-bit version of Windows, go to HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node \Research...

Configuring user accounts Creating user groups You can create user groups and assign user accounts to user groups based on custom criteria, such as user location, organizational group, or BlackBerry device model. User accounts that are part of a user group can exist on multiple BlackBerry Enterprise...

1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User . 2. Click Manage users . 3. Search for the user accounts. 4. Select the user accounts. 5. In the Add to user configuration list, click Add group . 6. In the Available groups list, click the group th...

8. Click Add . 9. To select an activation option, perform one of the following actions: Option Step Specify an activation password for the user account. 1. Click Create a user with activation password . 2. In the Set activation password , section, type and confirm an activation password. The passwor...

Assigning BlackBerry devices to users Preparing to distribute a BlackBerry device Before you distribute a BlackBerry device to a user, you can configure the BlackBerry Enterprise Server to synchronize email messages that the user previously sent and received on a supported BlackBerry device. You can...

• To specify the number of previous days that you want to synchronize messages from, in the Prepopulation By message age field, type a number. • To specify the maximum number of messages that you want to synchronize, in the Prepopulation By message count field, type a number. 5. Click Save all . Pre...

4. In the search results, click the display name for the user account. 5. In the Device activation list, click Specify an activation password . 6. In the Activation password and Confirm password fields, type an activation password. The password must not contain special characters. Some BlackBerry de...

Option 4: Activating BlackBerry devices using the BlackBerry Web Desktop Manager Users can activate their BlackBerry devices by connecting them to computers using a USB cable or Bluetooth connection and logging in to the BlackBerry Web Desktop Manager. During the activation process, the BlackBerry W...

Configuring BlackBerry Enterprise Server high availability Check the health of a BlackBerry Enterprise Server If you configured BlackBerry Enterprise Server high availability, you can check the health of a BlackBerry Enterprise Serverinstance to verify that it is running as expected.1. In the BlackB...

receives this information in real time from the BlackBerry Enterprise Server instance so that the failover status is always up- to-date. How the BlackBerry Enterprise Server uses health parameters The BlackBerry Enterprise Server uses health parameters to define the failover and promotion thresholds...

Configuring failover to occur when the standby BlackBerry Enterprise Server is in a healther state than the active BlackBerry Enterprise Server If you move the failover threshold and promotion threshold so that the promotion threshold is lower than the failover threshold, failover occurs only if the...

Health parameter Description Attachment viewing This health parameter indicates whether the BlackBerry Messaging Agent canprovide services for attachment viewing. Connection to the BlackBerryConfiguration Database This health parameter indicates whether BlackBerry Enterprise Servercomponents can con...

Prerequisites: Configuring the BlackBerry Enterprise Server pair to fail over automatically • Install a primary BlackBerry Enterprise Server.• Install a standby BlackBerry Enterprise Server. For more information about installing a standby BlackBerry Enterprise Server, see the BlackBerry Enterprise S...

Monitoring the BlackBerry Enterprise Server for an automatic failover event You can use the BlackBerry Monitoring Service, BlackBerry Enterprise Server Alert Tool, or another SNMP monitoring tool to monitor the BlackBerry Enterprise Server for an automatic failover event and notify you when an autom...

Configuring high availability for BlackBerry Enterprise Server components Creating a BlackBerry MDS Connection Service pool for high availability To configure BlackBerry MDS Connection Service high availablity, you can create a BlackBerry MDS Connection Service pool for each BlackBerry Enterprise Se...

6. Click Save all . 7. Repeat steps 3 to 6 for each BlackBerry Enterprise Server instance in your organization's environment that you want to configure to use a BlackBerry MDS Connection Service pool. Related information Remove a BlackBerry MDS Connection Service instance from a pool, 122 Configure ...

10. Repeat steps 2 to 9 for each BlackBerry Enterprise Server instance in your organization's environment that you want to have use a BlackBerry Router pool. Related information Remove a BlackBerry Router instance from a pool, 124 Restarting BlackBerry Enterprise Server components, 392 Permit a Blac...

Configure the BlackBerry Administration Service instances in a pool to communicate across network subnets The instances in the BlackBerry Administration Service pool use multicast UDP to communicate with each other. If theBlackBerry Administration Service instances are located in different network s...

Change the name of the BlackBerry Administration Service pool Before you begin: If you want to configure high availability for the BlackBerry Administration Service by creating a BlackBerry Administration Service pool using DNS round robin, create the DNS record that represents the BlackBerryAdminis...

When you navigate to another page in the BlackBerry Administration Service, the BlackBerry Administration Service turns off the refresh option, and you must turn it on again manually when you return to the page that displays the status.If more than one administrator logs in to the BlackBerry Adminis...

Remove a BlackBerry Collaboration Service instance from a pool You can remove a BlackBerry Collaboration Service instance from a pool if your organization no longer requires it or totroubleshoot an issue.1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBer...

Configuring BlackBerry Configuration Database high availability You can configure BlackBerry Configuration Database high availability by configuring database mirroring. Database mirroring requires that you configure a principal BlackBerry Configuration Database instance and a mirror BlackBerry Confi...

• If you turned on the automatic failover option for the BlackBerry Enterprise Server, use the BlackBerry Administration Service to change the failover type to Manual until you finish configuring database mirroring or database replication. • If you are configuring database mirroring, configure the d...

2. Repeat step 1 for each BlackBerry Enterprise Server component that connects to the BlackBerry Configuration Database. Configure database mirroring for the BlackBerry Configuration Database For more information about database mirroring, visit http://msdn2.microsoft.com/en-us/library/ms175059(SQL.9...

• BlackBerry Alert• BlackBerry Mail Store Service• BlackBerry User Administration Service• all of the remaining BlackBerry Enterprise Server services 2. Repeat step 1 for each BlackBerry Enterprise Server component that connects to the BlackBerry Configuration Database. Related information Restartin...

Start the BlackBerry Enterprise Server instances After you configure the database, permit all BlackBerry Enterprise Server instances to connect to the principal BlackBerryConfiguration Database.1. On the computers that host the BlackBerry Enterprise Server components, in the Windows Services, start ...

To configure the BlackBerry Enterprise Server instances and components, you delete the pull subscription from the replicated database server, run a SQL query to update the numbering of the identity values in the replicated BlackBerry Configuration Database, and run the BlackBerry Enterprise Server s...

Sending software and BlackBerry Java Applications to BlackBerry devices Managing BlackBerry Java Applications and BlackBerry Device Software You can use the BlackBerry Administration Service to install and manage the BlackBerry Device Software and BlackBerry Java Applications on BlackBerry devices.T...

After you install the BlackBerry Device Software and BlackBerry Java Applications on devices, you can view details about how the BlackBerry Administration Service resolved software configuration conflicts.For more information about installing and managing the BlackBerry Device Software on devices, v...

Specify keywords for a BlackBerry Java Application You can specify keywords for a BlackBerry Java Application. You can use the keywords to search for the application in theapplication repository.1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software ...

10. Click Save all . IT policy rules take precedence on smartphones IT policy rule settings override application control policy rule settings. For example, if you change the Allow Internal Connections IT policy rule to No for BlackBerry smartphones, and if the smartphones have an application control...

2. Click Manage application control policies for unlisted applications . 3. Click the Standard Unlisted Optional application control policy. 4. Click Edit application control policy . 5. On the Access settings tab, in the Settings section, configure the settings for the application control policy. 6...

1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software . 2. Click Manage application control policies for unlisted applications . 3. Click Set priority of application control policies for unlisted applications . 4. Click the up and down arrows to set...

• To install the BlackBerry Java Application automatically on BlackBerry devices, and to prevent users from removing the application, click Required . • To permit users to install and remove the BlackBerry Java Application, click Optional . • To prevent users from installing a BlackBerry Java Applic...

Assign a software configuration to multiple user accounts 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User . 2. Click Manage users . 3. Search for one or more user accounts. 4. Select one or more user accounts. 5. In the Add to user configuration l...

When you assign a software configuration to a user account, the BlackBerry Administration Service creates a job to deliverthe resulting object to the BlackBerry device. Related information View the status of a job, 150 Managing the default distribution settings for jobs, 292 Managing the distributio...

View the status of a job After you assign a software configuration to user accounts or change an existing software configuration that you assigned touser accounts, the BlackBerry Administration Service creates a job to deliver BlackBerry Device Software, BlackBerry Javaapplications, or application s...

For information about changing the log level for a BlackBerry Enterprise Server component, visit www.blackberry.com/ support to read article KB04342. For information about obtaining the event log for a BlackBerry device, visit www.blackberry.com/support to read article KB05349. If the recommended ad...

If you want to delete a job, change the start date of the job to a date that exceeds the job failure period that you configured in the job schedule settings. The default job failure period is 30 days. Related information Change default settings for a job schedule, 292 Specify the start time and prio...

Reconciliation rules: BlackBerry Java Applications Scenario Rule Multiple software configurations are assigned to a useraccount or the groups the user belongs to. MultipleBlackBerry Java Applications are contained in eachsoftware configuration. The BlackBerry Java Applications in each softwareconfig...

Scenario Rule successfully, the application with the dependency is theninstalled. A software configuration is assigned to a user account andit contains a BlackBerry Java Application that has adependency on another BlackBerry Java Application. Thedependent application is not supported on the BlackBer...

Reconciliation rules: Standard application settings Scenario Rule A software configuration with standard application settingsis assigned to a user account. A software configuration withdifferent standard application settings is assigned to agroup that the user account belongs to. The standard applic...

Alternative methods for installing BlackBerry Java Applications on BlackBerry devices Installing BlackBerry Java Applications on BlackBerry devices without using the BlackBerry Administration Service You can install and update BlackBerry Java Applications on BlackBerry devices without using the Blac...

BlackBerry devices using a user’s computer or over the wireless network. Application developers can use the BlackBerry JDE or the BlackBerry Java Plug-in for Eclipse to generate .cod files that contain the compiled application code for a BlackBerry Java Application. BlackBerry devices execute .cod f...

Method Description Install BlackBerry Java Applications using a web browser on BlackBerry devices You can install a BlackBerry Java Application on a BlackBerry device by installing the files for the BlackBerry Java Application on a web server and instructing the user to browse to the appropriate web...

• BlackBerry APIs and Java ME (standard on BlackBerry devices) User’s computer • Windows 2000 or later, Windows XP, or Windows Vista• BlackBerry Desktop Software version 4.0 or later• Research In Motion USB drivers and a USB connection for the BlackBerry device BlackBerry Java Application • .alx fil...

• Microsoft Internet Explorer version 5.0 or later• Microsoft ActiveX version 8.0 or later• BlackBerry Application Web Loader; if the BlackBerry Application Web Loader is not installed, the user is prompted to install it after the user browses to the specified web address • Research In Motion USB dr...

information about application dependencies, visit www.blackberry.com/developers to read the BlackBerry Java Development Environment Development Guide . • required BlackBerry Java Applications: To configure a BlackBerry Java Application as required on a BlackBerry device, in the .alx file, after the ...

BlackBerry Java Application • .jad file: The .jad file is the application descriptor that provides information about the application and the location of the application’s .cod or .jar files. • .cod or .jar files: These files contain compiled and packaged application code. Install the BlackBerry Java...

Configuring how users access enterprise applications and web content Specifying a BlackBerry MDS Connection Service as a central push server At least one BlackBerry MDS Connection Service in your organization's BlackBerry Domain must act as a central push server. Central push servers receive content...

Specify a BlackBerry MDS Connection Service as a central push server You can specify more than one BlackBerry MDS Connection Service in your organization's BlackBerry Domain as a centralpush server. By default, if one or two BlackBerry MDS Connection Service instances exist in the BlackBerry Domain,...

6. In the RSA inactivity timeout field, type a number, in minutes, to specify how long devices can remain connected to your organization's network while the users are inactive.By default, an authenticated connection persists for 60 minutes of user inactivity on the devices. 7. Click Save all . Relat...

Configure the maximum number of times that the BlackBerry Browser accepts HTTP redirections HTTP redirection occurs when the BlackBerry Browser requests a web page from a web server and the web serverredirects the request to a new web address for the page. The default limit is 5 redirections.1. In t...

Task Steps 3. When prompted, click Yes . 3. Copy the key store file to <drive> :\Program Files\Research In Motion\BlackBerry Enterprise Server\MDS\webserver . After you finish: Export the certificate for the BlackBerry MDS Connection Service to make it available to other applications. Export t...

After you finish: If the certificate does not exist, import the certificate to <drive> :\Program Files\Java\ <JRE version> \lib \security\cacerts . Permit push applications to select the transport protocol for PAP requests By default, when a push application sends a PAP request to the Bl...

2. Click MDS Connection Service . 3. Click Edit component . 4. On the TLS tab, in the Name field, type the name of a web server. 5. In the Service URL field, type the regular expression for the web address of the web server. 6. In the Settings section, in the Allow untrusted servers drop-down list, ...

Add a retrieved certificate for a web server to the key store You can use the Java keytool to add a certificate for a web server to the BlackBerry MDS Connection Service key store. Thecertificate permits the BlackBerry MDS Connection Service to connect to the trusted web server.1. Save the certifica...

Configure global login information for intranet site access 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > Component view . 2. Click MDS Connection Service . 3. On the HTTP tab, click Edit component . 4...

Setting up the messaging environment Creating email message filters You can create email message filters to define which email messages the BlackBerry Enterprise Server forwards from users’ email applications to their BlackBerry devices. When users receive email messages in the incoming message queu...

8. In the Enabled drop-down list, click Yes . 9. Click Continue to user information edit . 10. Click Save all . The BlackBerry Administration Service applies email message filters in the order that they are listed in. Copying existing email message filters to another BlackBerry Enterprise Server You...

4. On the Email message filters tab, click Import email message filters . 5. In the Import email message filters section, click Browse . Navigate to the .xml file that contains the email message filters that you want to import. 6. Click Import email message filters . 7. Click Save all . Copying exis...

4. In the search results, click the name of the user account. 5. Click Edit user . 6. In the Messaging configuration section, click Default configuration . 7. On the Email tab, at the bottom of the screen, click Import email filters . 8. In the Import email message filters section, click Browse . Na...

• If you are running a 32-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\Research In Motion \BlackBerry Enterprise Server\Agents. • If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\WOW6432Node \Research In Motion\BlackBerry Enterprise Server\Ag...

Change how a BlackBerry Messaging Agent uses extension plug-ins The BlackBerry Messaging Agent uses a BlackBerry Enterprise Server extension process to load extension plug-ins toprocess email messages. If you do not add an extension plug-in to the BlackBerry Administration Service, and you installth...

Mapping contact information fields for synchronization and contact lookups You can map contact information fields from the email applications on users' computers to the contact list fields on the BlackBerry devices. The information in the fields in the email applications synchronizes to the fields o...

Configuring BlackBerry devices to enroll certificates over the wireless network You can configure the BlackBerry Enterprise Server to permit BlackBerry devices to enroll certificates that the devices can use with any PKI-enabled application or process. You can permit devices to enroll the certificat...

Properties in the rimpublic.properties file Property Description application.handler.pkcs10.pollinginterval If the certificate authority requires a certificate administrator to approvecertificate requests, this property specifies the interval, in minutes, that theBlackBerry MDS Connection Service wa...

Making the BlackBerry Web Desktop Manager available to users Installing the client components of the BlackBerry Web Desktop Manager on users' computers By default, when users open and log in to the BlackBerry Web Desktop Manager for the first time, the browser prompts them to accept a client authent...

16. Expand Windows Components . 17. Click ActiveXInstaller Service . 18. Right-click Approved Installation Sites for ActiveX Controls . 19. Select Properties . 20. On the Settings tab, click Enabled . 21. Click Show . 22. Click Add . 23. In the Enter the name of the item to be added field, type the ...

13. Click Enabled . 14. Click OK . After you finish: For more information about registry-based Windows GPOs, visit technet.microsoft.com to read Using Administrative Template Files with Registry-Based Group Policy . Make the BlackBerry Web Desktop Manager available to users The BlackBerry Web Deskto...

Configuring the BlackBerry Web Desktop Manager You can configure the BlackBerry Web Desktop Manager to permit users to perform administrative tasks such as creating a password for wireless activation, locking a lost or stolen BlackBerry device, deleting data from a device, or deactivating a device.Y...

5. Click Save All . BlackBerry Web Desktop Manager text colors Parameter Description Default Font color 1 This text color specifies the hexadecimal color value of thedescription text in the BlackBerry Web Desktop Manager. #000000 (black) Font color 2 This text color specifies the hexadecimal color v...

Creating and configuring Wi-Fi profiles and VPN profiles Creating and configuring Wi-Fi profiles You can use Wi-Fi configuration settings and optional VPN configuration settings to manage BlackBerry devices that can operate on both mobile and Wi-Fi networks.You can manage the configuration settings ...

1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User . 2. Click Manage users . 3. Search for one or more user accounts. 4. Click the name of the user account that you want to assign a Wi-Fi profile to. 5. Click Edit user . 6. On the Wi-Fi profiles tab,...

4. Click Edit profile . 5. On the VPN profile settings tab, change the values for the configuration settings. 6. Click Save All . After you finish: • For information about VPN configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide . • To update BlackBerry device informat...

7. If required, in the VPN user specific settings section, specify the login information that you want to associate with the VPN profile. 8. Click the Add icon. 9. Click Save All . When you assign a VPN profile to a user account, the BlackBerry Administration Service creates a job to deliver theresu...

Delete a VPN profile Before you begin: Verify that the VPN profile is not assigned to a user account or associated with a Wi-Fi profile. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy > Wi-Fi configuration . 2. Click Manage VPN profiles . 3....

Field Description User Name This field specifies the user name that the BlackBerry device can use to accessthe enterprise Wi-Fi network or VPN, if a user name is required. Password This field specifies the password that the BlackBerry device can use to accessthe enterprise Wi-Fi network or VPN, if a...

Configuring encryption and authentication methods for Wi- Fi enabled BlackBerry devices For information about the encryption and authentication methods for Wi-Fi connections, see the BlackBerry Enterprise Solution Security Technical Overview . Configuring WEP encryption WEP encryption uses matching ...

1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy > Wi-Fi configuration . 2. Click Manage Wi-Fi profiles . 3. Click the name of the Wi-Fi profile that you want to change. 4. Click Edit profile . 5. On the Wi-Fi profile settings tab, configure t...

Configure PSK encryption data for BlackBerry devices using a Wi-Fi profile If BlackBerry device users in your organization's environment use BlackBerry 7270 smartphones, you must configurepassphrases using IT policy rules instead of configuration settings. Before you begin: Obtain the passphrase for...

Configure LEAP authentication data for BlackBerry devices using a Wi-Fi profile If BlackBerry device users in your organization's environment use BlackBerry 7270 smartphones, you must configure usernames and passwords using IT policy rules instead of configuration settings. Before you begin: • Using...

PEAP authentication requires that BlackBerry devices trust the authentication server certificate. To trust the authentication server certificate, BlackBerry devices must trust the certificate authority that issued the certificate. A certificate authority that the BlackBerry devices and the authentic...

• For more information about configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide . • Resend the IT policy that you assign to the user accounts to BlackBerry devices.• Distribute the certificates. Related information Creating and configuring Wi-Fi profiles, 235 Prerequ...

8. In the Security Warning dialog box, click Yes . 9. Connect the BlackBerry device to the BlackBerry Desktop Manager. 10. In the BlackBerry Desktop Manager, select the Certificate Synch tool. 11. Type a password that you can use as the keystore password.12. Perform one of the following actions: • I...

9. If necesssary, in the Server subject field, type the server name in the server certificate, in URL format (for example, server1.domain.com or server1.domain.net). If you leave the field blank, the BlackBerry device skips over it during server authentication. 10. If necesssary, in the Server SAN f...

Configure EAP-TLS configuration settings in the Wi-Fi profile on a BlackBerry device If you do not configure the EAP-TLS configuration settings using the BlackBerry Administration Service, instruct the usersto configure the settings in the Wi-Fi profile on the Wi-Fi enabled BlackBerry device.1. On t...

EAP-TTLS authentication requires that BlackBerry devices trust the authentication server certificate. To trust the authentication server certificate, BlackBerry devices must trust the certificate authority that issued the certificate. A certificate authority that the BlackBerry devices and the authe...

• For more information about configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide . • Resend the IT policy that you assign to the user accounts to Wi-Fi enabled BlackBerry devices.• Distribute the certificates. Related information Prerequisites: Distributing a certific...

Configuring EAP-FAST authentication EAP-FAST is an authentication method that was developed by Cisco Systems. Similar to PEAP authentication, EAP-FAST authentication encrypts EAP transactions within a TLS tunnel. Although PEAP uses a server-side digital certificate to configure the TLS tunnel, EAP-F...

Configuring software tokens for BlackBerry devices The BlackBerry Enterprise Server is designed to work with the RSA Authentication Manager to provide software token support for use with layer 2 and layer 3 Wi-Fi authentication on Wi-Fi enabled BlackBerry devices.When you configure a software token ...

• Import the token seed file (also known as the *.sdtid file) that contains the UID for each software token into the RSA Authentication Manager Database. • In the RSA Authentication Manager Database, create a user record for each software token holder.• In the RSA Authentication Manager Administrati...

6. Click Save All . After you finish: • Assign the VPN profile to the user accounts.• Resend the IT policy that you assign to the user accounts to BlackBerry devices. Assign software tokens to a user account You must assign the software tokens that BlackBerry device users can use to authenticate to ...

Changing the security settings of the BlackBerry Administration Service and BlackBerry Web Desktop Manager Import a new SSL certificate for the BlackBerry Administration Service and BlackBerry Web Desktop Manager When you install the BlackBerry Administration Service and BlackBerry Web Desktop Manag...

\web.keystore"). When the keytool prompts you for the first name and last name, type the pool name of the BlackBerry Administration Service. You can find the pool name in the Administration Service – High Availability tab. 4. If you want to use a trusted certificate, using the keytool, import th...

can use Microsoft Active Directory authentication to log users into the BlackBerry Administration Service console and the BlackBerry Web Desktop Manager.You must install the BlackBerry Enterprise Server in the resource forest if a resource forest exists in your organization's environment. In the res...

4. In the Login domain section, in the Single sign-on authentication for BlackBerry Administration Service turned on drop-down list, click Yes. 5. To configure the Microsoft Active Directory account for each forest, in the Account forest name section, type the user domain name, user name, and passwo...

Changing password settings for BlackBerry Administration Service authentication If you use BlackBerry Administration Service authentication in your organization's environment, you can change the minimum password length and the number of days until passwords expire to meet the requirements of your or...

Protecting and redistributing devices Preparing a device for redistribution to a new user You can prepare a BlackBerry device for redistribution to a new BlackBerry device user by performing one of the following actions:• use the security options on the device to permanently delete all user data• co...

6. Click Assign current device . 7. Search for the new user account that you want to assign the device to. 8. Select the user name. 9. Click Associate user . After you assign the user account to the device, the activation process begins automatically. 10. On the Devices menu, click Attached devices ...

Delete only work data from a device Before you begin: If you want to remove your organization's applications from the BlackBerry device, create a software configuration that includes the applications and set the disposition of all work applications to Disallowed in the softwareconfiguration. Assign ...

1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User . 2. Click Manage users . 3. Search for a user account. 4. In the search results, click the PIN for the user account. 5. In the Device activation section, click Specify new device password and lock d...

Managing administrator accounts Change role permissions To turn on or turn off permissions for administrator accounts, you can change the permissions for the roles that youassigned to the administrator accounts. If an administrator account is a member of a group that you assigned roles to, youcan al...

2. Click Manage users . 3. Search for an administrator account. 4. In the search results, click the display name for the administrator account. 5. Click Edit user . 6. On the Roles tab, in the Available roles and Current roles lists, add or remove the appropriate roles. 7. Click Save all . Related i...

Managing groups and user accounts Managing groups You can reduce the time that you spend managing user accounts by creating groups of similar user accounts and assigning shared properties, such as software configurations or IT policies, to the group. Properties that you assign to a group are assigne...

group consists of a set of preconfigured rules which specify the information that administrators can view and the tasks thatthey can perform using the BlackBerry Administration Service and BlackBerry Monitoring Service.The default groups ensure users without administrative privileges cannot escalate...

Managing user accounts You can move user accounts from one user group to another or from one BlackBerry Enterprise Server to another in the BlackBerry Domain. If you move a user account from one BlackBerry Enterprise Server to another, the destination BlackBerry Enterprise Server sends new service b...

1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view . 2. Click Email . 3. Click Refresh available user list from company directory . Resend service books to a BlackBerry device 1. In the Black...

Managing the delivery of BlackBerry Java Applications, BlackBerry Device Software, and device settings to BlackBerry devices Managing the default distribution settings for jobs When you create a software configuration and assign it to user accounts, change a software configuration that you assigned ...

1. In the BlackBerry Administration Service, on the Devices menu, expand Deployment jobs . 2. Click Specify job schedule settings . 3. Click Edit job schedule settings . 4. In the Default delay for each job section, in the Default delay field, type the number of minutes that the BlackBerry Administr...

Task Steps 3. Click the Add icon. 5. On the System throttling tab, in the Maximum number of simultaneous tasks per BlackBerry Administration Service instance field, type the maximum number of tasks that you want the BlackBerry Enterprise Server to process at the same time.The default value is 1000. ...

Task Steps Add a recurrence day for sending or updating standard application settings. To add more than one recurrence day, the schedules for the separate recurrence days cannot overlap.1. In the Scheduled deployment day(s) drop-down list, click the appropriate recurrence option. If necessary, click...

Managing software configurations Remove a software configuration from a group If you remove a software configuration from a group, the applications in the software configuration are removed from theBlackBerry devices that are associated with the user accounts that belong to the group.1. In the Black...

Managing how users access enterprise applications and web content Restricting user access to content on web servers You can prevent BlackBerry device users from accessing specific web servers using the BlackBerry Browser or applications on BlackBerry devices. To specify the web servers that you want...

7. Click Add . 8. Click Save . Restricting user access to media content in the BlackBerry Browser You can use standard definitions for MIME media types so that you can restrict the media types that the BlackBerry MDS Connection Service can send to the BlackBerry Browser and other applications on Bla...

1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view . 2. Click MDS Connection Service . 3. Click Edit component . 4. In the Media content type field, type the media type and subtype using stan...

Configure download limits for media content types, 312 Configuring Integrated Windows authentication so that users can access resources on your organization's network To permit BlackBerry device users to access resources on your organization's network using BlackBerry devices without requiring the u...

Configure the Microsoft Active Directory account to delegate access to a shared folder You are required to have only one Microsoft Active Directory account in each Microsoft Active Directory domain thatincludes the resources that you want to turn on Integrated Windows authentication for.For more inf...

located in a different Microsoft Active Directory domain than the global catalog server, you must create the Microsoft Active Directory account in the Microsoft Active Directory domain that includes the global catalog server.You do not need to configure constrained delegation for the Microsoft Activ...

Restricting the push application content that users can receive By default, a BlackBerry MDS Connection Service sends push requests from server-side push applications to applications on BlackBerry devices. BlackBerry devices can receive application data and application updates without users requesti...

use the same authorization password) if your organization's development environment permits it. Verify that theauthorization HTTP header in push requests from server-side push applications matches the name and password that youspecify for the push initiator. Before you begin: Turn on push authentica...

Encrypt push requests that push applications send to BlackBerry devices You can configure a BlackBerry MDS Connection Service to use SSL or TLS to encrypt the push requests that server-sidepush applications send to BlackBerry devices. By default, the BlackBerry MDS Connection Service does not encryp...

2. Click the instance that you want to specify device ports for. 3. Click Edit instance . 4. In the Device ports enabled for reliable pushes field, type the device port number. 5. Click the Add icon. 6. Repeat steps 4 to 5 for each device port number that you want to add. 7. Click Save all . 8. Clic...

Managing organizer data synchronization Managing the wireless backup and recovery of organizer data The wireless backup feature backs up user account settings and data from BlackBerry devices to the BlackBerry Enterprise Server automatically. You can use the wireless backup feature to synchronize or...

Delete organizer data for members of a user group from the BlackBerry Enterprise Server If the BlackBerry Enterprise Server is not writing organizer data for members of a user group from their BlackBerry devicesto the BlackBerry Configuration Database correctly, the organizer data on the BlackBerry ...

Changing how organizer data synchronizes Change the direction of organizer data synchronization for all user accounts on a BlackBerry Enterprise Server 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Com...

2. Click Manage users . 3. Search for a user account. 4. In the search results, click the display name for the user account. 5. Click Edit user . 6. In the Messaging configuration section, click Default configuration . 7. On the Organizer data synchronization tab, for each type of organizer data, in...

Managing your organization's messaging environment and attachment support Managing message forwarding You can define the message forwarding settings for user accounts and groups that are associated with the BlackBerry Enterprise Server. The settings control how the BlackBerry Enterprise Server forwa...

6. In the Messaging configuration section, click Default configuration . 7. In the Email services settings section, in the Redirect when in cradle drop-down list, click No . 8. Click Continue to user information edit . 9. Click Save all . Managing the incoming message queue The incoming message queu...

Managing wireless message reconciliation The BlackBerry Enterprise Server synchronizes email message status changes between BlackBerry devices and the email applications on users' computers. The BlackBerry Enterprise Server reconciles message moves, deletions, and indicators for read and unread mess...

1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Email . 2. Click the instance that you want to change. 3. Click Edit instance . 4. On the Messaging tab, in the Messaging options secti...

• If you want to change a BlackBerry Enterprise Server pair, click one of the instances, and on the Instance information tab, click Restart instance . Repeat this step for the other instance in the pair. • In the Windows Services, restart the BlackBerry Dispatcher. 7. Repeat step 2 to step 6 for eac...

After you finish: To turn on the ability to search for remote messages, in the Messaging Options section, change Remote search turn on to True . Click Save all . Restart the BlackBerry Enterprise Server. Related information Restarting BlackBerry Enterprise Server components, 392 Managing email messa...

Synchronizing folders on the BlackBerry device Control which published public contact folders a user can synchronize to a BlackBerry device By default, a user can synchronize contacts from all of the published public contact folders on the messaging server withthe contact lists on a BlackBerry devic...

4. Click Edit instance . 5. On the Component Configuration Sets tab, in the Available component configuration sets section, in the Service configuration sets drop-down list, click the configuration set that you want to assign to the BlackBerry MDS Connection Service instance. 6. Click Save all . 7. ...

6. Click Send message . Send a notification message to a user 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User . 2. Click Manage users . 3. Search for a user account. 4. In the search results, click the name of a user account. 5. Click Send message...

How the BlackBerry Attachment Connector communicates with BlackBerry Attachment Service instances When a user sends a request to view an email message attachment on a BlackBerry device, the BlackBerry device sends a request to the BlackBerry Enterprise Server to convert the attachment. The BlackBerr...

Attachment file formats that the BlackBerry Attachment Service supports Format Extension Adobe Acrobat .pdf ASCII text .txt audio .amr, .mp3, .wav, .wma Corel WordPerfect 7-10 .wpd HTML .htm, .html images .bmp, .gif, .jpeg, .jpg, .png, .ppm, .tif, .tiff, .wmf Microsoft Excel 97-2003, 2007, and XP .x...

Format and extension Limitations • charts• style effects for cells: shadow, borders• headers and footers• drawing objects and Fontwork objects Changing how a BlackBerry Attachment Service converts attachments If the BlackBerry Enterprise Server receives requests from BlackBerry device users to view ...

Suggested file sizes for attachments File format Suggested size Adobe Acrobat versions 1.1, 1.2, 1.3, and 1.4 less than 2000 KB ASCII text less than 100 KB audio less than 2000 KB Corel WordPerfect versions 6.0, 7.0, 8.0, 9.0 (2000), and 10.0 less than 2000 KB HTML less than 100 KB images less than ...

3. Click Edit instance . 4. In the Distiller display name section, in the Allowed column, specify which distillers are supported for the instance. 5. Click Save . After you finish: Restart the BlackBerry Attachment Service. Related information Restarting BlackBerry Enterprise Server components, 392 ...

Changing how the BlackBerry Messaging Agent reconciles attachments to the messaging server The BlackBerry Messaging Agent receives message attachments from supported BlackBerry devices and reconciles the attachments to the messaging server. The BlackBerry Attachment Service does not convert the atta...

1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Email . 2. Click the instance that you want to change. 3. Click Edit instance . 4. On the Messaging tab, in the Messaging options secti...

Managing calendars Configuring the BlackBerry Enterprise Server to use Microsoft Exchange Web Services or MAPI and CDO libraries By default, the BlackBerry Enterprise Server uses Microsoft Exchange Web Services to manage calendars on BlackBerry devices. The BlackBerry Enterprise Server monitors peri...

• Configure Microsoft Exchange Impersonation for a BlackBerry Enterprise Server administrator account. For more information about configuring Microsoft Exchange Impersonation, visit msdn.microsoft.com/en-us/library/ bb204095.aspx and select the appropriate tab for Microsoft Exchange 2007 or Microsof...

• To configure all BlackBerry Messaging Agent instances on all BlackBerry Enterprise Server instances to use MAPI and CDO libraries, type traittool -global -trait EWSEnable -set false . 5. Restart the BlackBerry Messaging Agent instances that you made changes to. Related information Restarting Black...

Correcting calendar synchronization errors on devices If you run corrective calendar synchronization on a BlackBerry Enterprise Server instance, you can find and correct differences between the calendar entries on BlackBerry devices and the calendar entries on users' computers. You can specify a rec...

Turn off corrective calendar synchronization By default, corrective calendar synchronization is turned on. If you do not want the BlackBerry Enterprise Server to checkfor differences between calendar entries on BlackBerry devices and calendar entries on users' computers, you can turn offcorrective c...

View the current settings for corrective calendar synchronization 1. Copy the BlackBerry Enterprise Server installation files to a computer that hosts a BlackBerry Enterprise Server instance. 2. Extract the contents to a folder on the computer. 3. At the command prompt, navigate to the folder that t...

• To turn off automatic correction of calendar synchronization errors for a specific user account, type traittool -user <smtp_address> -trait ExchangeSmartSyncSendUpdate -set false . • To turn off automatic correction of calendar synchronization errors for all user accounts that are associated...

Tuesday, Wednesday, Thursday, Friday, Saturday, Sunday, Weekdays, Weekends, or Daily. The default value is Daily. • To configure calendar synchronization to recur on specific days for all user accounts that are associated with a BlackBerry Enterprise Server, type traittool -server <server_name>...

Item Description MOD specifies that a calendar item is missing on the device MOO specifies that a calendar item is missing in the email application SAM specifies that a calendar item is the same on the device and in the emailapplication SmartSyncFireOff specifies that the calendar synchronization pr...

Start corrective calendar synchronization manually for a user account By default, the BlackBerry Enterprise Server synchronizes the calendar on each BlackBerry device user's computer withthe calendar on each user's BlackBerry device at a regular interval. You can use the BlackBerry Administration Se...

Managing instant messaging The BlackBerry Collaboration Service is designed to provide a connection between your organization's instant messaging server and the collaboration client on BlackBerry devices. In some instant messaging environments, you can use TLS or HTTPS to encrypt the connection betw...

Managing instant messaging sessions Specify the maximum number of instant messaging sessions that can be open at the same time To control bandwidth and resource consumption in your organization's environment, you can specify the number of instantmessaging sessions that can be open between the BlackB...

Managing instant messaging features Prevent users from sending specific file types to instant messaging contacts using the BlackBerry Client for IBM Lotus Sametime On BlackBerry devices that are running BlackBerry Device Software version 4.2 or later and the latest version of theBlackBerry Client fo...

Managing a BlackBerry Domain Restarting BlackBerry Enterprise Server components When you complete certain tasks, you need to restart one or more BlackBerry Enterprise Server components. You restart the BlackBerry Enterprise Server components using the BlackBerry Administration Service or Windows ser...

• BlackBerry Dispatcher• BlackBerry Attachment Service• BlackBerry Controller• All of the remaining services for BlackBerry Enterprise Server components Best practice: Restarting more than one BlackBerry Administration Service instance To restart all BlackBerry Administration Service instances witho...

Task Steps Display the current version of the trait tool and a summary of valid commands. Type traittool . Display all possible traits, the expected data types, and any value restrictions. Type traittool -show . Display a list of traits that were configured in the BlackBerry Domain. Type traittool {...

Trait Description UserHealthPercentage This trait specifies the percentage of user accounts that are healthy.The BlackBerry Dispatcher uses this trait to change the Useraccounts health parameter. If either of the health parametersindicate that the primary BlackBerry Enterprise Server is unhealthyand...

• To permit all BlackBerry Messaging Agent instances to write statistics to users' Microsoft Exchange mailboxes, type TraitTool -global -trait ExchangeEnableWriteUserStatsToMailbox -set true . • To permit all BlackBerry Messaging Agent instances that are associated with a specific BlackBerry Enterpr...

Copy a BlackBerry CAL key to a text file You can copy a BlackBerry CAL key to a text file and save it on a computer for reference if you want to transfer CAL keys toa different BlackBerry Enterprise Server or troubleshoot BlackBerry CAL key issues.1. In the BlackBerry Administration Service, on the ...

contact list, the BlackBerry Configuration Database might not contain the contact information for all user accounts on your organization's messaging server.If the BlackBerry Configuration Database does not contain contact information for a user account, you cannot create the user account by searchin...

organization’s contact list and restrict users from accessing the contact information of other organizations that also subscribe to the Hosted BlackBerry services.If your organization permits customers to have limited access or read-only access to the Microsoft Active Directory, you can configure th...

• If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\WOW6432Node \Research In Motion\BlackBerry Enterprise Server\Agents. 4. Create a DWORD value named HostedServer . 5. Change the value to 1 . 6. In the Windows Services, restart the BlackBerry Controller. Relate...

You can configure the following options when you configure the BlackBerry Enterprise Server to use LDAP to retrieve email addresses and organizer data:• Windows domain that the Microsoft Active Directory uses• whether to use LDAPS to connect to Microsoft Active Directory• timeout value for the conne...

b. Change the value to the port number. To limit the number of LDAP queries that the BlackBerry Enterprise Server needs, use the port number of the global catalog server (port 3268). 6. If the BlackBerry Enterprise Server must use LDAPS to connect to the Microsoft Active Directory, perform the follo...

b. Change the value to 1 . 8. In the Windows Services, restart the BlackBerry Controller. Related information Restarting BlackBerry Enterprise Server components, 392 Prevent the BlackBerry Enterprise Server from retrieving contact information for specific users If you are required by your organizati...

6. In the Windows Services, restart the BlackBerry Controller. Related information Restarting BlackBerry Enterprise Server components, 392 Restrict the location in Microsoft Active Directory that the BlackBerry Enterprise Server can retrieve email addresses and organizer data from You can configure ...

• sends IT policies and service books that you update to all BlackBerry devices that are associated with the BlackBerry Enterprise Server instance that the BlackBerry Policy Service runs on • sends updated PIN encryption keys to all devices that are associated with the BlackBerry Enterprise Server i...

Configuring BlackBerry Policy Service throttling for PIN encryption keys If the BlackBerry Policy Service detects that you updated the PIN encryption keys in the BlackBerry Configuration Database, the BlackBerry Policy Service verifies which BlackBerry device users require a new key and then schedul...

If you do not configure throttling, the BlackBerry Policy Service tries to process tasks as fast as the server permits, which might result in an unexpected increase in CPU usage and database usage. If you configure throttling, the BlackBerry Policy Service sends applications to devices using the sam...

BlackBerry Controller and BlackBerry Enterprise Server Component Monitoring How the BlackBerry Controller monitors the BlackBerry Enterprise Server components The BlackBerry Controller enables the BlackBerry Enterprise Server to continue running if nonresponsive threads occur or BlackBerry Enterpris...

Task Steps • To prevent the BlackBerry Controller from restarting the BlackBerry Policy Service if the service stops responding, type 0 . • To permit the BlackBerry Controller to restart the BlackBerry Policy Service if the service stops responding, type 1 . Change how the BlackBerry Controller rest...

BlackBerry Enterprise Server log files Monitoring PIN messages, SMS text messages, and calls Change the default location for the log files for PIN messages, SMS text messages, and calls Note: The log files for PIN messages, SMS text messages, and calls store confidential information in plain-text fo...

Log files for BlackBerry Enterprise Server components You can use log files to record the activity of BlackBerry Enterprise Server components and troubleshoot issues with the components. The BlackBerry Enterprise Server creates a log file for each BlackBerry Enterprise Server component and saves the...

Store the log files for BlackBerry Enterprise Server components in one folder You can store the log files for BlackBerry Enterprise Server components in one folder instead of permitting the BlackBerryEnterprise Server to save the log files in folders that it creates daily and organizes by date.1. In...

Related information Restarting BlackBerry Enterprise Server components, 392 Component identifiers for log files You can identify the names for the BlackBerry Enterprise Server log files using the following component identifiers: Component identifier Logging component ACNV BlackBerry Attachment Servi...

Component identifier Logging component DCS BlackBerry Monitoring Service Data Collection Subsystem DISP BlackBerry Dispatcher EXTS extension connector HHCG BlackBerry Configuration Panel MAGT BlackBerry Messaging Agent MAST BlackBerry Mail Store Service MDAT BlackBerry MDS Connection Service POLC Bl...

5. Click Save all . Related information Restarting BlackBerry Enterprise Server components, 392 Using BlackBerry MDS Connection Service log files to view information for proxied connections to BlackBerry devices The BlackBerry Enterprise Server writes data for each BlackBerry device connection that ...

Attribute Description CONNECTION_TYPE initiator of the proxied connection, which can be either the BlackBerry deviceuser (DEVICE_CONN) or BlackBerry Enterprise Server (PUSH_CONN ) CONNECTIONID unique identifier for an IPPP connection, where - (minus sign) indicates a pushconnection DURATION(ms) dura...

Item Connectiontype Default portnumber UI where you canconfigure theconnection data connections between BlackBerry AdministrationService instances UDP multicast IPaddress/port228.1.2.1/48858228.1.2.1/48857228.1.2.1/48855228.1.2.5/45588 — data connections between BlackBerry AdministrationService inst...

Item Connectiontype Default portnumber UI where you can configurethe connection outgoing conversion results of large attachments to theBlackBerry Attachment Connector for the BlackBerryAttachment Service TCP 2000 BlackBerry AdministrationService incoming data connections from, and outgoing dataconne...

Item Connectiontype Default portnumber UI where you can configurethe connection • On a 64-bit version of Windows:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\\BlackBerrySNMPAgent\Parameters\UDPPort BlackBerry Configuration Database connection types and port numbers Item Connectiontype ...

Item Connectiontype Default portnumber UI where you can configurethe connection \BlackBerry EnterpriseServer\Database\Port Related information Restarting BlackBerry Enterprise Server components, 392 BlackBerry Controller connection types and port numbers Item Connectiontype Default portnumber UI whe...

Item Connectiontype Default portnumber UI where you can configurethe connection outgoing syslog connections to the BlackBerry MessagingAgent UDP port numberthat theBlackBerryMessagingAgentprovides — BlackBerry Dispatcher connection types and port numbers Item Connectiontype Default portnumber UI whe...

Item Connectiontype Default portnumber UI where you can configurethe connection \BlackBerrySNMPAgent\Parameters\UDPPort • On a 64-bit version of Windows:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerrySNMPAgent\Parameters\UDPPort BlackBerry Messaging Agent connection types and p...

Item Connectiontype Default portnumber UI where you can configurethe connection E\SOFTWARE\ResearchIn Motion\BlackBerrySNMPAgent\Parameters\UDPPort • On a 64-bit version of Windows:HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Research In Motion\BlackBerrySNMPAgent\Parameters\UDPPort incoming data connect...

Item Connectiontype Default portnumber UI where you can configurethe connection other applications that you configured the BlackBerryMonitoring Service to send SNMP traps to internal data connection to the BlackBerry MonitoringService Application Core TCP 55500 BlackBerry ConfigurationPanel internal...

Item Connectiontype Default portnumber UI where you can configurethe connection E\SOFTWARE\WOW6432Node\Research In Motion\BlackBerry EnterpriseServer\Database\Port incoming data connections from the BlackBerry databasenotification system UDP first unusedport numberfrom 4185 to4499 — BlackBerry Route...

Item Connectiontype Default portnumber UI where you can configurethe connection \WOW6432Node\Research In Motion\BlackBerryRouter\DevicePort outgoing syslog connections to the SNMP agent UDP 4071 Windows registry • On a 32-bit version of Windows:HKEY_LOCAL_MACHINE\SOFTWARE\ResearchIn Motion\BlackBerr...

Item Connectiontype Default portnumber UI where you can configurethe connection incoming data connections from, and outgoing dataconnections to, the BlackBerry Configuration Database thata Microsoft SQL Server hosts TCP 1433 Windows registry • On a 32-bit version of Windows:HKEY_LOCAL_MACHINE\SOFTWA...

IBM Lotus Sametime connection type and port number Item Connectiontype Default portnumber UI where you can configurethe connection incoming data connections from and outgoing dataconnections to the BlackBerry Collaboration Service TCP/IP 1533 IBM Lotus SametimeAdministration Tool Microsoft Exchange ...

Novell GroupWise Messenger connection type and port number Item Connectiontype Default portnumber UI where you can configurethe connection incoming data connections from, and outgoing dataconnections to, the BlackBerry Collaboration Service SSL 8300 Novell GroupWise server thathosts the Novell Group...

Item Connectiontype Default portnumber UI where you can configurethe connection \BlackBerrySNMPAgent\Parameters\UDPPort incoming syslog connections from SNMP queries and traps UDP 161 Windows registry outgoing syslog connections from SNMP queries and traps TCP 162 Windows registry Syslog connection ...

Troubleshooting Troubleshooting: Connecting to the BlackBerry Administration Service The web browser displays an HTTP 404 or HTTP 504 error message when it tries to connect to a BlackBerry Administration Service instance Possible cause Possible solution You created a BlackBerry Administration Servic...

Troubleshooting: BlackBerry Enterprise Server Performance A BlackBerry Enterprise Server that you installed remotely from the BlackBerry Configuration Database uses an unexpected amount of system resources and increases wireless network traffic Possible cause Once daily, the BlackBerry Enterprise Se...

To turn on the address book refresh feature for a BlackBerry Enterprise Server again, use the same command with a valueof True. Microsoft SQL Server uses a considerable amount of disk space Possible cause Reorganizing or rebuilding an index in Microsoft SQL Server can cause the size of the transacti...

Possible cause Possible solution 4. In the Windows Services, restart the services for the BlackBerry Administration Service. You cannot find a new user account in the directory using the BlackBerry Administration Service Possible solution Refresh the list of available user accounts that the BlackBer...

3. Perform one of the following actions: • Remove the third-party application that uses the BlackBerry Enterprise Server extension API.• Change the third-party application so that it does not filter messages. Text does not appear correctly in Unicode email messages Possible cause By default, when th...

A user did not accept a notification about an instant message on a computer and the notification disappeared Applies to : BlackBerry Collaboration Service version 4.1 or later with the BlackBerry Client for use with Microsoft Office Live Communications Server 2005 or the BlackBerry Client for use wi...

Possible cause Possible solution The BlackBerry Collaboration Servicedoes not support the version of theinstant messaging application that isinstalled on the BlackBerry device. Remove the instant messaging application from the BlackBerry device. Installan earlier version of the instant messaging app...

Troubleshooting: Connections to the Wi-Fi network A BlackBerry device cannot connect to a Wi-Fi network Possible cause Possible solution On the BlackBerry device, Wi-Ficonnections are not turned on. 1. On the BlackBerry device, on the Home screen, click Manage Connections . 2. Click Wi-Fi Options . ...

Field Description Connecting This field specifies the IP address and port number that the BlackBerry deviceuses to connect to the BlackBerry Infrastructure. Authenticating router This field specifies the IP address of the server that performs authentication, ifapplicable. Authenticating server This ...

2. Click Wi-Fi Options . 3. Press the Menu key and click Wi-Fi Tools > DNS Lookup . 4. In the Host field, type a name or an IP address that you want to look up. 5. Press the Menu key and click DNS Lookup . 6. Press the Menu key and click Send ping . Troubleshooting: BlackBerry Administration Serv...

Troubleshooting: BlackBerry Monitoring Service connections A user cannot log in to the BlackBerry Monitoring Service Possible cause If your organization's environment includes a firewall located between the BlackBerry Administration Service andBlackBerry Monitoring Service, the firewall can block th...

Troubleshooting: IT policies I cannot find an IT policy rule in the BlackBerry Administration Service Possible cause The version of the BlackBerry Enterprise Server that you are using does not include the IT policy rule. Possible solution Import the IT policy rule from an IT policy pack that is avai...

Glossary AAA Authentication, Authorization, Accounting AES Advanced Encryption Standard ACL An access control list (ACL) is a list of permissions that are associated with an object, such as afile, directory, or other network resource. It specifies which users or components havepermission to perform ...

Legal notice © 2012 Research In Motion Limited. All rights reserved. BlackBerry ® , RIM ® , Research In Motion ® , and related trademarks, names, and logos are the property of Research In Motion Limited and are registered and/or used in the U.S. and countries around the world.Adobe and Acrobat are t...