Blackberry PRD-10459-003 Administration Guide
Blackberry PRD-10459-003 - Enterprise Server For IBM Lotus Domino Manual
 |
View all Blackberry PRD-10459-003 manuals
Add to My Manuals
Save this manual to your list of manuals |
Blackberry PRD-10459-003 manual content summary:
- Blackberry PRD-10459-003 | Administration Guide - Page 1
BlackBerry Enterprise Server for IBM Lotus Domino Version: 5.0 | Service Pack: 3 Administration Guide - Blackberry PRD-10459-003 | Administration Guide - Page 2
Published: 2011-09-16 SWDT487521-1597421-0916011550-001 - Blackberry PRD-10459-003 | Administration Guide - Page 3
BlackBerry Enterprise Server environment 22 2 Log in to the BlackBerry Administration Service for the first time 25 There is a problem network 42 Resend an IT policy to a BlackBerry device manually 42 Resend an IT policy to a BlackBerry device automatically 43 Assigning IT policies and resolving - Blackberry PRD-10459-003 | Administration Guide - Page 4
key...60 Turn off BlackBerry services that the BlackBerry MDS Connection Service, BlackBerry Collaboration Service, and BlackBerry MVS provide...61 When a BlackBerry device overwrites data in the BlackBerry device memory 61 Changing when a BlackBerry device cleans the BlackBerry device memory 62 - Blackberry PRD-10459-003 | Administration Guide - Page 5
to a proxy server on behalf of BlackBerry devices...65 Configuring the BlackBerry Administration Service to use a proxy server 66 Configuring proxy selection for the BlackBerry Administration Service 66 Configuring the BlackBerry Administration Service to authenticate with a proxy server 68 - Blackberry PRD-10459-003 | Administration Guide - Page 6
name of the BlackBerry Administration Service pool 103 Fail over the BlackBerry MDS Connection Service or BlackBerry Collaboration Service manually 103 Monitoring the high availability status or job deployment status using the BlackBerry Administration Service...104 Monitor the high availability - Blackberry PRD-10459-003 | Administration Guide - Page 7
Database...107 Configuring database mirroring...108 Stop the BlackBerry Enterprise Server instances 108 Configure database mirroring for the BlackBerry Configuration Database 108 Start the BlackBerry Enterprise Server instances 109 Configure the BlackBerry Enterprise Solution to support database - Blackberry PRD-10459-003 | Administration Guide - Page 8
13 Alternative methods for installing BlackBerry Java Applications on BlackBerry devices 145 Installing BlackBerry Java Applications on BlackBerry devices without using the BlackBerry Administration Service...145 Developing BlackBerry Java Applications for BlackBerry devices 145 Methods you can - Blackberry PRD-10459-003 | Administration Guide - Page 9
to content servers that use NTLM...156 Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use Kerberos...157 Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use LTPA...157 Configuring - Blackberry PRD-10459-003 | Administration Guide - Page 10
HTTP 174 Specify the port number that the web server listens on for push application requests 174 Specify how often a BlackBerry MDS Connection Service polls for configuration information 175 15 Setting up the messaging environment...176 Creating email message filters...176 Create an email - Blackberry PRD-10459-003 | Administration Guide - Page 11
...189 Change the polling interval, logging, and pool size for the BlackBerry MDS Connection Service connection to the certificate authority...189 Properties in the rimpublic.properties file 190 17 Making the BlackBerry Web Desktop Manager available to users 191 Installing the client components of - Blackberry PRD-10459-003 | Administration Guide - Page 12
want to import 207 Import profile information from a .csv file 209 20 Configuring encryption and authentication methods for Wi-Fi enabled BlackBerry devices 210 Configuring WEP encryption...210 Configure WEP keys for BlackBerry devices using a Wi-Fi profile 210 Configuring PSK encryption...211 - Blackberry PRD-10459-003 | Administration Guide - Page 13
authentication...229 Turn on single sign-on authentication for the BlackBerry Administration Service 230 BlackBerry Administration Service web addresses and BlackBerry Web Desktop Manager web addresses that support BlackBerry Administration Service single sign-on 230 Changing password settings for - Blackberry PRD-10459-003 | Administration Guide - Page 14
to a user account 245 Update the contact list manually...246 Resend service books to a BlackBerry device 246 26 Managing the delivery of BlackBerry Java Applications, BlackBerry Device Software, and device settings to BlackBerry devices...247 Managing the default distribution settings for jobs - Blackberry PRD-10459-003 | Administration Guide - Page 15
on your organization's network...266 Configuring the Microsoft Active Directory account to delegate access 266 Configuring the BlackBerry MDS Connection Service when the messaging server is located in a remote Microsoft Active Directory domain 269 Turn on Integrated Windows authentication - Blackberry PRD-10459-003 | Administration Guide - Page 16
user accounts on a BlackBerry Enterprise Server 281 Change how the BlackBerry Administration Service resolves conflicts during support 283 Managing message forwarding...283 Forward email messages to a BlackBerry device when no filter rules apply 283 Do not deliver email messages to a BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 17
Configure the BlackBerry MDS Connection Service to communicate with a remote file system 296 Add communication information to a BlackBerry MDS Connection Service configuration set 297 Assign a BlackBerry MDS Connection Service configuration set to a BlackBerry MDS Connection Service instance...298 - Blackberry PRD-10459-003 | Administration Guide - Page 18
Connector restores a lost connection to a BlackBerry Attachment Service...305 Attachment file formats that the BlackBerry Attachment Service supports 305 Limitations for supported attachment file formats 306 Changing how a BlackBerry Attachment Service converts attachments 307 Change how - Blackberry PRD-10459-003 | Administration Guide - Page 19
Tool...328 Use the BlackBerry Enterprise Trait Tool 329 BlackBerry Enterprise Trait Tool traits...329 Managing BlackBerry CAL keys...338 Add or delete a BlackBerry CAL key...339 Copy a BlackBerry CAL key to a text file...339 Configuring the BlackBerry Mail Store Service instance that updates the - Blackberry PRD-10459-003 | Administration Guide - Page 20
files...360 BlackBerry MDS Connection Service log files 361 Changing how the BlackBerry MDS Connection Service creates a log file 361 Using BlackBerry MDS Connection Service log files to view information for proxied connections to BlackBerry devices...364 BlackBerry Collaboration Service log files - Blackberry PRD-10459-003 | Administration Guide - Page 21
to resolve an IP address 404 Troubleshooting: BlackBerry Administration Service pools 404 BlackBerry Administration Service instances located in different network segments are not connecting to each other...404 Troubleshooting: BlackBerry Monitoring Service connections 405 A user cannot log in - Blackberry PRD-10459-003 | Administration Guide - Page 22
38 Provide feedback...415 39 Legal notice...416 - Blackberry PRD-10459-003 | Administration Guide - Page 23
. You can use the BlackBerry Monitoring Service to monitor and troubleshoot issues with BlackBerry Enterprise Server instances and monitor the activity of device users. You can configure the BlackBerry Enterprise Server and the BlackBerry Enterprise Server components to support high availability to - Blackberry PRD-10459-003 | Administration Guide - Page 24
environment The following table lists the tasks that administrators typically perform after installing a BlackBerry® Enterprise Server, and the chapter or section in the BlackBerry Enterprise Server Administration Guide that contains the information required to complete the task. Some of the tasks - Blackberry PRD-10459-003 | Administration Guide - Page 25
Enterprise Server high availability Optional tasks Task Chapter Update BlackBerry® Device Software on BlackBerry devices. Visit www.blackberry.com/go/serverdocs to see the BlackBerry Device Software Update Guide. Make the BlackBerry® Web Desktop Manager available to users and configure the - Blackberry PRD-10459-003 | Administration Guide - Page 26
BlackBerry Monitoring Service to troubleshoot Visit www.blackberry.com/go/serverdocs to see the issues and monitor the health of a BlackBerry Enterprise BlackBerry Enterprise Server Monitoring Guide. Server. Change how the BlackBerry Enterprise Server creates BlackBerry Enterprise Server log files - Blackberry PRD-10459-003 | Administration Guide - Page 27
Server, 63 The web browser displays an HTTP 404 or HTTP 504 error message when it tries to connect to a BlackBerry Administration Service instance, 387 There is a problem with this website's security certificate Description The browser displays this error message when you try to navigate to the - Blackberry PRD-10459-003 | Administration Guide - Page 28
Install certificate. The Certificate Import Wizard opens. 12. Complete the instructions in the Certificate Import Wizard. If you are trying to log in to the BlackBerry Administration Service or BlackBerry Monitoring Service using a computer that runs Windows Vista®, perform the following actions - Blackberry PRD-10459-003 | Administration Guide - Page 29
the BlackBerry® Administration Service and BlackBerry Monitoring Service. Each action that you perform in the BlackBerry Administration Service is the BlackBerry Enterprise Server Administration Guide. Roles do not apply to tasks that an administrator can perform using the BlackBerry Configuration - Blackberry PRD-10459-003 | Administration Guide - Page 30
Administration Guide Administrative roles and permissions Permission name Security role Enterprise role Delete a user X X software X X configuration Delete a software X X configuration View BlackBerry X X Administration Service software management Senior Helpdesk role X X X X X - Blackberry PRD-10459-003 | Administration Guide - Page 31
Administration Guide Administrative roles and permissions Permission name Security role Enterprise role Edit BlackBerry X X Administration Service software management Create an application X X View an application X X Edit an application X X Delete an application X X Create an - Blackberry PRD-10459-003 | Administration Guide - Page 32
Administration Guide Administrative roles and permissions Permission name Security role Enterprise role Manually fail a job X X Clear instance statistics X X View push rules for the X X BlackBerry MDS Connection Service View pull rules for the X X BlackBerry MDS Connection Service - Blackberry PRD-10459-003 | Administration Guide - Page 33
Administration Guide Creating roles Permission name Security role Enterprise role View BlackBerry X Monitoring Service information Edit BlackBerry X Monitoring Service settings Import new users X X Import or export users X X Import user updates X X Import or export email X X - Blackberry PRD-10459-003 | Administration Guide - Page 34
Administration Guide Create an administrator account 5. In the Role information section, new role, and then make the appropriate changes to the new role. 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Role. 2. Click Manage roles. 3. In the list of - Blackberry PRD-10459-003 | Administration Guide - Page 35
Administration Guide Add an administrator account to a group Related topics Assigning BlackBerry devices to user accounts, if the accounts are user accounts for BlackBerry® device users. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click - Blackberry PRD-10459-003 | Administration Guide - Page 36
Administration Guide Permit an administrator to log in to the BlackBerry Administration Service using a messaging server account Permit an administrator to log in to the BlackBerry Administration Service using a messaging server account You can permit an administrator to log in to the BlackBerry® - Blackberry PRD-10459-003 | Administration Guide - Page 37
the camera on the device if the BlackBerry Device Software version does not support the IT policy rule. For information about the BlackBerry Device Software version that is required for a specific IT policy rule, see the BlackBerry Enterprise Server Policy Reference Guide. If you create a custom IT - Blackberry PRD-10459-003 | Administration Guide - Page 38
Guide Preconfigured IT policies Preconfigured IT policies The BlackBerry services and email messaging services (for example, their BlackBerry® Internet Service accounts), update the BlackBerry mass storage, and requires devices to encrypt external file systems. Similar to the Advanced Security IT - Blackberry PRD-10459-003 | Administration Guide - Page 39
Administration Guide Preconfigured IT policies Preconfigured IT policy Description technology on devices, turns on strong content protection, turns off USB mass storage, requires devices to encrypt external file systems, and prevents devices from downloading third-party applications. Default - Blackberry PRD-10459-003 | Administration Guide - Page 40
Administration Guide Preconfigured IT policies IT policy rule Default IT policy Disable Yes Copy/Paste Disable No Forwarding Between Services Disable USB No Mass Storage Disallow Third No Party Application Download External File Not System required Encryption level Force - Blackberry PRD-10459-003 | Administration Guide - Page 41
Exclusivity policy group Allow Other Yes Yes - Calendar Services Allow Other Yes Yes - Message Services Bluetooth® policy group Disable No - - Address Book Transfer Disable No - - Discoverable Mode Disable File No - - Transfer Disable Serial No - - Port Profile - Blackberry PRD-10459-003 | Administration Guide - Page 42
Click Save All. After you finish: For more information, see the BlackBerry Enterprise Server Policy Reference Guide. Create an IT policy based on an existing IT policy 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy. 2. Click Manage IT policies - Blackberry PRD-10459-003 | Administration Guide - Page 43
Administration Guide Change the value for an IT policy rule 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand and extract the contents of the file. 2. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy. - Blackberry PRD-10459-003 | Administration Guide - Page 44
and resolving IT policy conflicts, 43 Preconfigured IT policies, 36 Resend an IT policy to a BlackBerry device manually 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for a user account. 4. In the search - Blackberry PRD-10459-003 | Administration Guide - Page 45
Administration Guide Assigning IT policies and resolving IT policy conflicts Resend an IT policy to a BlackBerry device automatically 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry Solution topology. 2. Expand BlackBerry Domain > Component view. - Blackberry PRD-10459-003 | Administration Guide - Page 46
Enterprise Server applies the IT policy that you ranked the highest in the BlackBerry Administration Service. If you upgrade to BlackBerry Enterprise Server 5.0 SP2 or later from a previous version of the BlackBerry Enterprise Server, this is the default method for resolving IT policy conflicts. If - Blackberry PRD-10459-003 | Administration Guide - Page 47
Guide Assigning IT policies and resolving IT policy conflicts Change the method that the BlackBerry Enterprise Server uses to resolve conflicting IT policies You can change the method that the BlackBerry . 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, - Blackberry PRD-10459-003 | Administration Guide - Page 48
Guide Assigning IT policies and resolving IT policy conflicts Reconciliation rules for conflicting IT policies when you apply multiple IT policies to a user account The BlackBerry IT policy that you ranked the highest in the BlackBerry Administration Service. A user account belongs to two groups. - Blackberry PRD-10459-003 | Administration Guide - Page 49
Administration Guide Assigning IT policies and resolving IT policy conflicts Scenario No. You ranked IT policy A higher than IT policy B in the BlackBerry Administration Service. Rule For example, in this scenario, the Allow Browser IT policy rule setting from IT policy B, No, is applied to the - Blackberry PRD-10459-003 | Administration Guide - Page 50
Administration Guide Deactivating BlackBerry devices that do not have IT policies applied 2. Click account, the preview does not display the IT policy rule. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for - Blackberry PRD-10459-003 | Administration Guide - Page 51
BlackBerry devices on the BlackBerry Enterprise Server, on the BlackBerry devices, in the Security Options list, instruct users to click Wipe Handheld or Security Wipe to delete all of the data on the BlackBerry 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, - Blackberry PRD-10459-003 | Administration Guide - Page 52
, you must create an encryption password for the data file that you can use to protect the data file. You can import the data file at a later time to another BlackBerry® Domain. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy. 2. Click Manage IT - Blackberry PRD-10459-003 | Administration Guide - Page 53
for encrypting data. By default, the BlackBerry® Enterprise Server uses the strongest algorithm that both the BlackBerry Enterprise Server and the BlackBerry device support for BlackBerry transport layer encryption. If you configure the BlackBerry Enterprise Server to support AES and Triple DES, by - Blackberry PRD-10459-003 | Administration Guide - Page 54
, see the BlackBerry Enterprise Server Administration Guide. Turn on the Enterprise Service Policy You can turn on the Enterprise Service Policy to control which BlackBerry® devices can connect to the BlackBerry® Enterprise Server. 1. In the BlackBerry Administration Service, on the Servers - Blackberry PRD-10459-003 | Administration Guide - Page 55
Enterprise Server information section, in the Enterprise service policy override drop-down list, click Yes. 7. Click Save All. Extending messaging security to a BlackBerry device If your organization's messaging environment supports highly secure messaging technology such as PGP® encryption - Blackberry PRD-10459-003 | Administration Guide - Page 56
. To extend messaging security, you must instruct the BlackBerry device user to install the PGP® Support Package for BlackBerry® smartphones on the BlackBerry device and to transfer the PGP private key of the BlackBerry device user to the BlackBerry device. The BlackBerry device user can use the PGP - Blackberry PRD-10459-003 | Administration Guide - Page 57
, configure the BlackBerry MDS Connection Service to retrieve certificates and the status of certificates from LDAP servers, DSML certificate servers, OCSP servers, or CRL servers. 4. Instruct users to install the S/MIME Support Package for BlackBerry® smartphones on BlackBerry devices. 5. Perform - Blackberry PRD-10459-003 | Administration Guide - Page 58
messages. You can turn off support for processing S/MIME-protected messages if the BlackBerry Enterprise Server experiences issues when it processes S/ MIME-protected messages or if your organization does not use S/MIME encryption. 1. In the BlackBerry Administration Service, on the Servers and - Blackberry PRD-10459-003 | Administration Guide - Page 59
id files for the user accounts that you assigned to the BlackBerry Enterprise Server instance, type traittool.exe -server -trait EnableNNEIDFileProvisioning -set true, where is the name of the BlackBerry Enterprise Server instance. 5. In the Windows® Services, restart - Blackberry PRD-10459-003 | Administration Guide - Page 60
for IBM Lotus Notes encryption To turn off support for decrypting IBM® Lotus Notes® encrypted messages and S/MIME-encrypted messages on BlackBerry® devices, users can detach their Notes .id files from their mail files using the BlackBerry® Desktop Software or IBM® Lotus® Domino® Web Access software - Blackberry PRD-10459-003 | Administration Guide - Page 61
Administration Guide Enforcing secure messaging using classifications 6. Type a subject suffix a message classification based on an existing message classification 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy. 2. Click Manage IT policies. - Blackberry PRD-10459-003 | Administration Guide - Page 62
Administration Guide Generating organization-specific encryption keys for PIN-message encryption Delete a message classification 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy. 2. Click Manage IT policies. 3. In the list of IT policies, - Blackberry PRD-10459-003 | Administration Guide - Page 63
Administration Guide Turn off BlackBerry services that the BlackBerry MDS Connection Service, BlackBerry Collaboration Service, and BlackBerry MVS provide Turn off BlackBerry services that the BlackBerry MDS Connection Service, BlackBerry Collaboration Service, and BlackBerry MVS provide You can - Blackberry PRD-10459-003 | Administration Guide - Page 64
Set the Memory Cleaner Maximum Idle Time IT policy has elapsed. rule to the desired time (for example, 10 minutes). For more information, see the BlackBerry Enterprise Server Policy Reference Guide and S/MIME Support Package User Guide Supplement. 62 - Blackberry PRD-10459-003 | Administration Guide - Page 65
configures the startup type for the BlackBerry Mail Store Service, BlackBerry Policy Service, and BlackBerry Synchronization Service to manual. Do not change the account information for BlackBerry Enterprise Server services. To avoid errors in the BlackBerry Enterprise Server, do not change the - Blackberry PRD-10459-003 | Administration Guide - Page 66
component to use a .pac file You can configure the BlackBerry® MDS Connection Service and the BlackBerry Collaboration Service to use a .pac file. The BlackBerry® Enterprise Server components support only one .pac file. 1. In the BlackBerry Administration Service, in the Servers and components - Blackberry PRD-10459-003 | Administration Guide - Page 67
begin: If you want to configure the BlackBerry MDS Connection Service to authenticate to a proxy server on behalf of BlackBerry devices, turn on authentication support for the BlackBerry MDS Connection Service. 1. In the BlackBerry Administration Service, in the Servers and components menu, expand - Blackberry PRD-10459-003 | Administration Guide - Page 68
methods: • enable the Web Proxy Autodiscovery Protocol using the BlackBerry Enterprise Trait Tool • specify a URL for a PAC file using Windows Internet Explorer Configuring manual proxy selection for a BlackBerry Administration Service instance Depending on the operating system on the computer that - Blackberry PRD-10459-003 | Administration Guide - Page 69
® Enterprise Trait Tool. The Web Proxy Autodiscovery Protocol uses DHCP and DNS to find a PAC file. Perform this task on any computer that hosts a BlackBerry Administration Service instance. CAUTION: If the proxy server authenticates using HTTP basic authentication, the Web Proxy Autodiscovery - Blackberry PRD-10459-003 | Administration Guide - Page 70
. 5. Select Use automatic configuration script. 6. In the Address field, type the URL for the PAC file. 7. Click OK. 8. Click OK. Configuring the BlackBerry Administration Service to authenticate with a proxy server If your organization's proxy server requires authentication, you must configure the - Blackberry PRD-10459-003 | Administration Guide - Page 71
the computer. Delete credentials for HTTP basic authentication 1. On the computer that hosts the BlackBerry® Administration Service, at the command prompt, navigate to the folder that contains the TraitTool.exe file. 2. Perform one of the following tasks: Task Delete the user name and password - Blackberry PRD-10459-003 | Administration Guide - Page 72
, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Conection Service. 2. Click the instance that you want to change. 3. Click Edit instance. 4. On the Supported Dispatcher instances tab, in the Available Dispatcher instances list - Blackberry PRD-10459-003 | Administration Guide - Page 73
that you want to change. 3. Click Edit instance. 4. On the Supported Dispatcher instances tab, in the Available Dispatcher instances list, click the BlackBerry Enterprise Server instance that you want to use the BlackBerry Collaboration Service. 5. Click Add. 6. Repeat steps 4 and 5 for each - Blackberry PRD-10459-003 | Administration Guide - Page 74
Guide Configuring user accounts Configuring user accounts 7 Creating user groups You can create user groups and assign user accounts to user groups based on custom criteria, such as user location, organizational group, or BlackBerry BlackBerry® Administration Service, on the BlackBerry solution - Blackberry PRD-10459-003 | Administration Guide - Page 75
Administration Guide Adding a user account to the BlackBerry Enterprise Server Adding a user account to the BlackBerry Enterprise Server When you add a user account to the BlackBerry® Enterprise Server, your organization's messaging environment must meet the following requirements to support user - Blackberry PRD-10459-003 | Administration Guide - Page 76
must not contain special characters. Some BlackBerry devices do not support special characters and do not unlock when BlackBerry® Mail Store Service did not yet synchronize the contact information for the user account to the BlackBerry Configuration Database. If the BlackBerry Mail Store Service - Blackberry PRD-10459-003 | Administration Guide - Page 77
Administration Guide Adding a user account to the BlackBerry Enterprise Server 11. In the Password expiration the user accounts The BlackBerry Administration Service processes actions in the order that they appear in the .csv file. If the BlackBerry Administration Service encounters an error that - Blackberry PRD-10459-003 | Administration Guide - Page 78
Administration Guide Adding a user account to the BlackBerry Enterprise Server Field Email Address SRP be provided on every line of the csv file. If the field is set to "generate", the password is automatically generated by the BlackBerry Administration Service and the final two fields of each .csv - Blackberry PRD-10459-003 | Administration Guide - Page 79
Administration Guide Adding a user account to the BlackBerry Enterprise Server "Email Address","SRP ID"," organizations messaging server. Before you begin: Create the .csv file. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Create a - Blackberry PRD-10459-003 | Administration Guide - Page 80
Server can synchronize up to 3000 messages from the previous 30 days. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Email. 2. Click the instance that you want to change. 3. Click Edit - Blackberry PRD-10459-003 | Administration Guide - Page 81
Guide Assigning BlackBerry devices to user accounts 5. Click Save all. Assigning BlackBerry devices to user accounts To assign BlackBerry® devices to user accounts and activate the BlackBerry devices, you can use any of the following methods: Method BlackBerry Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 82
Router and over your organization's LAN when users connect their BlackBerry devices to a computer that hosts the BlackBerry® Device Manager. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy. 2. Click Manage IT policies. 3. Click Default - Blackberry PRD-10459-003 | Administration Guide - Page 83
of the activation password character support security expiry time Description Typical activation passwords are four to eight characters long. Activation passwords are limited to the following character lengths: • BlackBerry device: 31 characters • BlackBerry Administration Service : 20 characters - Blackberry PRD-10459-003 | Administration Guide - Page 84
to help troubleshoot activation issues that a user might encounter or to make sure that the activation message that users receive on their computers conforms to your organization's messaging policies, you can customize the default activation message. 1. In the BlackBerry® Administration Service, on - Blackberry PRD-10459-003 | Administration Guide - Page 85
an activation password to multiple users 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage The password must not contain special characters. Some BlackBerry devices do not support special characters and do not unlock when a user - Blackberry PRD-10459-003 | Administration Guide - Page 86
network • On the computer that you installed the BlackBerry® Router, or on a remote computer, configure an SMTP service that the BlackBerry Router can use. For more information, see the documentation for the Windows Server®. • To restrict the BlackBerry Router so that it acts only as a gateway for - Blackberry PRD-10459-003 | Administration Guide - Page 87
® Services, restart the BlackBerry Router. After you finish: Instruct users to activate the Wi-Fi enabled BlackBerry devices. Activate a Wi-Fi enabled BlackBerry device If you want to activate a Wi-Fi® enabled BlackBerry® device using the enterprise Wi-Fi network, you can instruct a BlackBerry user - Blackberry PRD-10459-003 | Administration Guide - Page 88
the activation status, in the BlackBerry Administration Service, on the Wireless > View activations page, search for the user account. Confirm that the activation is successful. Related topics Restarting BlackBerry Enterprise Server components, 327 Troubleshooting: Connections to the Wi-Fi network - Blackberry PRD-10459-003 | Administration Guide - Page 89
® Enterprise Server uses health parameters to define the failover and promotion thresholds. The health parameters indicate if a BlackBerry Enterprise Server service or component is healthy or unhealthy. For example, the value for the Wireless network access health parameter indicates whether - Blackberry PRD-10459-003 | Administration Guide - Page 90
Administration Guide How the BlackBerry Enterprise Server uses health parameters • The values for the health parameters that you define as part of the failover threshold for the primary BlackBerry Enterprise Server indicates whether a service or component is unhealthy. • The values for the health - Blackberry PRD-10459-003 | Administration Guide - Page 91
it is healthy enough to become the primary instance. Configuring failover to occur when the standby BlackBerry Enterprise Server can provide the same services that the primary BlackBerry Enterprise Server can provide If you move the failover threshold and promotion threshold so that the identical - Blackberry PRD-10459-003 | Administration Guide - Page 92
to meet the requirements of your organization. 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand High availability > Highly available BlackBerry Enterprise Servers. 2. Click the name of the BlackBerry Enterprise Server pair that you want to change the health - Blackberry PRD-10459-003 | Administration Guide - Page 93
. You cannot set the failover threshold or promotion threshold below this health parameter. This health parameter indicates whether the BlackBerry Synchronization Service is available. You cannot configure the failover threshold or promotion threshold so that they are below this health parameter - Blackberry PRD-10459-003 | Administration Guide - Page 94
Administration Guide Changing the promotion threshold and failover threshold Changing when if your organization requires that all users can access email messages from BlackBerry devices at all times and that the BlackBerry Enterprise Server is connected to all of the messaging servers at all times - Blackberry PRD-10459-003 | Administration Guide - Page 95
about installing a standby BlackBerry Enterprise Server, see the BlackBerry Enterprise Server Installation and Configuration Guide. • Configure the health parameters to meet your organization's requirements. • Specify the same proxy mappings for the BlackBerry MDS Connection Service instances on the - Blackberry PRD-10459-003 | Administration Guide - Page 96
to find the time and reason for the last automatic failover event 1. In the BlackBerry® Administration Service, expand High availability > Highly available BlackBerry Enterprise Servers. 2. Click a BlackBerry® Enterprise Server pair name. 3. If an automatic failover event occurred, in the System - Blackberry PRD-10459-003 | Administration Guide - Page 97
Administration Guide Fail over the BlackBerry Enterprise Server manually using the BlackBerry Administration Service Fail over the BlackBerry Enterprise Server manually using the BlackBerry Administration Service You can use the BlackBerry® Administration Service to force a primary BlackBerry® - Blackberry PRD-10459-003 | Administration Guide - Page 98
instance that you want to assign the BlackBerry MDS Connection Service pool to. 4. Click Edit instance. 5. On the Supported MDS Connection Service instances tab, in the Current MDS Connection Service instances list, add the BlackBerry MDS Connection Service instances to the pool. 6. Click Save all - Blackberry PRD-10459-003 | Administration Guide - Page 99
Fail over the BlackBerry MDS Connection Service or BlackBerry Collaboration Service manually, 103 Create a BlackBerry Collaboration Service pool for high availability To configure BlackBerry® Collaboration Service high availability, you can create a BlackBerry Collaboration Service pool for each - Blackberry PRD-10459-003 | Administration Guide - Page 100
Administration Guide Create a BlackBerry Attachment Service pool for high availability 5. Click one of the following tabs, depending on which instant messaging server that you installed in your organization's environment: • Supported IBM Lotus Domino instances • Supported Novell GroupWise - Blackberry PRD-10459-003 | Administration Guide - Page 101
Guide Create a BlackBerry Attachment Service pool for high availability • To include the BlackBerry Attachment Service instance in the secondary group, click Secondary. 8. Complete the following actions: • To turn on support for an attachment file format, in the Extensions section, type the file - Blackberry PRD-10459-003 | Administration Guide - Page 102
succeeds. For more information, see the BlackBerry Enterprise Server Planning Guide. 1. In the BlackBerry Administration Service, on the Servers and components menu, click BlackBerry Solution topology > BlackBerry Domain > Component view > BlackBerry Enterprise Server. 2. Click the name of - Blackberry PRD-10459-003 | Administration Guide - Page 103
Guide Creating a BlackBerry Administration Service pool using DNS round robin that includes the BlackBerry Web Desktop Manager Restarting BlackBerry Enterprise Server components, 327 Permit a BlackBerry Enterprise Server to connect to a remote BlackBerry Router If you installed a BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 104
Administration Guide Changing the name of the BlackBerry Administration Service pool If you do not trying to access. For example, you can install the BlackBerry Administration Service on two of the computers in the pool and the BlackBerry Web Desktop Manager on two other computers in the pool. - Blackberry PRD-10459-003 | Administration Guide - Page 105
Administration Guide Fail over the BlackBerry MDS Connection Service or BlackBerry Collaboration Service manually the BlackBerry Administration Service instances in the pool. You must also change the name of the BlackBerry Administration Service pool if you have changed the name of the - Blackberry PRD-10459-003 | Administration Guide - Page 106
Microsoft Office Communications Server 2007 instances tab. • If you want to fail over the BlackBerry MDS Connection Service, click the Supported MDS Connection Service instances tab. 5. Click Manual Failover. 6. Click the instance that you want to assign the active connection to. 7. Click Yes - Blackberry PRD-10459-003 | Administration Guide - Page 107
Refresh page automatically. Remove a BlackBerry MDS Connection Service instance from a pool You can remove a BlackBerry® MDS Connection Service instance from a pool if your organization no longer requires it or to troubleshoot an issue. 1. In the BlackBerry Administration Service, on the Servers and - Blackberry PRD-10459-003 | Administration Guide - Page 108
Administration Guide Remove a BlackBerry Attachment Service instance from a pool • Supported Microsoft Lync Server 2010 instances 6. Remove the BlackBerry Collaboration Service instance from the list of current instances. 7. Click Save All. Remove a BlackBerry Attachment Service instance from a - Blackberry PRD-10459-003 | Administration Guide - Page 109
BlackBerry Configuration Database stops responding, they can connect to a mirror BlackBerry Configuration Database automatically. If your organization's environment does not support the BlackBerry Enterprise Server, use the BlackBerry Administration Service to change the failover type to Manual until - Blackberry PRD-10459-003 | Administration Guide - Page 110
Administration Guide Configuring database mirroring Configuring database mirroring You can use Microsoft® SQL Server® 2005 or 2008 database mirroring to configure the BlackBerry® Configuration Database for high availability. The BlackBerry Configuration Database only supports high safety with - Blackberry PRD-10459-003 | Administration Guide - Page 111
database mirroring When you configure the BlackBerry® Enterprise Solution to support database mirroring, the BlackBerry Administration Service adds a registry key to all of the computers that host BlackBerry® Enterprise Server components in the BlackBerry Domain and the registry key includes the - Blackberry PRD-10459-003 | Administration Guide - Page 112
you do not know if all of the components were configured to support database mirroring, you should resend the database mirroring parameters to the components. When you resend the database mirroring parameters, the BlackBerry Administration Service adds a registry key to the computers that host the - Blackberry PRD-10459-003 | Administration Guide - Page 113
the BlackBerry Enterprise Server services in the following order: • BlackBerry Administration Service services • BlackBerry Mail Store Service • BlackBerry Instant Messaging Connector • BlackBerry MDS Connection Service • BlackBerry Dispatcher • BlackBerry Attachment Service • BlackBerry Controller - Blackberry PRD-10459-003 | Administration Guide - Page 114
Administration Guide Configuring the BlackBerry Configuration Database for one-way transactional replication in an environment that includes Microsoft SQL Server 2005 or 2008 11. Click OK. Permit access to the BlackBerry Configuration Database instances 1. In the Microsoft® SQL Server® Management - Blackberry PRD-10459-003 | Administration Guide - Page 115
Administration Guide Configuring the BlackBerry Configuration Database for one-way transactional replication , 2147483647. 5. Click OK. Prepare the database server that hosts the replicated BlackBerry Configuration Database and configure the subscription 1. In the Microsoft® SQL Server® Management - Blackberry PRD-10459-003 | Administration Guide - Page 116
following order: • BlackBerry Controller • BlackBerry Router • BlackBerry Attachment Service • BlackBerry Dispatcher • BlackBerry MDS Connection Service • BlackBerry Instant Messaging Connector • BlackBerry Alert • BlackBerry Mail Store Service • BlackBerry User Administration Service • all of the - Blackberry PRD-10459-003 | Administration Guide - Page 117
Administration Guide Return to the BlackBerry Configuration Database when you configured transactional replication Return to the BlackBerry Configuration Database when you configured transactional replication When the BlackBerry® Configuration Database becomes available again after it has stopped - Blackberry PRD-10459-003 | Administration Guide - Page 118
Administration Guide Sending software and BlackBerry Java Applications to BlackBerry devices Sending software and BlackBerry Java 12 Applications to BlackBerry devices Managing BlackBerry Java Applications and BlackBerry Device Software You can use the BlackBerry® Administration Service to - Blackberry PRD-10459-003 | Administration Guide - Page 119
and .alx files, visit www.blackberry.com/ developers to see the BlackBerry Java Development Environment Development Guide. Before you distribute BlackBerry Java Applications, you must specify a shared network folder for BlackBerry Java Applications using the BlackBerry Administration Service. This - Blackberry PRD-10459-003 | Administration Guide - Page 120
access the shared network folder to install BlackBerry Java Applications on BlackBerry devices. Do not add application files to the shared network folder or make changes to the files that the BlackBerry Administration Service stores in the shared network folder. Before you begin: Create a shared - Blackberry PRD-10459-003 | Administration Guide - Page 121
download the .zip file for the latest version of the collaboration client, visit www.blackberry.com/support/downloads. For BlackBerry® Enterprise Server, visit na.blackberry.com/eng/support/ downloads/im_server_compatibility.jsp. 1. In the BlackBerry Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 122
Administration Guide Configuring application control policies The BlackBerry Administration Service includes a standard application control policy for BlackBerry Java Applications that you classify as required, optional, or not permitted. You can change the default settings of the standard - Blackberry PRD-10459-003 | Administration Guide - Page 123
priority determines which custom application control policy the BlackBerry Policy Service applies if you assign multiple software configurations to a user account. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software > Applications. 2. Click Manage - Blackberry PRD-10459-003 | Administration Guide - Page 124
more restrictive. On supported devices, users can make application permissions more restrictive than what the BlackBerry® Enterprise Server administrator sets on BlackBerry devices and what data the unlisted applications can access on BlackBerry devices. The BlackBerry Administration Service has - Blackberry PRD-10459-003 | Administration Guide - Page 125
about the rule settings in application control policies for unlisted applications, see the BlackBerry Enterprise Server Policy Reference Guide. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Software. 2. Click Create an application control policy for - Blackberry PRD-10459-003 | Administration Guide - Page 126
Administration Guide Creating software configurations Configure the priority of application control policies the different application control policies for unlisted applications so that the BlackBerry® Policy Service can determine which application control policies to apply to user accounts when - Blackberry PRD-10459-003 | Administration Guide - Page 127
/go/ serverdocs to see the BlackBerry Device Software Upgrade Guide. Related topics Reconciliation rules for conflicting settings in software configurations, 138 Create a software configuration 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Software - Blackberry PRD-10459-003 | Administration Guide - Page 128
for a specific job, 252 Managing software configurations, 259 Assign a software configuration to multiple user accounts 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for one or more user accounts. 4. Select one - Blackberry PRD-10459-003 | Administration Guide - Page 129
Administration Guide Install BlackBerry Java Applications on a BlackBerry device at a central computer 9. Click Save Log in to the BlackBerry Administration Service again. • Verify that the central computer can access the BlackBerry Administration Service. • Connect the BlackBerry device that is - Blackberry PRD-10459-003 | Administration Guide - Page 130
To troubleshoot errors that display for a task when you send a BlackBerry® Java® Application to a BlackBerry device, or update a BlackBerry Java Application on a BlackBerry device, you can try to determine the cause by collecting the following information: • BlackBerry Policy Service log files from - Blackberry PRD-10459-003 | Administration Guide - Page 131
Administration Guide View the status of a job • BlackBerry Administration Service log files from the day the issue was reported (log level 4 recommended) • BlackBerry device information (for example, the BlackBerry device model, BlackBerry® Device Software version, wireless service provider, IT - Blackberry PRD-10459-003 | Administration Guide - Page 132
reported Data Format Error in packet while installing module An error occurred in the BlackBerry Policy Service that prevented the BlackBerry device from installing the BlackBerry Java Application. In the log files that you collected, locate the user account that experienced the issue. Trace the - Blackberry PRD-10459-003 | Administration Guide - Page 133
. Error messages: BlackBerry Device Software tasks To troubleshoot errors that display for a task when you are updating BlackBerry® Device Software on a BlackBerry device, you can try to determine the cause by collecting the following information: • BlackBerry Policy Service log files from the day - Blackberry PRD-10459-003 | Administration Guide - Page 134
Configuration Database • SQL trace of the BlackBerry Policy Service that communicates with the BlackBerry Configuration Database For information about changing the log level for a BlackBerry® Enterprise Server component, visit www.blackberry.com/support to read article KB04342. For information - Blackberry PRD-10459-003 | Administration Guide - Page 135
Administration Guide View the status of a job You can instruct the user to reset the BlackBerry device and you can send the BlackBerry Device Software update again. 0X10 service book flag disabled: A service book on the BlackBerry device does not permit you to send BlackBerry Device Software - Blackberry PRD-10459-003 | Administration Guide - Page 136
application settings tasks To troubleshoot errors that display for a task when you change the standard application settings on a BlackBerry® device, you can try to determine the cause by collecting the following information: • BlackBerry Synchronization Service log files from the day the issue - Blackberry PRD-10459-003 | Administration Guide - Page 137
: IT policy tasks To troubleshoot errors that display for a task when you send an IT policy to a BlackBerry® device or update an IT policy on a BlackBerry device, you can try to determine the cause by collecting the following information: • BlackBerry Policy Service log files from the day the issue - Blackberry PRD-10459-003 | Administration Guide - Page 138
Administration Guide Stopping a job that is running • SQL trace of the BlackBerry Policy Service that communicates with the BlackBerry Configuration Database For information about changing the log level for a BlackBerry® Enterprise Server component, visit www.blackberry.com/support to read article - Blackberry PRD-10459-003 | Administration Guide - Page 139
default settings for a job schedule, 247 Specify the start time and priority for a job, 253 Stop a job that is running 1. In the BlackBerry® Administration Service, on the Devices menu, expand Deployment jobs. 2. Click Manage deployment jobs. 3. Search for the job that you want to stop. 4. In the - Blackberry PRD-10459-003 | Administration Guide - Page 140
Administration Guide View how the BlackBerry Administration Service resolved software configuration conflicts for a user account View how the BlackBerry Administration Service resolved software configuration conflicts for a user account You can assign multiple software configurations to a user - Blackberry PRD-10459-003 | Administration Guide - Page 141
Guide Reconciliation rules for conflicting settings in software configurations as an asynchronous background activity. You can view the outcome of the reconciliation activities, reconciliation errors, and the applications, software, and settings that the BlackBerry Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 142
Administration Guide Reconciliation rules amount of available memory remains on the BlackBerry device. The BlackBerry Administration Service resolves the deployment method after resolving BlackBerry Java Application. If there is not enough memory available on the BlackBerry device to support the - Blackberry PRD-10459-003 | Administration Guide - Page 143
is assigned to a user account and it contains a BlackBerry Java Application that has a dependency on another BlackBerry Java Application. The dependent application is not supported on the BlackBerry device. Multiple BlackBerry Java Applications have a circular dependency (for example, application - Blackberry PRD-10459-003 | Administration Guide - Page 144
to a group. The version of the BlackBerry Device Software that is supported by the BlackBerry device and by the wireless service provider, and that you ranked highest in the BlackBerry Administration Service, is installed on the BlackBerry device. The BlackBerry® Enterprise Server does not install - Blackberry PRD-10459-003 | Administration Guide - Page 145
Administration Guide Reconciliation rules for conflicting settings in software configurations is assigned to a group that the user account belongs to, the No setting is applied to the BlackBerry device. A user account belongs to multiple groups. The email save copy in sent folder setting is - Blackberry PRD-10459-003 | Administration Guide - Page 146
Administration Guide Reconciliation rules for conflicting settings in software configurations Scenario Rule application control policies), the application control policy that you ranked highest in the BlackBerry® Administration Service is applied to the user's BlackBerry device. Reconciliation - Blackberry PRD-10459-003 | Administration Guide - Page 147
Java Plug-in for Eclipse to generate .cod files that contain the compiled application code for a BlackBerry Java Application. BlackBerry devices execute .cod files to run BlackBerry Java Applications. The BlackBerry JDE and the BlackBerry Java Plug-in for Eclipse also include tools to generate - Blackberry PRD-10459-003 | Administration Guide - Page 148
computer but does not require a full installation of the BlackBerry Desktop Software. You can install a BlackBerry Java Application on a BlackBerry device by installing the files for the BlackBerry Java Application on a web server and instructing the user to browse to the appropriate web address on - Blackberry PRD-10459-003 | Administration Guide - Page 149
the BlackBerry Java Development Environment Development Guide. Make the BlackBerry Java Application available to the BlackBerry Desktop Software 1. Obtain the application installer (.exe file) for the BlackBerry® Java® Application from the application developer, vendor, or wireless service provider - Blackberry PRD-10459-003 | Administration Guide - Page 150
Loader supports .cod files only. To install a MIDlet, convert the .jar file to a .cod file. For more information about how to compile .java and .jar file formats into the .cod file format, visit www.blackberry.com/developers to read the BlackBerry Java Development Environment Development Guide. For - Blackberry PRD-10459-003 | Administration Guide - Page 151
.cod files. A .cod file contains compiled and packaged application code. The BlackBerry Application Web Loader requires these files to install the BlackBerry Java Application. • The maximum .jad file size is 4096 bytes. • The maximum number of .cod files supported by the BlackBerry Application Web - Blackberry PRD-10459-003 | Administration Guide - Page 152
AxLoader.cab file. For more information about obtaining a BlackBerry device password, visit www.blackberry.com/go/docs to read the BlackBerry Application Web Loader Developer Guide. Install the BlackBerry Java Application using the BlackBerry Application Web Loader Send these instructions to users - Blackberry PRD-10459-003 | Administration Guide - Page 153
\Research In Motion\AppLoader. • Obtain the .alx and .cod files for the BlackBerry® Java® Application from the application developer, vendor, or wireless service provider. 1. In \Program Files\Common Files\Research In Motion\Shared\Applications\, create a folder with a unique name to contain - Blackberry PRD-10459-003 | Administration Guide - Page 154
your computer. 2. If prompted, type your BlackBerry device password. 3. Click Next. 4. On your computer, click the link to the loader.exe file that your administrator provided you with. 5. If a security warning displays, click Run. 6. Complete the instructions on the screen. 7. When the installation - Blackberry PRD-10459-003 | Administration Guide - Page 155
required files for the BlackBerry Java Application (a .jad file and the application .cod or .jar files) to a web server, and instruct users to navigate to the appropriate web address using a browser on their BlackBerry devices. Users can use the BlackBerry® Browser or the wireless service provider - Blackberry PRD-10459-003 | Administration Guide - Page 156
® Java® Application from the application developer, vendor, or wireless service provider. 1. Create a web page that you can use to install the BlackBerry Java Application on BlackBerry devices. 2. Copy the application .jad and .cod files or .jar files to the web server that hosts the web page. After - Blackberry PRD-10459-003 | Administration Guide - Page 157
Administration Guide Configuring how users access enterprise applications and web content Configuring how users access enterprise 14 applications and web content Specifying a BlackBerry MDS Connection Service as a central push server At least one BlackBerry® MDS Connection Service in your - Blackberry PRD-10459-003 | Administration Guide - Page 158
Administration Guide Configuring how BlackBerry devices authenticate to content servers Configuring how BlackBerry devices . After you finish: If you set Authentication support enabled to Yes, configure the BlackBerry MDS Connection Service to authenticate to content servers that use NTLM - Blackberry PRD-10459-003 | Administration Guide - Page 159
about the Java® Authentication and Authorization Service configuration file, visit http:// java.sun.com/javase/6/docs/technotes/guides/security/jgss/tutorials/LoginConfigFile.html. Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use - Blackberry PRD-10459-003 | Administration Guide - Page 160
RSA. Configure the BlackBerry MDS Connection Service to support RSA authentication when the BlackBerry MDS Connection Service runs on Windows Server 2008 1. On the computer that hosts the BlackBerry® MDS Connection Service, copy the aceclnt.dll file and sdmsg.dll file from the RSA® Authentication - Blackberry PRD-10459-003 | Administration Guide - Page 161
on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view. 2. Click MDS Connection Service. 3. Click Edit component. 4. On the RSA tab, in the Protocol service information section, in the RSA® authentication support drop-down list, select one of the - Blackberry PRD-10459-003 | Administration Guide - Page 162
storage By default, the BlackBerry® MDS Connection Service does not manage HTTP cookie storage for BlackBerry devices. If the BlackBerry device requires JavaScript® support for its HTTP requests, the BlackBerry device processes cookies. 1. In the BlackBerry Administration Service, on the Servers and - Blackberry PRD-10459-003 | Administration Guide - Page 163
to open trusted connections to a BlackBerry® MDS Connection Service, you must create a key store (the webserver.keystore file) on the computer that hosts the BlackBerry MDS Connection Service. This key store permits the BlackBerry MDS Connection Service to accept HTTPS connections from push - Blackberry PRD-10459-003 | Administration Guide - Page 164
Guide Permitting push applications to make trusted connections to a BlackBerry MDS Connection Service 2. On the Mobile Data Service tab, configure the key store information. Only one key store can exist. The file must be named webserver.keystore and it must be located at :\Program Files - Blackberry PRD-10459-003 | Administration Guide - Page 165
to select the transport protocol (HTTP or HTTPS) for PAP requests. 1. On the computer that hosts the BlackBerry MDS Connection Service, navigate to :\Program Files \Research In Motion\BlackBerry Enterprise Server\MDS\Servers\instance\config. 2. In a text editor, open the rimpublic.properties - Blackberry PRD-10459-003 | Administration Guide - Page 166
Guide Configuring a BlackBerry MDS Connection Service to trust web servers Configuring a BlackBerry MDS Connection Service to trust web servers You can configure the BlackBerry® MDS Connection Service to permit BlackBerry file (JRE cacerts). The BlackBerry MDS Connection Service supports LDAP - Blackberry PRD-10459-003 | Administration Guide - Page 167
device displays the certificate so that the user can accept it. The BlackBerry MDS Connection Service supports DSML version 2. To search for and retrieve the status of the certificates, you can configure the BlackBerry MDS Connection Service to search the OCSP servers or CRL servers. If you search - Blackberry PRD-10459-003 | Administration Guide - Page 168
Administration Guide Configuring a BlackBerry MDS Connection Service to trust web servers If you change the LDAP port number or host server information, you must stop and restart the BlackBerry MDS Connection Service so that the BlackBerry MDS Connection Service can use the new port number or host - Blackberry PRD-10459-003 | Administration Guide - Page 169
Administration Guide Configuring a BlackBerry MDS Connection Service to trust web servers Field Query Limit Service URL User name Description This field specifies the maximum number of entries that you want to return for each query. This field specifies the FQDN - Blackberry PRD-10459-003 | Administration Guide - Page 170
Administration Guide Configuring a BlackBerry MDS Connection Service to trust web servers 6. Click Save all. b. In the Settings section, change the DSML certificate server settings. c. Click the Update icon. After you finish: • To configure the BlackBerry MDS Connection Service to retrieve the - Blackberry PRD-10459-003 | Administration Guide - Page 171
information to a BlackBerry MDS Connection Service configuration set A BlackBerry® MDS Connection Service configuration set is a set of service configurations that the BlackBerry MDS Connection Service instances in your organization can use to communicate with a remote file system, an LDAP - Blackberry PRD-10459-003 | Administration Guide - Page 172
to a BlackBerry MDS Connection Service instance You can assign a BlackBerry® MDS Connection Service configuration set to a BlackBerry MDS Connection Service instance so that BlackBerry device users can access documents on remote file systems from devices, the BlackBerry MDS Connection Service can - Blackberry PRD-10459-003 | Administration Guide - Page 173
Guide Permitting users to access intranet sites on BlackBerry devices using global login information 2. Click MDS Connection Service. site to a .cer file. 2. On the computer that hosts the BlackBerry MDS Connection Service, copy the .cer file to :\Program Files \Java\\lib\ - Blackberry PRD-10459-003 | Administration Guide - Page 174
, on the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > Component view. 2. Click MDS Connection Service. 3. On the HTTP tab, click Edit component. 4. In the Protocol service information section, in the Authentication support enabled drop-down list, click Yes - Blackberry PRD-10459-003 | Administration Guide - Page 175
Administration Guide Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices Permit Java applications to use scalable socket connections with a BlackBerry MDS Connection Service Before you begin: Verify that your system memory supports scalable socket connections. 1. - Blackberry PRD-10459-003 | Administration Guide - Page 176
Administration Guide Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices By default, the maximum number of scalable socket connections is 2000. 6. Click Save all. Prevent the BlackBerry MDS Connection Service from using scalable HTTP By default, the BlackBerry® MDS - Blackberry PRD-10459-003 | Administration Guide - Page 177
Administration Guide Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices Specify how often a BlackBerry MDS Connection Service polls for configuration information You can specify how often a BlackBerry® MDS Connection Service polls the BlackBerry Configuration - Blackberry PRD-10459-003 | Administration Guide - Page 178
an email message filter that applies to all user accounts on a BlackBerry Enterprise Server 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Email. 2. Click the instance that you want to - Blackberry PRD-10459-003 | Administration Guide - Page 179
Guide Creating email message filters 8. To move the email message filter higher or lower in the list, click the Up or Down icons. The BlackBerry drop down list, click Yes. 6. Click Save all. The BlackBerry Administration Service applies email message filters in the order that they are listed in - Blackberry PRD-10459-003 | Administration Guide - Page 180
Enterprise Server as an .xml file. You can then import the .xml file so that you can use it with another instance of the BlackBerry Enterprise Server. Export email message filters for a BlackBerry Enterprise Server 1. In the BlackBerry® Administration Service, on the Servers and components - Blackberry PRD-10459-003 | Administration Guide - Page 181
filters for a user account as an .xml file. You can then import the .xml file so that you can use it with other user accounts. Export email message filters for a user account 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage - Blackberry PRD-10459-003 | Administration Guide - Page 182
application To add an extension plug-in to the BlackBerry® Administration Service, you must first install the application for the extension plug-in on the computer that hosts the BlackBerry® Enterprise Server. Before you begin: Copy the .dll file for the extension plug-in application to the computer - Blackberry PRD-10459-003 | Administration Guide - Page 183
an extension plug-in application on the computer that hosts the BlackBerry® Enterprise Server. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Email. 2. Click the instance that you want to - Blackberry PRD-10459-003 | Administration Guide - Page 184
state database, your organization's messaging environment might experience a performance impact. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > Component view > Email. 2. Click the instance that you want to - Blackberry PRD-10459-003 | Administration Guide - Page 185
Guide Mapping contact information fields for synchronization and contact lookups You can map up to four fields that users define in the contact information on their computers to their BlackBerry a BlackBerry device 1. In the BlackBerry® Administration Service, on the BlackBerry solution management - Blackberry PRD-10459-003 | Administration Guide - Page 186
You can map up to four contact list fields that users define in an email application to a BlackBerry® device. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for a user account. 4. In the search results, click - Blackberry PRD-10459-003 | Administration Guide - Page 187
BlackBerry Enterprise Server. If you do not make the certificate enrollment process required, you must instruct users to start the CA Profile Manager on the devices manually and CRL servers. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy. 2. - Blackberry PRD-10459-003 | Administration Guide - Page 188
finish: For more information about the IT policy rules, see the BlackBerry Enterprise Server Policy Reference Guide. Related topics Assigning IT policies and resolving IT policy conflicts, 43 Configure the BlackBerry MDS Connection Service to connect to the certificate authority If your organization - Blackberry PRD-10459-003 | Administration Guide - Page 189
order that you specify. The order of that you specify for LDAP, DSML, or file communication applies to each communication method separately. The order permits the BlackBerry MDS Connection Service to resolve conflicts between domains if you created multiple communication methods for a specific URL - Blackberry PRD-10459-003 | Administration Guide - Page 190
Guide Add certificate information to a Wi-Fi profile Assign a BlackBerry MDS Connection Service configuration set to a BlackBerry MDS Connection Service instance You can assign a BlackBerry® MDS Connection Service configuration set to a BlackBerry MDS Connection Service instance so that BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 191
see the user guide for the device. Change the polling interval, logging, and pool size for the BlackBerry MDS Connection Service connection to the computer that hosts the BlackBerry MDS Connection Service, navigate to :\Program Files \Research In Motion\BlackBerry Enterprise Server\MDS\Servers - Blackberry PRD-10459-003 | Administration Guide - Page 192
Administration Guide Change the polling interval, logging, and pool size for the BlackBerry MDS Connection Service connection to the certificate authority 4. Save and close the rimpublic.properties file. 5. In the Windows® Services, restart the BlackBerry MDS Connection Service service. Related - Blackberry PRD-10459-003 | Administration Guide - Page 193
the browser settings on users' computers and, if necessary, change them manually. 1. In the BlackBerry® Enterprise Server installation files, navigate to tools/RIMWebComponents. 2. Copy the RIMWebComponents.msi file to a shared network folder. 3. In Microsoft Active Directory Users and Computers - Blackberry PRD-10459-003 | Administration Guide - Page 194
Administration Guide Publish the client files for the BlackBerry Web Desktop Manager in a Windows GPO for Windows Vista 12. In client files for the BlackBerry Web Desktop Manager in a Windows GPO for Windows Vista Before you begin: • Add the web address for the BlackBerry® Administration Service to - Blackberry PRD-10459-003 | Administration Guide - Page 195
Administration Guide Configure users' computers to install the client file for the BlackBerry Web Desktop Manager automatically 15. Expand Administrator Templates. 16. Expand Windows Components. 17. Click ActiveXInstaller Service. 18. Right-click Approved Installation Sites for ActiveX Controls. - Blackberry PRD-10459-003 | Administration Guide - Page 196
Administration Guide Configure users' computers to install the client file for the BlackBerry Web Desktop Manager automatically VALUENAME "UseCoInstall" VALUEON NUMERIC 1 VALUEOFF NUMERIC 0 END POLICY END CATEGORY [strings] EnableActiveXInstallFromAD="Allow user computers to install administrator- - Blackberry PRD-10459-003 | Administration Guide - Page 197
the changes on the login screen, you must direct users to https:///webdesktop/app? page=Login&service=page&orgId=0. Send users the following information: • BlackBerry Web Desktop Manager web page address • IBM® Lotus® Domino® Internet user names and passwords that you configured - Blackberry PRD-10459-003 | Administration Guide - Page 198
Update Guide . Permit users to activate BlackBerry devices using the BlackBerry Web Desktop Manager You can specify whether users can use the BlackBerry® Web Desktop Manager to activate BlackBerry devices using a wired connection to a computer. 1. In the BlackBerry Administration Service, in - Blackberry PRD-10459-003 | Administration Guide - Page 199
colors that your organization uses for UIs. 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view. 2. Click BlackBerry Administration Service. 3. On the Font colors tab, click Edit Component. 4. Type - Blackberry PRD-10459-003 | Administration Guide - Page 200
must be a .jpg or .gif file that is located on a trusted web site. 1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution Topology > BlackBerry Domain > Component view . 2. Click BlackBerry Administration Service. 3. Click Edit component. 198 - Blackberry PRD-10459-003 | Administration Guide - Page 201
send their login information to them. 1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution Topology > BlackBerry Domain > Component view. 2. Click BlackBerry Administration Service. 3. Click Edit component. 4. On the Microsoft® Active Directory - Blackberry PRD-10459-003 | Administration Guide - Page 202
Guide Creating and configuring Wi-Fi profiles and VPN profiles Creating and configuring Wi-Fi profiles and 19 VPN profiles Creating and configuring Wi-Fi profiles You can use Wi-Fi® configuration settings and optional VPN configuration settings to manage BlackBerry same physical area. The support - Blackberry PRD-10459-003 | Administration Guide - Page 203
DNS lookup tool on a Wi-Fi enabled BlackBerry device to verify that the BlackBerry device can access one or more DNS servers. If your organization uses an AAA server, you must configure it. Perform the following actions: • Configure the AAA server to support the Wi-Fi authentication method that your - Blackberry PRD-10459-003 | Administration Guide - Page 204
Configure a Wi-Fi profile on a BlackBerry device You can instruct BlackBerry® device users to perform the following task if you want users to configure a Wi-Fi® profile for the Wi-Fi networks that you did not create a Wi-Fi profile for in the BlackBerry® Administration Service. By default, new Wi-Fi - Blackberry PRD-10459-003 | Administration Guide - Page 205
Before you begin: Create and configure a Wi-Fi profile. 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for one the Wi-Fi configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide. 203 - Blackberry PRD-10459-003 | Administration Guide - Page 206
BlackBerry device. Creating and configuring VPN profiles Wi-Fi® enabled BlackBerry® devices have built-in VPN clients that supports profile based on an existing VPN profile 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > WiFi configuration. - Blackberry PRD-10459-003 | Administration Guide - Page 207
Guide. • To update BlackBerry device information immediately, resend the IT policy to the BlackBerry device. Assign a VPN profile to a group You can assign one or more VPN profiles to a group. Before you begin: Create and configure a VPN profile. 1. In the BlackBerry® Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 208
Administration Guide Delete a Wi-Fi profile 6. On the VPN profiles tab, in the with a Wi-Fi profile that you assigned to the user account. 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > WiFi configuration. 2. Click Manage Wi-Fi profiles. - Blackberry PRD-10459-003 | Administration Guide - Page 209
Administration Guide Importing profile information from a .csv file 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > WiFi configuration. 2. Click Manage VPN profiles. 3. Click the name of a VPN profile. 4. Click Delete profile. 5. Click Yes - Blackberry PRD-10459-003 | Administration Guide - Page 210
list of user accounts, 75 Fields in the .csv file that contains profile information The following table describes the fields that you can configure in a .csv file. The BlackBerry® Administration Service uses the fields in the .csv file to update profile information that you assigned to user accounts - Blackberry PRD-10459-003 | Administration Guide - Page 211
contradict each other, the action that appears closer to the end of the file is the action that the BlackBerry Administration Service processes. If the BlackBerry Administration Service notices an error that is specific to an action during the import process (for example, you formatted an action - Blackberry PRD-10459-003 | Administration Guide - Page 212
BlackBerry devices do not support a WEP passphrase. Configure WEP keys for BlackBerry devices using a Wi-Fi profile If BlackBerry® device users in your organization's environment use BlackBerry point. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand - Blackberry PRD-10459-003 | Administration Guide - Page 213
documentation for the access point. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy > WiFi • For more information about configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide. • Assign the Wi-Fi profile to the user - Blackberry PRD-10459-003 | Administration Guide - Page 214
WEP key updates during a session. BlackBerry devices support LEAP authentication that uses a user 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu about configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide. • Assign the Wi-Fi - Blackberry PRD-10459-003 | Administration Guide - Page 215
Guide Configuring PEAP authentication Configuring PEAP authentication If your organization implements PEAP authentication, Wi-Fi® enabled BlackBerry BlackBerry® Enterprise Solution supports PEAP authentication, see the BlackBerry the BlackBerry® Administration Service, on the BlackBerry solution - Blackberry PRD-10459-003 | Administration Guide - Page 216
Fi profiles, 200 Prerequisites: Distributing a certificate using the BlackBerry Desktop Manager • Using a public or private certificate authority, obtain or generate a digital certificate for the authentication server. The root.der certificate file is stored in the location where the certificate was - Blackberry PRD-10459-003 | Administration Guide - Page 217
device If you do not configure the PEAP configuration settings using the BlackBerry® Administration Service, instruct users to configure the settings in the Wi-Fi® profile on the BlackBerry device. 1. On the BlackBerry device, in the device options, click Wi-Fi Connections. 2. Click the Wi - Blackberry PRD-10459-003 | Administration Guide - Page 218
Guide Configuring EAP-TLS authentication Configuring EAP-TLS authentication If your organization implements EAP-TLS authentication, Wi-Fi® enabled BlackBerry BlackBerry® Enterprise Solution supports EAP-TLS authentication, see the BlackBerry BlackBerry Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 219
BlackBerry Enterprise Server Policy Reference Guide. • Resend the IT policy that you assign to the user accounts to Wi-Fi enabled BlackBerry profile on a BlackBerry device If you do not configure the EAP-TLS configuration settings using the BlackBerry® Administration Service, instruct the users to - Blackberry PRD-10459-003 | Administration Guide - Page 220
instead of configuration settings. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy > Wi- • For more information about configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide. • Resend the IT policy that you assign to - Blackberry PRD-10459-003 | Administration Guide - Page 221
Administration Guide Configuring EAP-FAST authentication Configure EAP-TTLS configuration settings in the Wi-Fi profile on a BlackBerry device If you do not configure the EAP-TTLS configuration settings using the BlackBerry® Administration Service, instruct a user to configure the settings in the - Blackberry PRD-10459-003 | Administration Guide - Page 222
Administration Guide Configuring EAP-FAST authentication Configure EAP-FAST authentication 1. Distribute the .pac file to the wireless policy rules instead of configuration settings. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy > Wi- Fi - Blackberry PRD-10459-003 | Administration Guide - Page 223
the BlackBerry Enterprise Server Policy Reference Guide. • Resend the IT policy that you assign to the user accounts to BlackBerry devices profile on BlackBerry devices If you do not configure the EAP-FAST configuration settings using the BlackBerry® Administration Service, instruct users to - Blackberry PRD-10459-003 | Administration Guide - Page 224
Guide Configuring software tokens for BlackBerry devices Configuring software tokens for BlackBerry 21 devices The BlackBerry® Enterprise Server is designed to work with the RSA® Authentication Manager to provide software token support token seed file (also known as the *.sdtid file) that - Blackberry PRD-10459-003 | Administration Guide - Page 225
to three minutes. Instruct users to use one of the following methods to synchronize the date, time, and time zone settings on the BlackBerry devices with the RSA Authentication Manager: • Adjust the time on BlackBerry devices using the Date/Time option on the BlackBerry devices manually. • Use the - Blackberry PRD-10459-003 | Administration Guide - Page 226
software tokens to each user account. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage token seed file for the user account, perform the following actions: a. Click Browse. b. Navigate to the software token seed file for the user - Blackberry PRD-10459-003 | Administration Guide - Page 227
Administration Guide 11. Click Save all. Assign software tokens to a user account 225 - Blackberry PRD-10459-003 | Administration Guide - Page 228
root certificate of the certification authority to the computer that hosts the BlackBerry Administration Service. 1. On a computer that hosts a BlackBerry Administration Service instance, in :\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin\web.keystore, back up the web - Blackberry PRD-10459-003 | Administration Guide - Page 229
Administration Guide Configuring which IBM Lotus Domino server with DIIOP the BlackBerry Administration Service uses 8. Using the keytool, import the certificate to the web.keystore file (for example, keytool -import -alias httpssl keystore ":\Program Files\Research In Motion\BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 230
Guide Change the information for Microsoft Active Directory authentication 2. Click BlackBerry Administration Service. 3. Click Edit component. 4. On the Domino Authentication (BESD) tab, change the fields as required. 5. Click Save all. 6. Restart the BlackBerry Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 231
a Microsoft Active Directory account, you can bypass the login screen and access the BlackBerry Administration Service and BlackBerry Web Desktop Manager directly. The BlackBerry Monitoring Service does not support single sign-on authentication. Before you turn on single sign-on, you must configure - Blackberry PRD-10459-003 | Administration Guide - Page 232
addresses that support BlackBerry Administration Service single sign-on If you configure BlackBerry® Administration Service single sign-on, you must instruct administrators and BlackBerry® Web Desktop Manager users to access the BlackBerry Administration Service console and BlackBerry Web Desktop - Blackberry PRD-10459-003 | Administration Guide - Page 233
passwords. In this scenario, you can instruct administrators to log into the BlackBerry Administration Service console using the web address https:///webconsole/login and instruct BlackBerry Web Desktop Manager users to log in to BlackBerry Web Desktop Manager using the web address - Blackberry PRD-10459-003 | Administration Guide - Page 234
Guide Regenerate the system credentials for the BlackBerry Administration Service 3. On a computer that hosts a BlackBerry Administration Service instance, in the Windows Services, start the BlackBerry Administration Service services. 4. On the computers that host the remaining BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 235
device to permanently delete all user data, see the user guide for the device. After the new user receives the device, you must activate it. Related topics Assigning BlackBerry devices to user accounts, 79 Use the BlackBerry Administration Service to delete user data and assign the device to a new - Blackberry PRD-10459-003 | Administration Guide - Page 236
tool in the BlackBerry Administration Service, BlackBerry® Desktop Manager, or BlackBerry® Web Desktop Manager. 7. Activate the device. After you finish: For more information about installing the BlackBerry Device Software, see the BlackBerry Device Software Update Guide. Related topics Assigning - Blackberry PRD-10459-003 | Administration Guide - Page 237
Administration Guide Deleting only work data from a device Item the BlackBerry® Browser cache files IT policy PIN encryption key device transport key work service books Description although the device specifies the BlackBerry Browser for personal use, the BlackBerry Browser cache is deleted when - Blackberry PRD-10459-003 | Administration Guide - Page 238
Administration Guide Using IT administration commands to protect a lost or stolen device • In a Microsoft Exchange environment, to disable a user account from the BlackBerry Enterprise Server and remove the BlackBerry Enterprise Server information from the user's mailbox, click Disable the user - Blackberry PRD-10459-003 | Administration Guide - Page 239
Administration Guide Using IT administration commands to protect a lost or stolen device all user information and application data. Protect a stolen device 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for - Blackberry PRD-10459-003 | Administration Guide - Page 240
Guide Using IT administration commands to protect a lost or stolen device Protect a lost device If a user misplaces a BlackBerry® device or if a device is stolen, you can protect the data on the device by locking the device or making it unavailable. 1. In the BlackBerry Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 241
Administration Guide Using IT administration commands to protect a lost or stolen device • To disable a user account from the BlackBerry Enterprise Server and remove the BlackBerry Enterprise Server information from the user's mailbox, click Disable the user and remove the profile document and the - Blackberry PRD-10459-003 | Administration Guide - Page 242
Administration Guide Managing administrator accounts Managing administrator accounts 24 Change role the appropriate permissions. 6. Click Save all. After you finish: Instruct administrators to log out of the BlackBerry Administration Service and log in again so that the changes can take effect - Blackberry PRD-10459-003 | Administration Guide - Page 243
Administration Guide Delete an administrator account 3. In the list of existing roles, click the administrator is also a BlackBerry® device user, remove the BlackBerry device from the administrator account. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, - Blackberry PRD-10459-003 | Administration Guide - Page 244
Administration Guide Managing groups and user accounts Managing groups and user accounts 25 roles. If you are managing a large number of groups (over 3000) using the BlackBerry Administration Service in a single domain, your organization's environment might experience a performance impact. Using - Blackberry PRD-10459-003 | Administration Guide - Page 245
Guide Managing groups Default group Help desk representatives Description of the default group This is a preconfigured group for help desk administrators. This group has the permissions assigned to the Junior Helpdesk role. BlackBerry the BlackBerry® Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 246
Administration Guide Managing user accounts 2. Click Manage groups. 3. Click the group name. 4. Click Edit group. 5. In the Group information section, in the Name field, type a new name for the group. 6. Click Save all. Delete a group 1. In the BlackBerry® Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 247
group and that you replicated the Lotus Domino directory to the messaging servers in your organization's environment. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for one or more user accounts. 4. In the search - Blackberry PRD-10459-003 | Administration Guide - Page 248
Click Save all. Update the contact list manually You can update the contact list in the BlackBerry® Configuration Database so that you can include any organizational changes or updates in the contact list. The amount of time that the BlackBerry Mail Store Service requires to update the contact list - Blackberry PRD-10459-003 | Administration Guide - Page 249
Guide Managing the delivery of BlackBerry Java Applications, BlackBerry Device Software, and device settings to BlackBerry devices Managing the delivery of BlackBerry Java 26 Applications, BlackBerry Device Software, and device settings to BlackBerry the BlackBerry Administration Service waits - Blackberry PRD-10459-003 | Administration Guide - Page 250
Administration Guide Managing the default distribution settings for jobs Change how IT policies are sent to BlackBerry devices You can change the settings that the BlackBerry® Administration Service uses to send all IT policy settings and updates to BlackBerry devices. If you change the default - Blackberry PRD-10459-003 | Administration Guide - Page 251
Administration Guide Managing the default distribution settings for jobs 8. If necessary, in the Total number of tasks per time window per BlackBerry Administration Service instance field, type the total number of IT policy tasks that you want the BlackBerry Enterprise Server to process during - Blackberry PRD-10459-003 | Administration Guide - Page 252
Administration Guide Managing the default distribution settings for jobs 6. On the install or update the BlackBerry Device Software You can change the settings that the BlackBerry® Administration Service uses to install or upgrade the BlackBerry® Device Software on BlackBerry devices. If you - Blackberry PRD-10459-003 | Administration Guide - Page 253
Administration Guide Managing the default distribution settings for jobs Task Steps c. Click the Add icon. 5. On the System throttling tab, in the Maximum number of simultaneous tasks per BlackBerry Administration Service instance field, type the maximum number of BlackBerry Device Software - Blackberry PRD-10459-003 | Administration Guide - Page 254
Administration Guide Managing the distribution settings for a specific job Task Add a an IT policy, the BlackBerry® Administration Service creates jobs to deliver the resulting objects or settings to BlackBerry devices. Before the BlackBerry Administration Service delivers a specific job, you - Blackberry PRD-10459-003 | Administration Guide - Page 255
Administration Guide Managing the distribution settings for a specific job Specify the time for a job, the job starts according to the distribution settings that you configured in the BlackBerry® Administration Service. You can also change the priority of a job. By default, all jobs have a medium - Blackberry PRD-10459-003 | Administration Guide - Page 256
Administration Guide Managing the distribution settings for a specific job Task Add a settings, your organization's environment might experience a performance impact. 1. In the BlackBerry Administration Service, on the Devices menu, expand Deployment jobs. 2. Click Manage deployment jobs. - Blackberry PRD-10459-003 | Administration Guide - Page 257
10. Click Save all. Change how a job sends the BlackBerry Device Software to BlackBerry devices You can change how the BlackBerry® Administration Service installs or updates the BlackBerry® Device Software in a specific job on BlackBerry devices. You can change the distribution settings for a job - Blackberry PRD-10459-003 | Administration Guide - Page 258
job in a time window section, in the Maximum number of simultaneous tasks per BlackBerry Administration Service instance field, type the maximum number of BlackBerry Device Software tasks in the job that you want the BlackBerry® Enterprise Server to process at the same time. The default value is 25 - Blackberry PRD-10459-003 | Administration Guide - Page 259
Guide Managing the distribution settings for a specific job Change how a job sends standard application settings to BlackBerry devices BlackBerry settings on BlackBerry devices. You can change how the BlackBerry Administration Service sends settings and updates in jobs to BlackBerry devices. If - Blackberry PRD-10459-003 | Administration Guide - Page 260
Guide Managing BlackBerry Java Applications on BlackBerry devices 8. If necessary, in the Default throttling for all BlackBerry Device Software Application Settings tasks in each job in a time window section, in the Maximum number of simultaneous tasks per BlackBerry Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 261
Guide Managing software configurations 6. Perform one of the following actions: • If you configured the software configuration to permit unlisted applications on BlackBerry belong to the group. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Group. 2. - Blackberry PRD-10459-003 | Administration Guide - Page 262
Administration Guide Managing software configurations 6. In the Available software configurations list, click configuration are removed from the BlackBerry® device associated with the user account. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User - Blackberry PRD-10459-003 | Administration Guide - Page 263
Internet or to your organization's intranet from their BlackBerry devices. 1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service. 2. Click the instance that you want to change - Blackberry PRD-10459-003 | Administration Guide - Page 264
Guide Restricting user access to content on web servers A web site that uses DNS load balancing returns a single IP address to the BlackBerry MDS Connection Service but might use multiple IP addresses to provide access to the web site. As a result, the BlackBerry MDS Connection Service - Blackberry PRD-10459-003 | Administration Guide - Page 265
Administration Guide Restricting user access to content on web servers 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view. 2. Click MDS Connection Service. 3. Click Edit component. 4. On the - Blackberry PRD-10459-003 | Administration Guide - Page 266
Administration Guide Restricting user access to media content in the BlackBerry Browser Assign a pull rule to user accounts Before you begin: Create a pull rule. Assign web address patterns to the pull rule. 1. In the BlackBerry® Administration Service, in the BlackBerry solution management menu, - Blackberry PRD-10459-003 | Administration Guide - Page 267
Administration Guide Restricting user access to media content in the BlackBerry Browser Configure download limits for media content types You can configure the BlackBerry® MDS Connection Service instances in your organization's environment to limit the size of media content that BlackBerry device - Blackberry PRD-10459-003 | Administration Guide - Page 268
Administration Guide Configuring Integrated Windows authentication so that users can access resources on devices using the BlackBerry® Browser or Files application without typing a user name and password. Before you configure the BlackBerry MDS Connection Service to support Integrated Windows - Blackberry PRD-10459-003 | Administration Guide - Page 269
Guide Configuring Integrated Windows authentication so that users can access resources on your organization's network • Verify that the application server that hosts the intranet site and the web application that runs on the application server support www.blackberry.com to specified services only • - Blackberry PRD-10459-003 | Administration Guide - Page 270
Guide Configuring Integrated Windows authentication so that users can access resources on your organization's network 6. Select the HTTP service If required, configure BlackBerry® MDS Connection Service to use a for the file server that with the Windows Server Support Tools. For more information - Blackberry PRD-10459-003 | Administration Guide - Page 271
configure support for Integrated Windows® authentication, you must create a Microsoft Active Directoryaccount that the BlackBerry MDS Connection Service can use with a global catalog server, in the rimpublic.properties file, type application.handler.exchange.domain= where - Blackberry PRD-10459-003 | Administration Guide - Page 272
your organization's network. • If required, configure BlackBerry® MDS Connection Service to use a Microsoft Active Directory account when the Save all. 7. On the HTTP tab, click Edit component. 8. In the Authentication support enabled drop-down list, click Yes. 9. Click Save all. 10. On the Pull - Blackberry PRD-10459-003 | Administration Guide - Page 273
Environment Development Guide. Restrict push applications from sending data to BlackBerry devices You can turn on push authentication to permit only authenticated push applications to send push requests to applications on BlackBerry® devices. 1. In the BlackBerry Administration Service, in the - Blackberry PRD-10459-003 | Administration Guide - Page 274
for the appropriate instances of the BlackBerry MDS Connection Service. 1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view. 2. Click MDS Connection Service. 3. Click Edit component. 4. On the Push - Blackberry PRD-10459-003 | Administration Guide - Page 275
Administration Guide Restricting the push application content that users can receive After you finish: Create a push rule. Related topics Restrict push applications from sending data to BlackBerry devices, 271 Create a push rule 1. In the BlackBerry® Administration Service, in the Servers and - Blackberry PRD-10459-003 | Administration Guide - Page 276
Administration Guide Restricting the push application content that users can receive 2. Click Manage push rule. • Assign push initiators to the push rule. 1. In the BlackBerry® Administration Service, in the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for one - Blackberry PRD-10459-003 | Administration Guide - Page 277
types of push requests, visit www.blackberry.com/developers to see the BlackBerry Java Development Environment Development Guide. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection - Blackberry PRD-10459-003 | Administration Guide - Page 278
queues the push connections that exceed this limit. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service. 2. Click the instance that you want to configure active connections - Blackberry PRD-10459-003 | Administration Guide - Page 279
Administration Guide Managing push application requests Configure the maximum number of queued connections that a BlackBerry MDS Connection Service can process The BlackBerry® MDS Connection Service queues push connections when the number of connections exceeds a limit that you specify. You can - Blackberry PRD-10459-003 | Administration Guide - Page 280
devices. Turn off the wireless backup of organizer data for a user account 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for a user account. 4. In the search results, click the display name for the user - Blackberry PRD-10459-003 | Administration Guide - Page 281
Guide Turning off organizer data synchronization 7. In the Organizer data synchronization list, click Clear backed up data for organizer data synchronization. Delete a user's organizer data from a BlackBerry Enterprise Server If the BlackBerry BlackBerry® Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 282
Administration Guide Changing how organizer data synchronizes • To prevent the direction of organizer data synchronization for a specific user account 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search - Blackberry PRD-10459-003 | Administration Guide - Page 283
during organizer data synchronization for all user accounts on a BlackBerry Enterprise Server 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Synchronization. 2. Click the instance that you - Blackberry PRD-10459-003 | Administration Guide - Page 284
® Enterprise Server does not synchronize the user's address book and memo application to the user's BlackBerry device. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for a user account. 4. In the search results - Blackberry PRD-10459-003 | Administration Guide - Page 285
Guide Managing your organization's messaging environment and attachment support Managing your organization's messaging 29 environment and attachment support BlackBerry device when no email message filters apply to the email messages. 1. In the BlackBerry Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 286
Administration Guide Managing message forwarding 5. In the Messaging area and do not want to receive email messages during that time). When you turn off message forwarding for user accounts, users cannot send or receive email messages. 1. In the BlackBerry Administration Service, on the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 287
out of a wireless coverage area and does not want to receive email messages during that time). When you turn off message forwarding for a user account, the user cannot send or receive email messages. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User - Blackberry PRD-10459-003 | Administration Guide - Page 288
device. The email messages remain in the email application on the user's computer. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for one or more user accounts. 4. Select the user accounts that you want - Blackberry PRD-10459-003 | Administration Guide - Page 289
Administration Guide Managing access to remote message data Turn off wireless message reconciliation for a BlackBerry Enterprise in the pair. • In the Windows® Services, restart the BlackBerry Dispatcher. 7. Repeat step 2 to step 6 for each BlackBerry Enterprise Server instance that you want to - Blackberry PRD-10459-003 | Administration Guide - Page 290
Services, restart the BlackBerry Dispatcher. 9. Repeat step 2 to step 8 for each BlackBerry BlackBerry® Enterprise Server supports email messages that contain HTML and rich content on BlackBerry devices that are running BlackBerry® Device Software version 4.5 or later. You can turn off support - Blackberry PRD-10459-003 | Administration Guide - Page 291
rich content and whether a user can download images to a BlackBerry® device automatically. A user can choose whether to turn off support on the BlackBerry device. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search - Blackberry PRD-10459-003 | Administration Guide - Page 292
Administration Guide Configuring IBM Lotus Notes links on devices • In the Windows® Services, restart the BlackBerry Dispatcher. 7. Repeat step 2 through step 6 for each BlackBerry Enterprise Server instance that you want to turn off rich text formatting or inline images for. Turn off support for - Blackberry PRD-10459-003 | Administration Guide - Page 293
link to display in the email message. BlackBerry Enterprise Server 4.1 SP6 or later supports Lotus Notes links on devices if the Domino server name and host name to the map manually using a registry value. 1. On the computer that hosts the BlackBerry Messaging Agent, click Start > Run. 2. Type - Blackberry PRD-10459-003 | Administration Guide - Page 294
Administration Guide Configuring IBM Lotus Notes links on devices By default, the organization's environment has security restrictions, you can turn off support for Lotus Notes links using a registry value. 1. On the computer that hosts the BlackBerry® Messaging Agent, click Start > Run. 2. Type - Blackberry PRD-10459-003 | Administration Guide - Page 295
Guide Synchronizing folders on the BlackBerry device Synchronizing folders on the BlackBerry device Control which published public contact folders a user can synchronize to a BlackBerry synchronize. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand - Blackberry PRD-10459-003 | Administration Guide - Page 296
access the public contact databases that you specified, use the BlackBerry Administration Service to control which public contact databases users can access, or instruct users to use the BlackBerry® Desktop Manager or BlackBerry® Web Desktop Manager to select the available public contact databases - Blackberry PRD-10459-003 | Administration Guide - Page 297
Administration Guide Configuring access to documents on remote file systems Control which public contact databases a user can access from the BlackBerry device 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search - Blackberry PRD-10459-003 | Administration Guide - Page 298
to communicate with a remote file system To permit the BlackBerry® MDS Connection Service to communicate with a remote file system, you specify the URL for the remote file system and the type of access (Linux® or Windows®) that the domain of the remote file system supports. You can also provide - Blackberry PRD-10459-003 | Administration Guide - Page 299
Administration Guide Configuring access to documents on remote file systems Add communication information to a BlackBerry MDS Connection Service configuration set A BlackBerry® MDS Connection Service configuration set is a set of service configurations that the BlackBerry MDS Connection Service - Blackberry PRD-10459-003 | Administration Guide - Page 300
to a BlackBerry MDS Connection Service instance You can assign a BlackBerry® MDS Connection Service configuration set to a BlackBerry MDS Connection Service instance so that BlackBerry device users can access documents on remote file systems from devices, the BlackBerry MDS Connection Service can - Blackberry PRD-10459-003 | Administration Guide - Page 301
is different from the disclaimer that you added for all users on a BlackBerry® Enterprise Server. A user cannot change the disclaimer that you define. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for the user - Blackberry PRD-10459-003 | Administration Guide - Page 302
a conflict rule. 5. Click Save all. Turn off disclaimers for email messages 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > Component view > Email. 2. Click the instance that you want to change. 3. Click - Blackberry PRD-10459-003 | Administration Guide - Page 303
administration email address. Send a notification message to all users in a BlackBerry Domain 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry solution topology. 2. Click BlackBerry Domain. 3. On the Domain information tab, click Send message to - Blackberry PRD-10459-003 | Administration Guide - Page 304
Guide Automated notification messages 2. Click an instance. 3. Under Manage BlackBerry Enterprise Server users, click Send message to users. 4. Type the message that you want to send. 5. Click Send message. Send a notification message to group members 1. In the BlackBerry® Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 305
Administration Guide How the BlackBerry Attachment Connector communicates with BlackBerry Attachment Service instances • If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software \WOW6432Node\Research In Motion\BlackBerry Enterprise Server\Agents. 5. Right-click - Blackberry PRD-10459-003 | Administration Guide - Page 306
message attachments that are in all other file formats. For more information about configuring high availability for the BlackBerry Attachment Service, see the BlackBerry Enterprise Server Planning Guide. You can change how a BlackBerry Attachment Connector processes attachment requests that it - Blackberry PRD-10459-003 | Administration Guide - Page 307
Administration Guide Attachment file formats that the BlackBerry Attachment Service supports Change how a BlackBerry Attachment Connector restores a lost connection to a BlackBerry Attachment Service Based on the number of users in your organization's environment, if you change the BlackBerry® - Blackberry PRD-10459-003 | Administration Guide - Page 308
Administration Guide Attachment file formats that the BlackBerry Attachment Service supports Limitations for supported attachment file formats Format and extension audio OpenOffice Format version 1.1 - .odp files OpenOffice Format version 1.1 - .ods files 306 Limitations You must install the - Blackberry PRD-10459-003 | Administration Guide - Page 309
more memory is allocated to each running conversion process. The maximum file size of attachments impacts the amount of cached memory that the BlackBerry Attachment Service uses. By default, the BlackBerry Attachment Service does not limit the file size of an attachment that is embedded in an email - Blackberry PRD-10459-003 | Administration Guide - Page 310
Administration Guide Changing how a BlackBerry Attachment Service converts attachments BlackBerry Attachment Service optimization settings Setting Submit port Description Range This setting specifies the TCP/IP port number that a BlackBerry® Attachment - Service uses to listen for and receive - Blackberry PRD-10459-003 | Administration Guide - Page 311
how many levels of zipped files that the BlackBerry Attachment Service can process. For example, if you set this field to 2, the BlackBerry Attachment Service processes the .zip files within a .zip file. If you set this field to 1, the BlackBerry Attachment Service only lists the contents of - Blackberry PRD-10459-003 | Administration Guide - Page 312
Guide Turn off support for an attachment file format for a BlackBerry Attachment Service File format RTF ZIP archives Suggested size less than 2000 KB less than 2000 KB Turn off support for an attachment file format for a BlackBerry Attachment Service The BlackBerry® Attachment Service - Blackberry PRD-10459-003 | Administration Guide - Page 313
Administration Guide Changing how the BlackBerry Messaging Agent reconciles attachments to the messaging server 4. On the Supported Attachment Server instances tab, click the Edit icon for the BlackBerry Attachment Service that you want to support additional file formats. 5. In the field at the - Blackberry PRD-10459-003 | Administration Guide - Page 314
A user might be able to open specific file formats using the media application on the BlackBerry device. The default maximum file size of attachments that users can download to their BlackBerry devices is 3072 KB (3 MB). 1. In the BlackBerry Administration Service, on the Servers and components menu - Blackberry PRD-10459-003 | Administration Guide - Page 315
Administration Guide Changing how the BlackBerry Messaging Agent reconciles attachments to the messaging server 2. Click the instance that you want to change 0 and 10240 (10 MB). If you type 0, users cannot download attachments in a native format to their BlackBerry devices. 5. Click Save all. 313 - Blackberry PRD-10459-003 | Administration Guide - Page 316
calendar entries on a device and the calendar entries on a computer, the process writes information about the differences to the BlackBerry Messaging Agent log file and, optionally, automatically corrects the calendar synchronization errors that it finds. It is a best practice to schedule corrective - Blackberry PRD-10459-003 | Administration Guide - Page 317
Administration Guide Correcting calendar synchronization errors on devices • To turn on corrective settings for corrective calendar synchronization 1. Copy the BlackBerry® Enterprise Server installation files to a computer that hosts a BlackBerry Enterprise Server instance. 2. Extract the contents - Blackberry PRD-10459-003 | Administration Guide - Page 318
Administration Guide Correcting calendar synchronization errors on devices Permit corrective calendar synchronization to correct errors automatically You can specify whether corrective calendar synchronization adds calendar synchronization errors to the BlackBerry® Messaging Agent log file or adds - Blackberry PRD-10459-003 | Administration Guide - Page 319
Guide Correcting calendar synchronization errors on devices • To check for calendar synchronization errors during a specific range of days in the calendar for all user accounts that are associated with a BlackBerry you extract the BlackBerry® Enterprise Server installation files to the computer, - Blackberry PRD-10459-003 | Administration Guide - Page 320
Guide Correcting calendar synchronization errors on devices • To configure calendar synchronization to recur on specific days for all user accounts that are associated with a BlackBerry Copy the BlackBerry® Enterprise Server installation files to a computer that hosts a BlackBerry Enterprise Server - Blackberry PRD-10459-003 | Administration Guide - Page 321
Guide Correcting calendar synchronization errors on devices • To configure the time period that corrective calendar synchronization sessions are randomly distributed in for all user accounts that are associated with a BlackBerry information to the BlackBerry® Messaging Agent log file: Item DIF MOD - Blackberry PRD-10459-003 | Administration Guide - Page 322
device at a regular interval. You can use the BlackBerry Administration Service to start corrective calendar synchronization manually for a user account. 1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand User. 2. Click Manage users. 3. Search for - Blackberry PRD-10459-003 | Administration Guide - Page 323
connections that the BlackBerry Collaboration Service supports for instant messaging BlackBerry Java Applications on devices" sections of the BlackBerry Enterprise Server Administration Guide. To download the .zip file for the appropriate collaboration client, visit www.blackberry.com/support - Blackberry PRD-10459-003 | Administration Guide - Page 324
Administration Guide Change the transport protocol for a Microsoft instant messaging environment 8. Click Save all. Change the transport protocol for a Microsoft instant messaging environment 1. In the BlackBerry® Administration Service, on the Servers and components menu, expand BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 325
Administration Guide Specify the Windows domain name for users who log in to a a collaboration client on their BlackBerry® devices. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > - Blackberry PRD-10459-003 | Administration Guide - Page 326
Guide Managing instant messaging features 5. In the General section, in the Inactivity timeout (milliseconds) field, type a value, in milliseconds. 6. Click Save all. Managing instant messaging features Prevent users from sending specific file of file types that users can send using the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 327
users can save their instant messaging conversations as .txt files in the internal memory of their BlackBerry devices or on an external memory device. You can In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry solution topology > BlackBerry Domain > - Blackberry PRD-10459-003 | Administration Guide - Page 328
Administration Guide Managing instant messaging features < ,HomeState,HomeCity,WorkAddress,WorkZip,WorkCity,WorkSt ate,LoginId"/> 6. Save the UserInfoConfig.xml file. 7. Restart the IBM Lotus Domino server. 8. To verify that the new - Blackberry PRD-10459-003 | Administration Guide - Page 329
• BlackBerry Monitoring Service Application Core • BlackBerry Monitoring Service Data Collection Subsystem • BlackBerry Monitoring Service Polling Engine BlackBerry Router BlackBerry Policy Service • BlackBerry Administration Service Application Server • BlackBerry Administration Service Native Code - Blackberry PRD-10459-003 | Administration Guide - Page 330
: • BlackBerry Administration Service - Application Server • BlackBerry Administration Service - Native Code Container • BlackBerry Mail Store Service • BlackBerry Instant Messaging Connector • BlackBerry MDS Connection Service • BlackBerry Dispatcher • BlackBerry Attachment Service • BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 331
Administration Guide BlackBerry Enterprise Trait Tool traits The BlackBerry Enterprise Trait Tool file is located in the installation files for the BlackBerry Enterprise Server and is named TraitTool.exe. You must launch the TraitTool.exe file using a Windows® command prompt. Use the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 332
. This trait specifies the version of the BundleRequest.xml file that the BlackBerry® Infrastructure supports. BASProxyBasicAuthPassword and BASProxyBasicAuthUID The default version is 1.0. If the BlackBerry Administration Service uses HTTP basic authentication to authenticate with a proxy server - Blackberry PRD-10459-003 | Administration Guide - Page 333
Administration Guide Trait DocumentThrottleMaxDocOpen DominoDisableConfirmEmailDelivery DominoSmartSyncDays DominoSmartSyncEnable BlackBerry Enterprise Trait Tool traits Description for all the BlackBerry Administration Service instances in the BlackBerry Domain. If you do not configure these - Blackberry PRD-10459-003 | Administration Guide - Page 334
Guide Trait DominoSmartSyncSchedule DominoSmartSyncSendUpdate DominoSmartSyncStartWindow BlackBerry Enterprise Trait Tool traits Description BlackBerry Enterprise Server, or all user accounts. If you want the BlackBerry the BlackBerry Messaging Agent log file, or writes the errors to the log file - Blackberry PRD-10459-003 | Administration Guide - Page 335
to devices. Devices require the Lotus Notes .id files to support Lotus Notes encryption. If you want the BlackBerry Enterprise Server to synchronize Lotus Notes .id files with the Lotus Notes ID vault automatically and send the files to devices, change the value to true (1). If you do not want the - Blackberry PRD-10459-003 | Administration Guide - Page 336
if there is a hung synchronization event. The default value of 10. This trait specifies the maximum number of times that the BlackBerry Synchronization Service polls a device to determine if the device is out of a wireless coverage area or if wireless synchronization is disabled on the device. 334 - Blackberry PRD-10459-003 | Administration Guide - Page 337
Administration Guide BlackBerry Enterprise Trait Tool traits Trait MaxSyncServerSlowSyncsInProcess Description The default value is 2. This trait specifies the maximum number of full synchronization events that a BlackBerry Synchronization Service can start before it schedules more full - Blackberry PRD-10459-003 | Administration Guide - Page 338
for example, commandId1:commandId2. The default value is 3:18. Contact a BlackBerry Technical Support representative before you change the default value of this trait. This trait specifies whether the BlackBerry Policy Service uses throttling to send applications the same way that it throttles IT - Blackberry PRD-10459-003 | Administration Guide - Page 339
Guide Trait PolicyThrottlingMaxBESJobs PolicyThrottlingMaxDomainJobs PolicyThrottlingP2PKeyRate PrepopulatePIMForNotesUsers RouterAutoDiscoveryMethod BlackBerry Enterprise Trait Tool traits Description This trait specifies the maximum number of IT policies and service books that a BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 340
Administration Guide Managing BlackBerry CAL keys Trait SlowSyncPollCycleInterval ServerHealthPercentage UserHealthPercentage Description This trait specifies the interval (in minutes) between the times that the BlackBerry Synchronization Service reviews the list of users, to determine how many - Blackberry PRD-10459-003 | Administration Guide - Page 341
CAL keys to computers in other BlackBerry Domain instances or troubleshoot BlackBerry CAL key issues, copy the BlackBerry CAL keys from the BlackBerry Administration Service to a text file. Add or delete a BlackBerry CAL key 1. In the BlackBerry® Administration Service, on the Servers and components - Blackberry PRD-10459-003 | Administration Guide - Page 342
Administration Guide Configuring the BlackBerry Mail Store Service instance that updates the contact list Configuring the BlackBerry Mail Store Service instance that updates the contact list The BlackBerry® Configuration Database contains your organization's contact list and a list of BlackBerry® - Blackberry PRD-10459-003 | Administration Guide - Page 343
Administration Guide Configure how users search for email addresses in a Hosted BlackBerry services environment 3. At the command prompt, navigate to \tools. 4. Perform one of the following actions: • To permit a BlackBerry Mail Store Service instance to update the contact list, - Blackberry PRD-10459-003 | Administration Guide - Page 344
Administration Guide Configuring BlackBerry Policy Service throttling You can configure BlackBerry Policy Service throttling using the BlackBerry Enterprise Trait Tool. You can access the BlackBerry Enterprise Trait Tool in the Tools folder of the BlackBerry Enterprise Server installation files. - Blackberry PRD-10459-003 | Administration Guide - Page 345
Administration Guide Configuring BlackBerry Policy Service throttling Configure BlackBerry Policy Service throttling for IT policies and service books 1. Copy the BlackBerry® Enterprise Server installation files to a computer that hosts the primary BlackBerry Enterprise Server instance. 2. Extract - Blackberry PRD-10459-003 | Administration Guide - Page 346
that it uses to throttle IT policies and service books. Configure BlackBerry Policy Service throttling for application polling 1. Copy the BlackBerry® Enterprise Server installation file to a computer that hosts the primary BlackBerry Enterprise Server instance. 2. Extract the contents to a folder - Blackberry PRD-10459-003 | Administration Guide - Page 347
that you want to delete. 5. Press ENTER. Example: Deleting a BlackBerry Policy Service throttling setting If you want to delete the maximum number of IT policies and service books that all BlackBerry Policy Service instances can send to BlackBerry devices each minute, type traittool -global -trait - Blackberry PRD-10459-003 | Administration Guide - Page 348
the DWORD value to the port number that the syslog tools listen on. 6. Click OK. 7. In the Windows Services, restart the service for the BlackBerry Enterprise Server component. Related topics Restarting BlackBerry Enterprise Server components, 327 Syslog connection type and port number, 386 346 - Blackberry PRD-10459-003 | Administration Guide - Page 349
or stop the services. The BlackBerry Controller can also restart other BlackBerry Enterprise Server services if they stop responding. Services that require database access are installed in manual start mode and the BlackBerry Controller starts the services when the BlackBerry Dispatcher verifies the - Blackberry PRD-10459-003 | Administration Guide - Page 350
Guide How the BlackBerry Controller monitors the BlackBerry Enterprise Server components Task Change how the BlackBerry Controller restarts the BlackBerry the BlackBerry Controller monitors, the BlackBerry Enterprise Server tracks the missed health check in the BlackBerry Messaging Agent log file - Blackberry PRD-10459-003 | Administration Guide - Page 351
8:00 AM and 5:00 PM if it detects a nonresponsive thread. Change the maximum number of user.dmp files that each BlackBerry Enterprise Server creates daily before the BlackBerry Controller restarts the BlackBerry Messaging Agent. To turn off the time range, in the RestartAgentOnHungBlackoutFrom and - Blackberry PRD-10459-003 | Administration Guide - Page 352
Administration Guide How the BlackBerry Controller monitors the BlackBerry Enterprise Server components Change how the BlackBerry Controller restarts a BlackBerry Enterprise Server service By default, the BlackBerry® Controller restarts a BlackBerry® Enterprise Server service if it stops - Blackberry PRD-10459-003 | Administration Guide - Page 353
Administration Guide How the BlackBerry Controller monitors the BlackBerry Enterprise Server components Task Change how the BlackBerry Controller restarts the BlackBerry Router. Change how the BlackBerry Controller restarts the BlackBerry Mail Store Service. Change how the BlackBerry Controller - Blackberry PRD-10459-003 | Administration Guide - Page 354
Guide BlackBerry Enterprise Server Alert Tool Task 4. Click OK. Steps • To prevent the BlackBerry Controller from restarting the BlackBerry Synchronization Service if the service stops responding, type 0. • To permit the BlackBerry Controller to restart the BlackBerry Synchronization Service - Blackberry PRD-10459-003 | Administration Guide - Page 355
Guide BlackBerry Enterprise Server Alert Tool Define a notification recipient You can specify a notification recipient for the BlackBerry messages to the contact if the Messenger service for Windows® is running on the computer that you installed the BlackBerry Enterprise Server Alert Tool on, and - Blackberry PRD-10459-003 | Administration Guide - Page 356
Logs. This is the same location that the BlackBerry® Enterprise Server component log files are stored in. 1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > Synchronization. 2. Click the instance - Blackberry PRD-10459-003 | Administration Guide - Page 357
Save all. Log files for BlackBerry Enterprise Server components You can use log files to record the activity of BlackBerry® Enterprise Server components and troubleshoot issues with the components. The BlackBerry Enterprise Server creates a log file for each BlackBerry Enterprise Server component - Blackberry PRD-10459-003 | Administration Guide - Page 358
in the Windows® Services, restart the BlackBerry Enterprise Server services. Changing how BlackBerry Enterprise Server components create log files Add a prefix to the file names of the log files for BlackBerry Enterprise Server components 1. In the BlackBerry® Administration Service, on the Servers - Blackberry PRD-10459-003 | Administration Guide - Page 359
you save to the log files is detailed or limited by changing the logging level for a BlackBerry® Enterprise Server component. A more detailed logging level can help you troubleshoot issues with a BlackBerry Enterprise Server component. 1. In the BlackBerry Administration Service, on the Servers and - Blackberry PRD-10459-003 | Administration Guide - Page 360
identifier that is included in the file name. For example, a log file that is named BBServer01_SYNC_01_20080120_001.txt uses the default component identifier SYNC to identify the BlackBerry Synchronization Service component. 1. In the BlackBerry Administration Service, on the Servers and components - Blackberry PRD-10459-003 | Administration Guide - Page 361
the encoding supports the tools that you use to parse and examine the log files. You can specify a different character encoding for each BlackBerry Enterprise Server component. You can use the ANSI®, UTF-8, and UTF-16LE character encoding methods. 1. In the BlackBerry Administration Service, on the - Blackberry PRD-10459-003 | Administration Guide - Page 362
computer that hosts the BlackBerry Administration Service, in the Windows® Services, restart the BlackBerry Administration Service - Native Code Container service. Related topics Restarting BlackBerry Enterprise Server components, 327 Component identifiers for log files You can identify the names - Blackberry PRD-10459-003 | Administration Guide - Page 363
• To write warning messages to the log files, click Warning. • To write daily activities to the log files, click Informational. • To write additional information to the log files that can help you troubleshoot issues with the BlackBerry MDS Connection Service, click Debug. 5. Click Save all. Related - Blackberry PRD-10459-003 | Administration Guide - Page 364
Guide BlackBerry MDS Connection Service log files Restarting BlackBerry Enterprise Server components, 327 Change the interval that the BlackBerry MDS Connection Service writes information to a log file The interval that the BlackBerry® MDS Connection Service writes information to a log file - Blackberry PRD-10459-003 | Administration Guide - Page 365
Administration Guide BlackBerry MDS Connection Service log files 5. Click Save all. Related topics Restarting BlackBerry Enterprise Server components, 327 Configure BlackBerry MDS Connection Service to log DSML information 1. On the computer that hosts the BlackBerry® MDS Connection Service, - Blackberry PRD-10459-003 | Administration Guide - Page 366
Administration Guide BlackBerry MDS Connection Service log files Task Steps Monitor HTTP headers for request and response messages that the web server sends or receives when users retrieve content from the Internet and intranet on BlackBerry devices. Monitor HTTP headers and the body of response - Blackberry PRD-10459-003 | Administration Guide - Page 367
Guide BlackBerry Collaboration Service log files Information in BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 368
Administration Guide BlackBerry Collaboration Service log files Task Trace how data packets travel inside the GME network layer from the BlackBerry Collaboration Service to the BlackBerry Dispatcher. 5. Click Save all. Related topics Restarting BlackBerry Enterprise Server components, 327 Steps - Blackberry PRD-10459-003 | Administration Guide - Page 369
® Enterprise Server components authenticate the port connections over a TCP/IP or UDP/IP connection that uses SSL or TLS. BlackBerry Administration Service connection types and port numbers Item Connection type for a Microsoft® SQL Server®, incoming data TCP connections from, and outgoing - Blackberry PRD-10459-003 | Administration Guide - Page 370
Administration Guide BlackBerry Administration Service connection types and port numbers Item Connection type incoming data connections from, and outgoing data connections to, browsers incoming data connections from, and outgoing data connections to, BlackBerry® Enterprise Server components - Blackberry PRD-10459-003 | Administration Guide - Page 371
Administration Guide BlackBerry Attachment Service connection types and port numbers Item Connection Default port UI where you can type number configure the connection 17600 to 17609 and 17800 to 17809 BlackBerry Attachment Service connection types and port numbers Item Connection type - Blackberry PRD-10459-003 | Administration Guide - Page 372
Administration Guide BlackBerry Collaboration Service connection types and port numbers Item Connection Default port UI where you can configure type number the connection \BlackBerry Enterprise Server \Database\Port BlackBerry Collaboration Service connection types and port numbers Item - Blackberry PRD-10459-003 | Administration Guide - Page 373
connections to, any of the following BlackBerry® Enterprise Server components: • BlackBerry Administration Service • BlackBerry Attachment Service • BlackBerry Collaboration Service • BlackBerry Dispatcher • BlackBerry MDS Connection Service • BlackBerry Messaging Agent Connection type TCP Default - Blackberry PRD-10459-003 | Administration Guide - Page 374
Administration Guide BlackBerry Controller connection types and port numbers Item • BlackBerry Policy Service • BlackBerry Synchronization Service Connection type Default port UI where you can configure number the connection \BlackBerry Enterprise Server \Database\Port • On a 64-bit version - Blackberry PRD-10459-003 | Administration Guide - Page 375
Administration Guide BlackBerry Dispatcher connection types and port numbers Item outgoing syslog connections to the BlackBerry Messaging Agent Connection type UDP Default port UI where you can configure number the connection Enterprise Server \Logging Info \Mailbox Agent \SysLogHost port - - Blackberry PRD-10459-003 | Administration Guide - Page 376
Guide BlackBerry Dispatcher connection types and port numbers Item incoming data connections from, and outgoing data connections to, one or more of the following BlackBerry® Enterprise Server components: • BlackBerry Collaboration Service • BlackBerry MDS Connection Service • BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 377
Administration Guide BlackBerry Messaging Agent connection types and port numbers Item Connection Default port a 32-bit version of Windows: HKEY_LOCAL_MACHI NE\SOFTWARE \Research In Motion \BlackBerry Enterprise Server \Agents \TcpPortDispatcher • On a 64-bit version of Windows: HKEY_LOCAL_MACHI - Blackberry PRD-10459-003 | Administration Guide - Page 378
Administration Guide BlackBerry Messaging Agent connection types and port numbers Item Connection type incoming data connections from, and outgoing data TCP connections to, the BlackBerry Configuration Database that a Microsoft® SQL Server® hosts incoming syslog connections from the BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 379
Administration Guide BlackBerry Messaging Agent connection types and port numbers Item outgoing syslog connections to the SNMP agent Connection type UDP Default port UI where you can configure number the connection \WOW6432Node \Research In Motion \BlackBerry Enterprise Server \Agents\ - Blackberry PRD-10459-003 | Administration Guide - Page 380
Administration Guide BlackBerry MDS Connection Service connection types and port numbers BlackBerry MDS Connection Service connection types and port numbers Item if access control for push applications is turned on, incoming connections for the HTTP listener port if access control - Blackberry PRD-10459-003 | Administration Guide - Page 381
Administration Guide BlackBerry Monitoring Service connection types and port numbers Item incoming data connections In Motion \BlackBerrySNMPAg ent\Parameters \UDPPort 7874 BlackBerry Administration Service BlackBerry Monitoring Service connection types and port numbers Item Connection type - Blackberry PRD-10459-003 | Administration Guide - Page 382
Administration Guide BlackBerry Policy Service connection types and port numbers BlackBerry Policy Service connection types and port numbers Item incoming data connections from, and outgoing data connections to, the BlackBerry® Dispatcher incoming data connections from, and outgoing data - Blackberry PRD-10459-003 | Administration Guide - Page 383
Administration Guide BlackBerry Router connection types and port numbers Item outgoing data connections to the BlackBerry® Infrastructure that use SRP incoming data connections from, and outgoing data connections to, BlackBerry devices that use the BlackBerry® Device Manager to bypass the wireless - Blackberry PRD-10459-003 | Administration Guide - Page 384
Administration Guide Item outgoing syslog connections to the SNMP agent BlackBerry Router connection types and port numbers Connection type UDP Default port UI where you can configure number the connection • On a 32-bit version of Windows: - Blackberry PRD-10459-003 | Administration Guide - Page 385
Administration Guide BlackBerry Synchronization Service connection types and port numbers BlackBerry Synchronization Service connection types and port numbers Item incoming data connections from, and outgoing data connections to, the BlackBerry® Dispatcher incoming data connections from, and - Blackberry PRD-10459-003 | Administration Guide - Page 386
Administration Guide IBM Lotus Sametime connection type and port number Item incoming data port number Item incoming data connections from and outgoing data connections to the BlackBerry® Collaboration Service Connection type TCP/IP Default port UI where you can configure number the - Blackberry PRD-10459-003 | Administration Guide - Page 387
Administration Guide Novell GroupWise Messenger connection type and port number Novell GroupWise Messenger connection type and port number Item incoming data connections from, and outgoing data connections to, the BlackBerry® Collaboration Service Connection type SSL Default port UI where you - Blackberry PRD-10459-003 | Administration Guide - Page 388
Administration Guide Syslog connection type and port number Syslog connection type and port number Item listener port for the BlackBerry® Enterprise Server events Connection type UDP Default port UI where you can configure number the connection 514 Windows® registry • On a 32-bit version - Blackberry PRD-10459-003 | Administration Guide - Page 389
Administration Guide Troubleshooting Troubleshooting 36 Troubleshooting: Connecting to the BlackBerry Administration Service The web browser displays an HTTP 404 or HTTP 504 error message when it tries to connect to a BlackBerry Administration Service instance Possible cause Possible solution - Blackberry PRD-10459-003 | Administration Guide - Page 390
Administration Guide Troubleshooting: BlackBerry Enterprise Server Performance Once daily, the BlackBerry® Enterprise Server uses the BlackBerry Mailstore Service to refresh the user information from your organization's address book in the BlackBerry Configuration Database. If multiple BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 391
Guide Troubleshooting: Using IBM Lotus Notes encryption Troubleshooting: Using IBM Lotus Notes encryption The BlackBerry Troubleshooting: Setting up user accounts You cannot create a user account in the BlackBerry Administration Service Possible cause The BlackBerry® Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 392
Administration Guide Troubleshooting: Messaging Possible cause Possible solution 2. 3. 4. You upgraded a BlackBerry 1. Enterprise Server to version 5.0 or later, and when you search for a user account in the BlackBerry Administration Service, the 2. BlackBerry Administration Service - Blackberry PRD-10459-003 | Administration Guide - Page 393
Administration Guide Troubleshooting: Instant messaging A third-party application used the BlackBerry® Enterprise Server extension API to filter messages that the BlackBerry Enterprise Server sends to BlackBerry devices. Possible solution 1. On the computer that stores the BlackBerry Enterprise - Blackberry PRD-10459-003 | Administration Guide - Page 394
Guide Troubleshooting: Instant messaging 4. On the Proxy mappings tab, configure the settings for an authenticated or unauthenticated proxy server. Use the default web address. 5. Click the Add icon. 6. Click Save All. 7. To verify that a new entry exists for the BlackBerry Collaboration Service - Blackberry PRD-10459-003 | Administration Guide - Page 395
Server 2007. Possible cause Possible solution The BlackBerry Collaboration Service does not support the version of the instant messaging application that is installed on the BlackBerry device. Remove the instant messaging application from the BlackBerry device. Install an earlier version of the - Blackberry PRD-10459-003 | Administration Guide - Page 396
during the BlackBerry Administration Service installation process. Troubleshooting: Connections to the Wi-Fi network A BlackBerry device cannot BlackBerry device, or instruct the user to configure a Wi-Fi profile on the BlackBerry device. Move the BlackBerry device into a wireless coverage area - Blackberry PRD-10459-003 | Administration Guide - Page 397
Guide Troubleshooting: Connections to the Wi-Fi network Possible cause Possible solution The Wi-Fi settings on the BlackBerry Perform any of the following actions: device, IT policy, or Wi-Fi profile • Using the BlackBerry points. In the BlackBerry Administration Service, verify the - Blackberry PRD-10459-003 | Administration Guide - Page 398
Guide Troubleshooting: Connections to the Wi-Fi network Possible cause The static IP address and DHCP for the BlackBerry the BlackBerry device. Move the BlackBerry device into a wireless coverage area. 1. On the BlackBerry device, supports UMA or GAN and you subscribed for the service) • BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 399
Administration Guide Troubleshooting: Connections to the Wi-Fi network 1. In the BlackBerry Administration Service, change the WLAN Allowed Handheld Changes configuration setting in the Wi-Fi profile to Yes. 2. Resend the IT policy to the BlackBerry device. Status indicators The status indicators - Blackberry PRD-10459-003 | Administration Guide - Page 400
Administration Guide Field Association Authentication Local IP Address Signal Level Connection Data Rate Status Network Type Network Channel Pairwise Cipher Group Cipher Troubleshooting: Connections to the Wi-Fi network Description When the BlackBerry device displays the link security method, the - Blackberry PRD-10459-003 | Administration Guide - Page 401
Administration Guide Troubleshooting: Connections to the Wi-Fi network Field Gateway Address field specifies the address of an optional computer that translates host names into IP addresses. The BlackBerry device can use the secondary DNS server if the primary DNS is not available. This field - Blackberry PRD-10459-003 | Administration Guide - Page 402
Administration Guide Troubleshooting: Connections to the Wi-Fi network Field Primary DNS your organization's mobile network provider supports UMA or GAN and your organization subscribes to this service, a UMA/GAN connection group is present on the BlackBerry® device. Field Connection Preference - Blackberry PRD-10459-003 | Administration Guide - Page 403
Administration Guide Troubleshooting: Connections to the Wi-Fi network Field UMA Wi user has a UMA profile. You can safely ignore this status field. This field specifies whether the BlackBerry device is connected over UMA. This field specifies the status of the UMA connection. This field specifies - Blackberry PRD-10459-003 | Administration Guide - Page 404
Administration Guide Troubleshooting: Connections to the Wi-Fi network Status fields for Enterprise connections Field UIDs Address Used IP Used Connecting Authenticating router Authenticating server Last Contact At Description This field specifies the SRP UID of the BlackBerry® Enterprise Server - Blackberry PRD-10459-003 | Administration Guide - Page 405
Administration Guide Troubleshooting: Connections to the Wi-Fi network Possible cause Possible solution The UMA profile is not configured correctly. 1. On the BlackBerry device, in the device options, click UMA. 2. Verify whether a UMA profile exists. 3. If a UMA profile does not exist, create - Blackberry PRD-10459-003 | Administration Guide - Page 406
Administration Guide Troubleshooting: BlackBerry Administration Service pools 6. In the Number of Pings field, type the number of times that you want to ping the IP address. 7. On the menu, click Send ping. Look up a computer name to resolve an IP address Using a BlackBerry® device, a user can - Blackberry PRD-10459-003 | Administration Guide - Page 407
Administration Guide Troubleshooting: BlackBerry Monitoring Service connections Troubleshooting: BlackBerry Monitoring Service connections A user cannot log in to the BlackBerry Monitoring Service Possible cause If your organization's environment includes a firewall located between the BlackBerry® - Blackberry PRD-10459-003 | Administration Guide - Page 408
American National Standards Institute API application programming interface ARFCN absolute radio frequency channel ASCII American Standard Code for Information Interchange BCC blind carbon copy BlackBerry CAL A BlackBerry® Client Access License (BlackBerry CAL) limits how many users you can add to - Blackberry PRD-10459-003 | Administration Guide - Page 409
Guide Glossary BlackBerry Domain A BlackBerry Domain consists of the BlackBerry Configuration Database with its users and any BlackBerry® Enterprise Server instances that connect to it. BlackBerry MDS BlackBerry® Mobile Data System BlackBerry MVS BlackBerry® Mobile Voice System BlackBerry - Blackberry PRD-10459-003 | Administration Guide - Page 410
Administration Guide Glossary DHCP Dynamic Host Configuration Protocol DIIOP Domino Internet Inter-ORB Protocol DNS that the Internet uses. DOM Document Object Model DSML Directory Service Markup Language DSML-enabled server A BlackBerry device uses a DSML-enabled server to search for and download - Blackberry PRD-10459-003 | Administration Guide - Page 411
information for the data. Gateways and routing components use this information to identify the type and source of the BlackBerry device data, and the appropriate destination service to route the data to. GPO Group Policy Object GPS Global Positioning System HTML Hypertext Markup Language HTTP - Blackberry PRD-10459-003 | Administration Guide - Page 412
LAN local area network LDAP Lightweight Directory Access Protocol LDAPS Lightweight Directory Access Protocol over SSL LEAP Lightweight Extensible Authentication Protocol LED light-emitting diode LTPA Lightweight Third-Party Authentication MAC message authentication code MCC mobile country code 410 - Blackberry PRD-10459-003 | Administration Guide - Page 413
Administration Guide Glossary messaging server A messaging server sends and processes messages and provides collaboration services, such as updating and communicating calendar and address book information. MIDP Mobile Information Device Profile MIME Multipurpose Internet Mail Extensions mirror - Blackberry PRD-10459-003 | Administration Guide - Page 414
Administration Guide personal information management PIN personal identification number PKCS Public-Key Cryptography Internet Mail Extensions SMS Short Message Service SMTP Simple Mail Transfer Protocol SNMP Simple Network Management Protocol SPN service principal name SQL Structured Query Language - Blackberry PRD-10459-003 | Administration Guide - Page 415
Administration Guide Glossary Server Routing Protocol SRP ID The SRP ID is a unique identifier for the BlackBerry® Enterprise Server that the BlackBerry Enterprise Server uses to identify itself to the BlackBerry® Infrastructure during SRP authentication. SSID service set identifier SSL Secure - Blackberry PRD-10459-003 | Administration Guide - Page 416
Administration Guide Glossary Universal Naming Convention USB Universal Serial Bus UTF UCS Transformation Format UTF-8 8-bit UCS/ Microsoft® SQL Server® instance that permits the mirror database to know when to promote itself. WLAN wireless local area network XML Extensible Markup Language 414 - Blackberry PRD-10459-003 | Administration Guide - Page 417
Administration Guide Provide feedback To provide feedback on this deliverable, visit www.blackberry.com/docsfeedback. Provide feedback 38 415 - Blackberry PRD-10459-003 | Administration Guide - Page 418
Guide Legal notice Legal notice 39 ©2011 Research In Motion Limited. All rights reserved. BlackBerry®, RIM®, Research In Motion®, and related trademarks, names, and logos are the property of Research In Motion Limited and are registered and/or used in the U.S. and countries or services including - Blackberry PRD-10459-003 | Administration Guide - Page 419
to ensure that your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for availability, roaming arrangements - Blackberry PRD-10459-003 | Administration Guide - Page 420
BlackBerry® Enterprise Server, BlackBerry® Desktop Software, and/or BlackBerry® Device Software. The terms of use of any RIM product or service (www.apache.org/licenses/). For more information, see the NOTICE.txt file included with the software. Research In Motion Limited 295 Phillip Street Waterloo
-
1 -
2 -
3 -
4 -
5 -
6 -
7 -
8
-
9
-
10
-
11
-
12
-
13
-
14
-
15
-
16
-
17
-
18
-
19
-
20
-
21
-
22
-
23
-
24
-
25
-
26
-
27
-
28
-
29
-
30
-
31
-
32
-
33
-
34
-
35
-
36
-
37
-
38
-
39
-
40
-
41
-
42
-
43
-
44
-
45
-
46
-
47
-
48
-
49
-
50
-
51
-
52
-
53
-
54
-
55
-
56
-
57
-
58
-
59
-
60
-
61
-
62
-
63
-
64
-
65
-
66
-
67
-
68
-
69
-
70
-
71
-
72
-
73
-
74
-
75
-
76
-
77
-
78
-
79
-
80
-
81
-
82
-
83
-
84
-
85
-
86
-
87
-
88
-
89
-
90
-
91
-
92
-
93
-
94
-
95
-
96
-
97
-
98
-
99
-
100
-
101
-
102
-
103
-
104
-
105
-
106
-
107
-
108
-
109
-
110
-
111
-
112
-
113
-
114
-
115
-
116
-
117
-
118
-
119
-
120
-
121
-
122
-
123
-
124
-
125
-
126
-
127
-
128
-
129
-
130
-
131
-
132
-
133
-
134
-
135
-
136
-
137
-
138
-
139
-
140
-
141
-
142
-
143
-
144
-
145
-
146
-
147
-
148
-
149
-
150
-
151
-
152
-
153
-
154
-
155
-
156
-
157
-
158
-
159
-
160
-
161
-
162
-
163
-
164
-
165
-
166
-
167
-
168
-
169
-
170
-
171
-
172
-
173
-
174
-
175
-
176
-
177
-
178
-
179
-
180
-
181
-
182
-
183
-
184
-
185
-
186
-
187
-
188
-
189
-
190
-
191
-
192
-
193
-
194
-
195
-
196
-
197
-
198
-
199
-
200
-
201
-
202
-
203
-
204
-
205
-
206
-
207
-
208
-
209
-
210
-
211
-
212
-
213
-
214
-
215
-
216
-
217
-
218
-
219
-
220
-
221
-
222
-
223
-
224
-
225
-
226
-
227
-
228
-
229
-
230
-
231
-
232
-
233
-
234
-
235
-
236
-
237
-
238
-
239
-
240
-
241
-
242
-
243
-
244
-
245
-
246
-
247
-
248
-
249
-
250
-
251
-
252
-
253
-
254
-
255
-
256
-
257
-
258
-
259
-
260
-
261
-
262
-
263
-
264
-
265
-
266
-
267
-
268
-
269
-
270
-
271
-
272
-
273
-
274
-
275
-
276
-
277
-
278
-
279
-
280
-
281
-
282
-
283
-
284
-
285
-
286
-
287
-
288
-
289
-
290
-
291
-
292
-
293
-
294
-
295
-
296
-
297
-
298
-
299
-
300
-
301
-
302
-
303
-
304
-
305
-
306
-
307
-
308
-
309
-
310
-
311
-
312
-
313
-
314
-
315
-
316
-
317
-
318
-
319
-
320
-
321
-
322
-
323
-
324
-
325
-
326
-
327
-
328
-
329
-
330
-
331
-
332
-
333
-
334
-
335
-
336
-
337
-
338
-
339
-
340
-
341
-
342
-
343
-
344
-
345
-
346
-
347
-
348
-
349
-
350
-
351
-
352
-
353
-
354
-
355
-
356
-
357
-
358
-
359
-
360
-
361
-
362
-
363
-
364
-
365
-
366
-
367
-
368
-
369
-
370
-
371
-
372
-
373
-
374
-
375
-
376
-
377
-
378
-
379
-
380
-
381
-
382
-
383
-
384
-
385
-
386
-
387
-
388
-
389
-
390
-
391
-
392
-
393
-
394
-
395
-
396
-
397
-
398
-
399
-
400
-
401
-
402
-
403
-
404
-
405
-
406
-
407
-
408
-
409
-
410
-
411
-
412
-
413
-
414
-
415
-
416
-
417
-
418
-
419
-
420
 |
 |
BlackBerry Enterprise Server for
IBM Lotus Domino
Version: 5.0 | Service Pack: 3
Administration Guide