Blackberry PRD-10459-003 Administration Guide - Page 233

Changing password settings for BlackBerry Administration Service authentication

Page 233 highlights

Administration Guide Changing password settings for BlackBerry Administration Service authentication For example, the security policies in your organization might require that administrators log in using BlackBerry Administration Service single sign-on and BlackBerry Web Desktop Manager users log in using IBM® Lotus Notes® user names and passwords. In this scenario, you can instruct administrators to log into the BlackBerry Administration Service console using the web address https:///webconsole/login and instruct BlackBerry Web Desktop Manager users to log in to BlackBerry Web Desktop Manager using the web address https:// /webdesktop/app. Changing password settings for BlackBerry Administration Service authentication If you use BlackBerry® Administration Service authentication in your organization's environment, you can change the minimum password length and the date when passwords expire to meet the requirements of your organization's security policies. By default, the minimum password length is four characters and a password expires after 365 days. If you change the minimum password length, administrators that use passwords that do not meet the new minimum length are not required to change the passwords until the passwords expire. Change password settings for BlackBerry Administration Service authentication 1. In the BlackBerry® Administration Service, on the Servers and components menu, click BlackBerry Solution topology > BlackBerry Domain > Component view. 2. Click BlackBerry Administration Service. 3. Click Edit component. 4. In the Security settings section, change the minimum password length and number of days until the password expires. 5. Click Save all. Regenerate the system credentials for the BlackBerry Administration Service The setup application generates the system credentials for the BlackBerry® Administration Service during the installation process. The BlackBerry Administration Service uses the system credentials when it communicates with other BlackBerry® Enterprise Server components. If you suspect that the system credentials are compromised, you can regenerate them on the database server. Before you begin: Verify that you have database owner permissions for the BlackBerry Configuration Database. 1. On all of the computers that host BlackBerry Administration Service instances, in the Windows® Services, stop the BlackBerry Administration Service services. 2. On the database server, on the BlackBerry Configuration Database, run the following SQL statement: DELETE from BASTraits WHERE PlugInId=8 AND TraitId=0. 231

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250
  • 251
  • 252
  • 253
  • 254
  • 255
  • 256
  • 257
  • 258
  • 259
  • 260
  • 261
  • 262
  • 263
  • 264
  • 265
  • 266
  • 267
  • 268
  • 269
  • 270
  • 271
  • 272
  • 273
  • 274
  • 275
  • 276
  • 277
  • 278
  • 279
  • 280
  • 281
  • 282
  • 283
  • 284
  • 285
  • 286
  • 287
  • 288
  • 289
  • 290
  • 291
  • 292
  • 293
  • 294
  • 295
  • 296
  • 297
  • 298
  • 299
  • 300
  • 301
  • 302
  • 303
  • 304
  • 305
  • 306
  • 307
  • 308
  • 309
  • 310
  • 311
  • 312
  • 313
  • 314
  • 315
  • 316
  • 317
  • 318
  • 319
  • 320
  • 321
  • 322
  • 323
  • 324
  • 325
  • 326
  • 327
  • 328
  • 329
  • 330
  • 331
  • 332
  • 333
  • 334
  • 335
  • 336
  • 337
  • 338
  • 339
  • 340
  • 341
  • 342
  • 343
  • 344
  • 345
  • 346
  • 347
  • 348
  • 349
  • 350
  • 351
  • 352
  • 353
  • 354
  • 355
  • 356
  • 357
  • 358
  • 359
  • 360
  • 361
  • 362
  • 363
  • 364
  • 365
  • 366
  • 367
  • 368
  • 369
  • 370
  • 371
  • 372
  • 373
  • 374
  • 375
  • 376
  • 377
  • 378
  • 379
  • 380
  • 381
  • 382
  • 383
  • 384
  • 385
  • 386
  • 387
  • 388
  • 389
  • 390
  • 391
  • 392
  • 393
  • 394
  • 395
  • 396
  • 397
  • 398
  • 399
  • 400
  • 401
  • 402
  • 403
  • 404
  • 405
  • 406
  • 407
  • 408
  • 409
  • 410
  • 411
  • 412
  • 413
  • 414
  • 415
  • 416
  • 417
  • 418
  • 419
  • 420

For example, the security policies in your organization might require that administrators log in using BlackBerry
Administration Service single sign-on and BlackBerry Web Desktop Manager users log in using IBM® Lotus Notes®
user names and passwords. In this scenario, you can instruct administrators to log into the BlackBerry Administration
Service console using the web address https://
<BAS_pool_FQDN>
/webconsole/login and instruct BlackBerry Web
Desktop Manager users to log in to BlackBerry Web Desktop Manager using the web address https://
<BAS_pool_FQDN>
/webdesktop/app.
Changing password settings for BlackBerry Administration
Service authentication
If you use BlackBerry® Administration Service authentication in your organization's environment, you can change
the minimum password length and the date when passwords expire to meet the requirements of your organization's
security policies. By default, the minimum password length is four characters and a password expires after 365 days.
If you change the minimum password length, administrators that use passwords that do not meet the new minimum
length are not required to change the passwords until the passwords expire.
Change password settings for BlackBerry Administration Service
authentication
1.
In the BlackBerry® Administration Service, on the
Servers and components
menu, click
BlackBerry Solution
topology > BlackBerry Domain > Component view
.
2.
Click
BlackBerry Administration Service
.
3.
Click
Edit component
.
4.
In the
Security settings
section, change the minimum password length and number of days until the password
expires.
5.
Click
Save all
.
Regenerate the system credentials for the BlackBerry
Administration Service
The setup application generates the system credentials for the BlackBerry® Administration Service during the
installation process. The BlackBerry Administration Service uses the system credentials when it communicates with
other BlackBerry® Enterprise Server components. If you suspect that the system credentials are compromised, you
can regenerate them on the database server.
Before you begin:
Verify that you have database owner permissions for the BlackBerry Configuration Database.
1.
On all of the computers that host BlackBerry Administration Service instances, in the Windows® Services, stop
the BlackBerry Administration Service services.
2.
On the database server, on the BlackBerry Configuration Database, run the following SQL statement:
DELETE
from BASTraits WHERE PlugInId=8 AND TraitId=0
.
Administration Guide
Changing password settings for BlackBerry Administration Service authentication
231