Blackberry PRD-10459-016 Administration Guide - Page 230

Administration Guide Configuring Microsoft Active Directory authentication in an environment that includes a resource forest 8. Using the keytool, import the certificate to the web.keystore file (for example, keytool -import -alias httpssl keystore ":\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin\web.keystore" -file ".cer"). 9. In the Windows® Services, restart the BlackBerry Administration Service services. 10. Complete the following actions on each computer that hosts a BlackBerry Administration Service instance: a. Copy the web.keystore file in the :\Program Files\Research In Motion\BlackBerry Enterprise Server \BAS\bin folder from the BlackBerry Administration Service that you updated to the other BlackBerry Administration Service instances. b. In the Windows® registry, copy the WebKeyStorePass value in the HKEY_CURRENT_USER\Software \Research In Motion\BlackBerry Enterprise Server\Administration Service\Key Store from the BlackBerry Administration Service that you updated to the other BlackBerry Administration Service instances. c. In the Windows Services, restart the BlackBerry Administration Service services. Related topics Restarting BlackBerry Enterprise Server components, 330 Configuring Microsoft Active Directory authentication in an environment that includes a resource forest If your organization's environment includes a resource forest that is dedicated to running Microsoft® Exchange, you can configure the BlackBerry® Administration Service to use Microsoft® Active Directory® authentication to log in BlackBerry device users that have user accounts that are located in trusted account forests. The BlackBerry Administration Service can use Microsoft Active Directory authentication to log users into the BlackBerry Administration Service console and the BlackBerry® Web Desktop Manager. You must install the BlackBerry® Enterprise Server in the resource forest if a resource forest exists in your organization's environment. In the resource forest, you create a mailbox for each user account and associate the mailboxes with the user accounts that are located in the account forests. When you associate the mailboxes in the resource forest with the user accounts in the account forests, the user accounts obtain full access to the mailboxes and the user accounts in the account forests are connected to the Microsoft Exchange server. To authenticate users who log in to the BlackBerry Administration Service or BlackBerry Web Desktop Manager, the BlackBerry Administration Service must read the user information that is stored in the global catalog servers that are part of the resource forest. To configure the BlackBerry Administration Service to authenticate user accounts that are associated with mailboxes in the resource forest, you must create a Microsoft Active Directory account for the BlackBerry Administration Service that is located in a Windows® domain that is part of the resource forest. During the BlackBerry Enterprise Server installation process, you provide the Windows domain, user name, and password for the Microsoft Active Directory account, and, if required, the names of the global catalog servers that the BlackBerry Administration Service can use. You can change the Windows domain, user name, and password for the Microsoft Active Directory account and global catalog servers after the installation process completes. For more information, visit technet.microsoft.com to read Using a Dedicated Exchange forest. Related topics Restarting BlackBerry Enterprise Server components, 330 228