Administration Guide

Overview: BlackBerry Enterprise Server
- Getting started in your BlackBerry Enterprise Server environment
Log in to the BlackBerry Administration Service for the first time
- There is a problem with this website's security certificate
Creating administrator accounts
- Administrative roles and permissions
  - Preconfigured administrative roles
- Creating roles
  - Create a role
  - Create a role based on an existing role
- Create an administrator account
- Add an administrator account to a group
- Specify an email address for the BlackBerry Administration Service
- Permit an administrator to log in to the BlackBerry Administration Service using a messaging server account
- Assign a BlackBerry device to an administrator account
Using an IT policy to manage BlackBerry Enterprise Solution security
- Using IT policy rules to manage BlackBerry Enterprise Solution security
- Preconfigured IT policies
  - Default values for preconfigured IT policies
- Creating and importing IT policies
- Change the value for an IT policy rule
- Assign an IT policy to a group
- Assign an IT policy to a user account
- Sending an IT policy over the wireless network
  - Resend an IT policy to a BlackBerry device manually
  - Resend an IT policy to a BlackBerry device automatically
- Reconciliation rules for conflicting IT policies
  - Reconciliation rules: IT policies
- Resolving IT policy assignments for user accounts and groups
  - Rank IT policies
  - Verify which IT policy the BlackBerry Enterprise Server assigned to a BlackBerry device
- Deactivating BlackBerry devices that do not have IT policies applied
  - Deactivate BlackBerry devices that do not have IT policies applied
- Creating new IT policy rules to control third-party applications
  - Create an IT policy rule for a third-party application
  - Change or delete IT policy rules for third-party applications
- Export all IT policy data to a data file
- Delete an IT policy
Configuring security options
- Encrypting data that the BlackBerry Enterprise Server and a BlackBerry device send to each other
- Controlling BlackBerry device access to the BlackBerry Enterprise Server
- Extending messaging security to a BlackBerry device
  - Extending messaging security using S/MIME encryption
    - Configure the BlackBerry Enterprise Solution to support S/MIME encryption
    - Configure encryption options for S/MIME-protected messages
- Enforcing secure messaging using classifications
- Generating organization-specific encryption keys for PIN message encryption
  - Generate a PIN encryption key
- Turn off BlackBerry services that the BlackBerry MDS Connection Service, BlackBerry Collaboration Service, and BlackBerry MVS provide
- When a BlackBerry device overwrites data in the BlackBerry device memory
  - Changing when a BlackBerry device cleans the BlackBerry device memory
  - Best practice: Configuring additional memory cleaner settings for BlackBerry devices
- Managing the BlackBerry MDS Integration Service certificate
  - Configuring the BlackBerry MDS Integration Service instances to use a trusted certificate
    - Create a CSR file for the BlackBerry MDS Integration Service trusted certificate
    - Import the trusted certificate into the BlackBerry MDS Integration Service key store
  - Generate a self-signed certificate for the BlackBerry MDS Integration Service
- Permit client authentication between the BlackBerry MDS Integration Service and web services that use self-signed certificates
- Configure support for notification messages over HTTPS for BlackBerry MDS Runtime Applications on BlackBerry devices
  - Import the X.509 certificate for the web service into the trust store of the BlackBerry MDS Integration Service
  - Import the X.509 certificate for the BlackBerry MDS Integration Service into the trust store of the JVM that runs the notification client
Configuring the BlackBerry Enterprise Server environment
- Best practice: Running the BlackBerry Enterprise Server
- Configuring certain BlackBerry Enterprise Server components to use proxy servers
- Configuring multiple BlackBerry Enterprise Server instances to use the same BlackBerry Enterprise Server component
- Associate a BlackBerry MDS Integration Service pool with a BlackBerry Enterprise Server
Configuring user accounts
- Creating user groups
  - Create a group to manage similar user accounts
  - Add user accounts to a group
- Adding a user account to the BlackBerry Enterprise Server
Assigning BlackBerry devices to users
- Preparing to distribute a BlackBerry device
  - Change how the BlackBerry Enterprise Server downloads a user's existing email messages onto the BlackBerry device
  - Prevent the BlackBerry Enterprise Server from synchronizing existing email messages onto a BlackBerry device
- Assigning BlackBerry devices to user accounts
Configuring BlackBerry Enterprise Server high availability
- Check the health of a BlackBerry Enterprise Server
  - Availability state and failover status of the BlackBerry Enterprise Server
- How the BlackBerry Enterprise Server uses health parameters
  - Defining when failover occurs
- Changing the promotion threshold and failover threshold
  - Change the promotion threshold and failover threshold and the order of the health parameters
    - Health parameters for the failover threshold and promotion threshold
  - Changing when automatic failover occurs by customizing the health parameters for user accounts and messaging servers
    - Change when automatic failover occurs by customizing the health parameters for user accounts and messaging servers
- Prerequisites: Configuring the BlackBerry Enterprise Server pair to fail over automatically
- Configure the BlackBerry Enterprise Server to fail over automatically
- Monitoring the BlackBerry Enterprise Server for an automatic failover event
  - Use the BlackBerry Administration Service to find the time and reason for the last automatic failover event
- Fail over the BlackBerry Enterprise Server manually using the BlackBerry Administration Service
- Fail over the BlackBerry Enterprise Server manually using the BlackBerry Configuration Panel
Configuring high availability for BlackBerry Enterprise Server components
- Creating a BlackBerry MDS Connection Service pool for high availability
  - Create a BlackBerry MDS Connection Service pool for high availability
  - Configure a hardware load balancer to provide access to BlackBerry MDS Connection Service central push servers
- Create a BlackBerry Collaboration Service pool for high availability
- Configure the BlackBerry MDS Connection Service and BlackBerry Collaboration Service to fail over automatically
- Create a BlackBerry Attachment Service pool for high availability
  - You cannot determine the BlackBerry Attachment Connector that the BlackBerry Enterprise Server or the BlackBerry MDS Connection Service uses
- Create a BlackBerry Router pool for high availability
  - Permit a BlackBerry Enterprise Server to connect to a remote BlackBerry Router
- Creating a BlackBerry Administration Service pool using DNS round robin that includes the BlackBerry Web Desktop Manager
  - Configure the BlackBerry Administration Service instances in the pool to communicate across network subnets
- Changing the name of the BlackBerry Administration Service pool
  - Change the name of the BlackBerry Administration Service pool
- Creating a BlackBerry MDS Integration Service pool
- Fail over the BlackBerry MDS Connection Service or BlackBerry Collaboration Service manually
- Recover a BlackBerry MDS Integration Service pool that stopped responding
- Monitoring the high availability status or job deployment status using the BlackBerry Administration Service
  - Monitor the high availability status or job deployment status using the BlackBerry Administration Service
- Remove a BlackBerry MDS Connection Service instance from a pool
- Remove a BlackBerry Collaboration Service instance from a pool
- Remove a BlackBerry Attachment Service instance from a pool
- Remove a BlackBerry Router instance from a pool
Configuring BlackBerry Configuration Database high availability
- Prerequisites: Configuring database mirroring or database replication of the BlackBerry Configuration Database or BlackBerry MDS Integration Service database
- Configuring database mirroring
- Configuring the BlackBerry Configuration Database for one-way transactional replication in an environment that includes Microsoft SQL Server 2005 or 2008
- Reacting if the BlackBerry Configuration Database that you configured for transactional replication stops responding
- Return to the BlackBerry Configuration Database when you configured transactional replication
- Recovering BlackBerry Enterprise Server components after the principal BlackBerry Configuration Database fails over to the mirror BlackBerry Configuration Database
  - Recover BlackBerry Enterprise Server components after the principal BlackBerry Configuration Database fails over to the mirror BlackBerry Configuration Database
Sending software and BlackBerry Java Applications to BlackBerry devices
- Managing BlackBerry Java Applications and BlackBerry Device Software
- Installing BlackBerry Java Applications on BlackBerry devices
- Developing BlackBerry Java Applications for BlackBerry devices
- Preparing to distribute BlackBerry Java Applications
- Configuring application control policies
- Application control policies for unlisted applications
- Creating software configurations
- Install BlackBerry Java Applications on a BlackBerry device at a central computer
- View the status of a job
  - View the status of a task
- Stopping a job that is running
  - Stop a job that is running
- View the users that have a BlackBerry Java Application installed on their BlackBerry devices
- View how the BlackBerry Administration Service resolved software configuration conflicts for a user account
- Reconciliation rules for conflicting settings in software configurations
Alternative methods for installing BlackBerry Java Applications on BlackBerry devices
- Installing BlackBerry Java Applications on BlackBerry devices without using the BlackBerry Administration Service
- Developing BlackBerry Java Applications for BlackBerry devices
- Methods you can use to install BlackBerry Java Applications on BlackBerry devices
- Installing BlackBerry Java Applications using the BlackBerry Desktop Software
- Installing BlackBerry Java Applications using the BlackBerry Application Web Loader
- Installing BlackBerry Java Applications using the standalone application loader tool
- Installing BlackBerry Java Applications using a web browser on BlackBerry devices
Making BlackBerry MDS Runtime Applications and BlackBerry Browser Applications available to users
- Overview: Creating BlackBerry MDS Runtime Applications and sending them to BlackBerry devices
- Preparing BlackBerry devices to install BlackBerry MDS Runtime Applications and BlackBerry Browser Applications
- Configuring a BlackBerry MDS Integration Service to support a JDBC driver
  - Specify JDBC driver information for a BlackBerry MDS Integration Service
  - Add support for a JDBC driver to a BlackBerry MDS Integration Service
- Configuring access to web services and managing signed and unsigned applications
- Configuring how users access and use BlackBerry MDS Runtime Applications
- BlackBerry MDS Application Console
- Applying an application control policy to a BlackBerry MDS Runtime Application
  - Prepare the application launcher file for a BlackBerry MDS Runtime Application
  - Assign an application control policy to a BlackBerry MDS Runtime Application
Configuring how users access enterprise applications and web content
- Specifying a BlackBerry MDS Connection Service as a central push server
  - Specify a BlackBerry MDS Connection Service as a central push server
- Configuring how BlackBerry devices authenticate to content servers
- Configuring how the BlackBerry MDS Connection Service manages requests for web content
- Permitting push applications to make trusted connections to a BlackBerry MDS Connection Service
- Configuring a BlackBerry MDS Connection Service to trust web servers
- Permitting users to access intranet sites on BlackBerry devices using global login information
  - Configure global login information for intranet site access
- Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices
Setting up the messaging environment
- Creating email message filters
- Copying existing email message filters to another BlackBerry Enterprise Server
  - Export email message filters for a BlackBerry Enterprise Server
  - Import email message filters for a BlackBerry Enterprise Server
- Copying existing email message filters to user accounts
  - Export email message filters for a user account
  - Import email message filters for a user account
- Extension plug-ins for processing messages
- Mapping contact information fields for synchronization and contact lookups
Configuring BlackBerry devices to enroll certificates over the wireless network
- Configure the certificate information using IT policies
- Configure the BlackBerry MDS Connection Service to connect to the certificate authority
  - Add communication information to a BlackBerry MDS Connection Service configuration set
  - Assign a BlackBerry MDS Connection Service configuration set to a BlackBerry MDS Connection Service instance
- Add certificate information to a Wi-Fi profile
- Managing an enrolled certificate
- Change the polling interval, logging, and pool size for the BlackBerry MDS Connection Service connection to the certificate authority
  - Properties in the rimpublic.properties file
Making the BlackBerry Web Desktop Manager available to users
- Installing the client components of the BlackBerry Web Desktop Manager on users' computers
- Publish the client files for the BlackBerry Web Desktop Manager in a Windows GPO for Windows XP
- Publish the client files for the BlackBerry Web Desktop Manager in a Windows GPO for Windows Vista
  - Configure the Microsoft ActiveX Installer on Windows Vista
- Configure users' computers to install the client file for the BlackBerry Web Desktop Manager automatically
- Make the BlackBerry Web Desktop Manager available to users
Configuring the BlackBerry Web Desktop Manager
- Permit users to create activation passwords using the BlackBerry Web Desktop Manager
- Permit users to activate BlackBerry devices using the BlackBerry Web Desktop Manager
- Permit users to back up and restore data using the BlackBerry Web Desktop Manager
- Configure the domains for backing up data using the BlackBerry Web Desktop Manager
- Change the text colors in the BlackBerry Web Desktop Manager
  - BlackBerry Web Desktop Manager text colors
- Display a custom image in the BlackBerry Web Desktop Manager
Creating and configuring Wi-Fi profiles, VPN profiles, and VoIP profiles
- Creating and configuring Wi-Fi profiles
- Creating and configuring VPN profiles
- Creating and configuring a VoIP profile
- Delete a Wi-Fi profile
- Delete a VPN profile
- Delete a VoIP profile
- Importing profile information from a .csv file
Configuring encryption and authentication methods for Wi-Fi enabled BlackBerry devices
- Configuring WEP encryption
  - Configure WEP keys for BlackBerry devices using a Wi-Fi profile
- Configuring PSK encryption
  - Configure PSK encryption data for BlackBerry devices using a Wi-Fi profile
- Configuring LEAP authentication
  - Configure LEAP authentication data for BlackBerry devices using a Wi-Fi profile
- Configuring PEAP authentication
- Configuring EAP-TLS authentication
  - Configure EAP-TLS authentication data for BlackBerry devices using a Wi-Fi profile
  - Configure EAP-TLS configuration settings in the Wi-Fi profile on a BlackBerry device
- Configuring EAP-TTLS authentication
  - Configure EAP-TTLS authentication data for BlackBerry devices using a Wi-Fi profile
  - Configure EAP-TTLS configuration settings in the Wi-Fi profile on a BlackBerry device
- Configuring EAP-FAST authentication
Configuring software tokens for BlackBerry devices
- Prerequisites: Configuring BlackBerry devices for RSA authentication
- Configure BlackBerry devices for RSA authentication
- Configure RSA authentication over a Wi-Fi network using a software token
- Configure RSA authentication over a VPN network using a software token
- Assign software tokens to a user account
Changing the security settings of the BlackBerry Administration Service and BlackBerry Web Desktop Manager
- Import a new SSL certificate for the BlackBerry Administration Service and BlackBerry Web Desktop Manager
- Changing password settings for BlackBerry Administration Service authentication
  - Change password settings for BlackBerry Administration Service authentication
- Regenerate the system credentials for the BlackBerry Administration Service
Managing administrator accounts
- Change role permissions
- Change the roles for an administrator account
- Delete a role
- Delete an administrator account
Managing groups and user accounts
- Managing groups
- Managing user accounts
Using IT administration commands to protect a lost or stolen BlackBerry device
- Protect a stolen BlackBerry device
- Protect a lost device
- Protect a lost BlackBerry device that a user might recover
Managing the delivery of BlackBerry Java Applications, BlackBerry Device Software, and device settings to BlackBerry devices
- Managing the default distribution settings for jobs
- Managing the distribution settings for a specific job
- Managing BlackBerry Java Applications on BlackBerry devices
  - Make a BlackBerry Java Application unavailable for installation
  - Remove a BlackBerry Java Application from BlackBerry devices over the wireless network
- Managing software configurations
Managing BlackBerry MDS Runtime Applications and BlackBerry Browser Applications
- Update a BlackBerry MDS Runtime Application or BlackBerry Browser Application on BlackBerry devices
- Removing BlackBerry MDS Runtime Applications and BlackBerry Browser Applications
- Cancel a request to install, update, or remove a BlackBerry MDS Runtime Application or BlackBerry Browser Application
- Remove application data from the BlackBerry MDS Integration Service
- Remove a certificate from the BlackBerry MDS Integration Service trusted store
- Block notification messages that an event data source sends to BlackBerry devices
Managing how users access enterprise applications and web content
- Restricting user access to content on web servers
- Restricting user access to media content in the BlackBerry Browser
  - Prevent users from accessing specific media types
  - Configure download limits for media content types
- Restricting the push application content that users can receive
- Managing push application requests
Managing organizer data synchronization
- Managing the wireless backup and recovery of organizer data
- Turning off organizer data synchronization
  - Turn off organizer data synchronization for all user accounts that are associated with a BlackBerry Enterprise Server
  - Turn off organizer data synchronization for a specific user account
- Changing how organizer data synchronizes
Managing your organization's messaging environment and attachment support
- Managing message forwarding
- Managing the incoming message queue
  - Delete email messages for user accounts from the incoming message queue
- Managing wireless message reconciliation
  - Turn off wireless message reconciliation for a BlackBerry Enterprise Server
- Managing access to remote message data
  - Prevent a user from checking the availability of meeting participants on the BlackBerry device
  - Prevent a user from searching for remote email messages using a device
- Managing email messages that contain HTML and rich content
- Synchronizing folders on the BlackBerry device
- Configuring access to documents on remote file systems
- Managing signatures and disclaimers in email messages
- Monitor email messages that users send from BlackBerry devices
- Sending notification messages to users
- How the BlackBerry Attachment Connector communicates with BlackBerry Attachment Service instances
  - Change how a BlackBerry Attachment Connector retries sending requests to a BlackBerry Attachment Service
  - Change how a BlackBerry Attachment Connector restores a lost connection to a BlackBerry Attachment Service
- Attachment file formats that the BlackBerry Attachment Service supports
  - Limitations for supported attachment file formats
- Changing how a BlackBerry Attachment Service converts attachments
  - Change how a BlackBerry Attachment Service converts attachments
    - BlackBerry Attachment Service optimization settings
  - Change the maximum file size for attachments that users can receive
    - Suggested file sizes for attachments
- Turn off support for an attachment file format for a BlackBerry Attachment Service
- Add support for an additional attachment file format to a BlackBerry Attachment Service
- Changing how the BlackBerry Messaging Agent reconciles attachments to the messaging server
Managing instant messaging
- Installing a collaboration client on BlackBerry devices
- Change the instant messaging server that a BlackBerry Collaboration Service connects to
- Change the transport protocol for a Microsoft Office Communicator environment
- Specify the Windows domain name for users who log in to a collaboration client
- Managing instant messaging sessions
  - Specify the maximum number of instant messaging sessions that can be open at the same time
  - Specify the inactivity timeout limit for instant messaging sessions
- Managing instant messaging features
Managing a BlackBerry Domain
- Restarting BlackBerry Enterprise Server components
  - Restart a BlackBerry Enterprise Server component using the BlackBerry Administration Service
  - Restart a BlackBerry Enterprise Server component using Windows Services
- BlackBerry Enterprise Trait Tool traits
- Managing BlackBerry CAL keys
  - Add or delete a BlackBerry CAL key
  - Copy a BlackBerry CAL key to a text file
- Configuring the BlackBerry Mail Store Service instance that updates the contact list
  - Configure the BlackBerry Mail Store Service instance that updates the contact list
- Change the port number that BlackBerry Enterprise Server components use to connect to the BlackBerry Configuration Database
- Change the port number that the syslog tools use to monitor BlackBerry Enterprise Server events
BlackBerry Controller and BlackBerry Enterprise Server Component Monitoring
- How the BlackBerry Controller monitors the BlackBerry Enterprise Server components
  - Change how the BlackBerry Controller restarts the BlackBerry Messaging Agent
  - Change how the BlackBerry Controller restarts a BlackBerry Enterprise Server service
- BlackBerry MDS Integration Service notification messages
  - Block notification messages that an event data source sends to BlackBerry devices
- BlackBerry Enterprise Server Alert Tool
  - Configuring notifications using the BlackBerry Enterprise Server Alert Tool
    - Change the default event monitoring level
    - Define a notification recipient
BlackBerry Enterprise Server log files
- Monitoring PIN messages, SMS text messages, and calls
  - Change the default location for the log files for PIN messages, SMS text messages, and calls
- Log files for BlackBerry Enterprise Server components
- BlackBerry MDS Connection Service log files
  - Changing how the BlackBerry MDS Connection Service creates a log file
  - Using BlackBerry MDS Connection Service log files to view information for proxied connections to BlackBerry devices
    - Information in BlackBerry MDS Connection Service log files for proxied connections to BlackBerry devices
- BlackBerry Collaboration Service log files
  - Change which activities the BlackBerry Collaboration Service writes to a log file
BlackBerry Enterprise Solution connection types and port numbers
- BlackBerry Administration Service connection types and port numbers
- BlackBerry Attachment Service connection types and port numbers
- BlackBerry Collaboration Service connection types and port numbers
- BlackBerry Configuration Database connection types and port numbers
- BlackBerry Controller connection types and port numbers
- BlackBerry Dispatcher connection types and port numbers
- BlackBerry Messaging Agent connection types and port numbers
- BlackBerry MDS Connection Service connection types and port numbers
- BlackBerry MDS Integration Service connection types and port numbers
- BlackBerry MDS Integration Service database connection types and port numbers
- BlackBerry Monitoring Service connection types and port numbers
- BlackBerry Policy Service connection types and port numbers
- BlackBerry Router connection types and port numbers
- BlackBerry Synchronization Service connection types and port numbers
- IBM Lotus Sametime connection type and port number
- Microsoft Office Live Communications Server 2005 connection types and port numbers
- BlackBerry Client for use with Microsoft Office Live Communications Server 2005 connection types and port numbers
- Novell GroupWise connection types and port numbers
- Novell GroupWise Messenger connection type and port number
- SNMP agent connection types and port numbers
- Syslog connection type and port number
Troubleshooting
- Troubleshooting: Connecting to the BlackBerry Administration Service
  - The web browser displays an HTTP 404 or HTTP 504 error message when it tries to connect to a BlackBerry Administration Service instance
- Troubleshooting: BlackBerry Enterprise Server Performance
  - A BlackBerry Enterprise Server that you installed remotely from the BlackBerry Configuration Database uses an unexpected amount of system resources and increases wireless network traffic
  - Microsoft SQL Server uses a considerable amount of disk space
- Troubleshooting: Setting up user accounts
  - You cannot create a user account in the BlackBerry Administration Service
  - You cannot find a new user account in the directory using the BlackBerry Administration Service
- Troubleshooting: Messaging
  - Messages are not delivered to BlackBerry devices
- Troubleshooting: Instant messaging
- Troubleshooting: BlackBerry Web Desktop Manager
  - Troubleshooting: Users cannot log in to the BlackBerry Web Desktop Manager
- Troubleshooting: Connections to the Wi-Fi network
Glossary
Provide feedback
Legal notice

Search This Document

Download PDF

BlackBerry Enterprise Server for Novell GroupWise

Administration Guide

5.0.1

To view a complete list of topics, expand the topics in the left pane.