Administration Guide

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server 5  >  BlackBerry Enterprise Server for Microsoft Exchange  >  Administration Guide BlackBerry Enterprise Server for Microsoft Exchange - 5.0.3

Configuring the BlackBerry Administration Service to use a proxy server

If you want to allow the BlackBerry® Administration Service to automatically download device.xml files, vendor.xml files, and information about BlackBerry® Device Software bundles from the BlackBerry® Infrastructure, and your organization uses a proxy server, you must configure the BlackBerry Administration Service to select and authenticate (if necessary) with the proxy server.

Configuring proxy selection for the BlackBerry Administration Service

You can configure the BlackBerry® Administration Service to select a proxy server either manually or automatically.

To manually select a proxy server, you can use one of the following tools:
  • Proxy Configuration Tool (proxycfg.exe) with Windows Server® 2003 or earlier
  • Network Shell Utility (netsh.exe) with Windows Server 2008
  • Windows® Internet Explorer®
To automatically select a proxy server, you can use one of the following methods:
  • enable the Web Proxy Autodiscovery Protocol using the BlackBerry Enterprise Trait Tool
  • specify a URL for a PAC file using Windows Internet Explorer
Back To Top

Configuring manual proxy selection for a BlackBerry Administration Service instance

Depending on the operating system on the computer that hosts the BlackBerry® Administration Service instance, you can use the Proxy Configuration Tool or the Network Shell Utility to manually select a proxy server for a BlackBerry Administration Service instance. You must configure manual proxy selection for all of the computers that host a BlackBerry Administration Service instance. Both the Proxy Configuration Tool and the Network Shell Utility store the proxy server settings in the HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\WinHttpSettings registry key. You must run both tools as an administrator.

The Proxy Configuration Tool works with Windows Server® 2003 or earlier, and it is located in one of the following locations:
  • For 32-bit Windows® operating systems, the Proxy Configuration Tool is located at c:\Windows\system32\.
  • For 64-bit Windows operating systems, the Proxy Configuration Tool is located at c:\Windows\sysWow64\.

For more information about the Proxy Configuration Tool, visit www.msdn.microsoft.com and search for proxycfg.exe.

The Network Shell Utility works with Windows Server 2008. For more information about the Network Shell Utility, visit technet.microsoft.com and search for Netsh.exe.

Back To Top

Configure manual proxy selection for the Windows account that runs the BlackBerry Administration Service

Perform this task on all of the computers that host a BlackBerry® Administration Service instance.

  1. On the computer that hosts the BlackBerry Administration Service, log in using the Windows® account that runs the BlackBerry Administration Service.
  2. Open Windows® Internet Explorer®.
  3. Click Tools > Internet Options.
  4. On the Connections tab, click LAN settings.
  5. Select Use a proxy server for your LAN.
  6. In the Address field, type the address for the proxy server.
  7. In the Port field, type the port number for the proxy server.
  8. Click OK.
  9. Click OK.
Windows Internet Explorer stores the settings for the proxy server in the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings registry key.
Back To Top

Configure the BlackBerry Administration Service to use the Web Proxy Autodiscovery Protocol to select a proxy server automatically

If you want to configure the BlackBerry® Administration Service to use the Web Proxy Autodiscovery Protocol to select a proxy server automatically, you must use the BlackBerry® Enterprise Trait Tool. The Web Proxy Autodiscovery Protocol uses DHCP and DNS to find a PAC file. Perform this task on any computer that hosts a BlackBerry Administration Service instance.
CAUTION:
If the proxy server authenticates using HTTP basic authentication, the Web Proxy Autodiscovery Protocol file must be on a computer that is separate from the proxy server and uses Windows® authentication or anonymous authentication.
  1. On the computer that hosts the BlackBerry Administration Service, at the command prompt, navigate to the folder that contains the TraitTool.exe file.
  2. To turn on Web Proxy Autodiscovery Protocol, type traittool -global -trait BASIsProxyWPADOptionEnabled -set 1.
Back To Top

Turn off Web Proxy Autodiscovery Protocol

Perform this task on any computer that hosts a BlackBerry Administration Service instance.
  1. On the computer that hosts the BlackBerry Administration Service, at the command prompt, navigate to the folder that contains the TraitTool.exe file.
  2. To turn off Web Proxy Autodiscovery Protocol, type traittool -global -trait BASIsProxyWPADOptionEnabled -erase.
Back To Top

Configure the BlackBerry Administration Service to use a PAC file to select a proxy server automatically

Perform this task on all of the computers that host a BlackBerry® Administration Service instance.
CAUTION:
If the proxy server authenticates using HTTP basic authentication, the PAC file must be on a computer that is separate from the proxy server and uses Windows® authentication or anonymous authentication.
Before you begin:

Obtain the URL for the PAC file.

  1. On the computer that hosts the BlackBerry Administration Service instance, log in using the Windows® account that runs the BlackBerry Administration Service.
  2. Open Windows® Internet Explorer®.
  3. Click Tools > Internet Options.
  4. On the Connections tab, click LAN settings.
  5. Select Use automatic configuration script.
  6. In the Address field, type the URL for the PAC file.
  7. Click OK.
  8. Click OK.
Back To Top

Configuring the BlackBerry Administration Service to authenticate with a proxy server

If your organization's proxy server requires authentication, you must configure the BlackBerry® Administration Service to authenticate with the proxy server.

If the proxy server uses Windows® authentication, you must configure the proxy server to authenticate the Windows account that runs the BlackBerry Administration Service.

If your proxy server uses HTTP basic authentication, you can configure the user name and password for HTTP basic authentication using the BlackBerry Enterprise Trait Tool. You can specify the credentials for either the entire BlackBerry Domain or for individual BlackBerry Administration Service instances. The BlackBerry Administration Service tries the credentials that you specify for the BlackBerry Administration Service instance first and then tries the credentials that you specify for the BlackBerry Domain.

Back To Top

Configure the BlackBerry Administration Service to use HTTP basic authentication

You use the BlackBerry® Enterprise Trait Tool to configure the BlackBerry Administration Service to use HTTP basic authentication to authenticate with a proxy server. HTTP basic authentication requires a user name and password for authentication.
  1. On the computer that hosts the BlackBerry Administration Service, at the command prompt, navigate to the folder that contains the TraitTool.exe file.
  2. Perform one of the following tasks:

    Task

    Steps

    Specify the credentials for HTTP basic authentication that your organization's BlackBerry Domain uses.

    1. Type traittool -global -trait BASProxyBasicAuthUID -set <user_name>, where <user_name> is the user name (for example, user01@blackberry.com or blackberry.com\user01).
    2. Type traittool -global -trait BASProxyBasicAuthPassword -set <password>, where <password> is the password.

    Specify the credentials for HTTP basic authentication that a specific BlackBerry Administration Service instance uses.

    1. Type traittool -BASServer <name> -trait BASProxyBasicAuthUID -set <user_name>, where <name> is the host name of the computer that hosts the BlackBerry Administration Service instance and <user_name> is the user name (for example, user01@blackberry.com or blackberry.com\user01) for that computer.
    2. Type traittool -BASServer <name> -trait BASProxyBasicAuthPassword -set <password>, where <name> is the host name of the computer that hosts the BlackBerry Administration Service instance and <password> is the password for the computer.
Back To Top

Delete credentials for HTTP basic authentication

  1. On the computer that hosts the BlackBerry® Administration Service, at the command prompt, navigate to the folder that contains the TraitTool.exe file.
  2. Perform one of the following tasks:

    Task

    Steps

    Delete the user name and password that all of the BlackBerry Administration Service instances in your organization's BlackBerry Domain use for HTTP basic authentication.

    1. Type traittool -global -trait BASProxyBasicAuthUID -erase.
    2. Type traittool -global -trait BASProxyBasicAuthPassword -erase.

    Delete the user name and password for the computer that a single BlackBerry Administration Service instance in your organization's BlackBerry Domain uses for HTTP basic authentication.

    1. Type traittool -BASServer <name> -trait BASProxyBasicAuthUID -erase.
    2. Type traittool -BASServer <name> -trait BASProxyBasicAuthPassword -erase.
Back To Top
Next topic: Configuring multiple BlackBerry Enterprise Server instances to use the same BlackBerry Enterprise Server component
Previous topic: Configure a BlackBerry Enterprise Server component to authenticate to a proxy server on behalf of BlackBerry devices

Was this information helpful? Send us your comments.