Administration Guide

Local Navigation

Managing device access to the BlackBerry Enterprise Server

You can use the Enterprise Service Policy to control which BlackBerry® devices can connect to a BlackBerry® Enterprise Server. By default, after you turn on the Enterprise Service Policy, the BlackBerry Enterprise Server permits connections from any device that you previously associated with the BlackBerry Enterprise Server. The BlackBerry Enterprise Server also prevents connections from any device that you associate with the BlackBerry Enterprise Server after you turn on the Enterprise Service Policy.

You can configure an allowed list to determine which devices can access a BlackBerry Enterprise Server. A device that meets the criteria that you specify in the allowed list can associate with the BlackBerry Enterprise Server when the device activates over the wireless network.

You can define the following types of criteria:
  • specific device PINs
  • range of device PINs
  • specific manufacturers
  • specific device models

The BlackBerry Administration Service includes lists of permitted manufacturers and models of devices that you associated with the BlackBerry Enterprise Server previously.

You can permit a user to override the Enterprise Service Policy so that a device can connect to the BlackBerry Enterprise Server even if you configure the allowed list with criteria that exclude that device.

For more information, see the BlackBerry Enterprise Server Administration Guide.

Turn on the Enterprise Service Policy

You can turn on the Enterprise Service Policy to control which BlackBerry® devices can connect to the BlackBerry® Enterprise Server.

  1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click BlackBerry Enterprise Server.
  3. Click Turn on Enterprise Service Policy.
  4. Click Yes - Turn on enterprise service policy.
Back To Top

Configure the Enterprise Service Policy

By default, when you turn on the Enterprise Service Policy, all BlackBerry® devices that you activated can access the BlackBerry® Enterprise Server. You must configure the Enterprise Service Policy to specify the BlackBerry devices that you want to access the BlackBerry Enterprise Server. To add a new BlackBerry device to the BlackBerry Enterprise Server, you must add the PIN for the BlackBerry device to the Enterprise Service Policy before a user can activate the BlackBerry device.
Before you begin: Turn on the Enterprise Service Policy.
  1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click BlackBerry Enterprise Server.
  3. Click Edit component.
  4. In the Enterprise Service Policy section, in the Allowed drop-down lists, click Yes for each BlackBerry device model that you want to permit to access the BlackBerry Enterprise Server.
  5. To add a new BlackBerry device, on the Add new allowed PINs tab, in the New allowed PINs field, type the PIN for the BlackBerry device. Click the Add icon.
  6. To remove a BlackBerry device from the list, on the Remove existing allowed PINs tab, search for the PIN for the BlackBerry device. In the search results, select the PIN for the BlackBerry device.
  7. Click Save All.
Back To Top

Permit a user to override the Enterprise Service Policy

Before you begin: Turn on the Enterprise Service Policy.
  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand User.
  2. Click Manage users.
  3. Search for a user account.
  4. Click the display name for the user account.
  5. Click Edit user.
  6. On the Component information tab, in the BlackBerry Enterprise Server information section, in the Enterprise service policy override drop-down list, click Yes.
  7. Click Save All.
Back To Top

Was this information helpful? Send us your comments.