Administration Guide

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server 5  >  BlackBerry Enterprise Server for Microsoft Exchange  >  Administration Guide BlackBerry Enterprise Server for Microsoft Exchange - 5.0.3

Restricting the push application content that users can receive

By default, a BlackBerry® MDS Connection Service sends push requests from server-side push applications to applications on BlackBerry devices. BlackBerry devices can receive application data and application updates without users requesting the content.

You can configure your organization's environment so that only specific server-side push applications can send push requests to BlackBerry devices. You can turn on push authentication to prevent a BlackBerry MDS Connection Service from sending push requests, and create push initiators that permit specific server-side applications to send push requests to BlackBerry devices. To permit specific users to receive push requests on BlackBerry devices, you can create push rules and assign the rules to the users.

For more information about push requests, see the BlackBerry Java Development Environment Development Guide.

Restrict push applications from sending data to BlackBerry devices

You can turn on push authentication to permit only authenticated push applications to send push requests to applications on BlackBerry® devices.
  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service.
  2. Click the instance that you want to change.
  3. Click Edit instance.
  4. In the Access control section, in the Push authentication options, click Yes.
  5. Click Save all.
After you finish: To authenticate and permit specific server-side push applications to send push requests to BlackBerry devices, create push initiators.
Back To Top

Create push initiators for push applications

Push initiators specify which server-side push applications are authenticated and permitted to send push requests to applications on BlackBerry® devices. For push initiators to work, you must turn on push authentication for the BlackBerry MDS Connection Service. You can configure several server-side push applications to use the same push initiator (that is, to use the same authorization password) if your organization's development environment permits it. Verify that the authorization HTTP header in push requests from server-side push applications matches the name and password that you specify for the push initiator.
Before you begin: Turn on push authentication for the appropriate instances of the BlackBerry MDS Connection Service.
  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click MDS Connection Service.
  3. Click Edit component.
  4. On the Push initiators tab, in the Name field, type the name of the server-side application that you want to permit to send push requests to BlackBerry devices.
  5. In the Credentials field, type the password for the server-side push application.
  6. Click the Add icon.
  7. Click Save all.
After you finish: Create a push initiator for each server-side push application that you want to permit to send push requests to BlackBerry devices. To specify which users can receive push requests from authenticated push applications, turn on push authorization and create push rules.
Back To Top

Turn on push authorization

If you turned on push authentication and created push initiators to specify which push applications can send push requests, you can create push rules to specify which users are permitted to receive authenticated push requests. The BlackBerry® MDS Connection Service can apply push rules only if you turn on push authorization for the BlackBerry MDS Connection Service.
Before you begin:
  • Turn on push authentication.
  • Create push initiators to authenticate specific push applications.
  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service.
  2. Click the instance that you want to change.
  3. Click Edit instance.
  4. In the Access control section, in the Push authorization drop-down list, click Yes.
  5. Click Save all.
After you finish: Create a push rule.
Back To Top

Create a push rule

  1. In the BlackBerry® Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click MDS Connection Service.
  3. Click Edit component.
  4. On the Access control rules tab, in the Rule name field, type a name for the push rule.
  5. In the Control type drop-down list, click Push.
  6. Click the Add icon.
  7. Click Save all.
After you finish: Assign push initiators to the push rule.
Back To Top

Assign push initiators to a push rule

Before you begin: Create push initiators to authenticate specific push applications.
  1. In the BlackBerry® Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.
  2. Click MDS Connection Service.
  3. Click Edit component.
  4. On the Access control rules tab, click the Edit icon for a push rule.
  5. In the Available push initiators list, click the push initiator that you want to assign to the push rule.
  6. Click Add.
  7. Repeat steps 5 and 6 for each push initiator that you want to assign to the push rule.
  8. Click Save all.
After you finish: Assign the push rule to a user account or to a group.
Back To Top

Assign a push rule to the members of a group

Before you begin:
  • Create a push rule.
  • Assign push initiators to the push rule.
  1. In the BlackBerry® Administration Service, in the BlackBerry solution management menu, expand User.
  2. Click Manage users.
  3. Click View more criteria.
  4. Search for a group.
  5. Click Select all results in the entire set.
  6. In the Add to user configuration list, click Add push rule.
  7. In the Available push rules list, click a push rule.
  8. Click Add.
  9. Click Save.
Back To Top

Assign a push rule to user accounts

Before you begin:
  • Create a push rule.
  • Assign push initiators to the push rule.
  1. In the BlackBerry® Administration Service, in the BlackBerry solution management menu, expand User.
  2. Click Manage users.
  3. Search for one or more user accounts.
  4. Select the user accounts that you want to assign a push rule to.
  5. In the Add to user configuration list, click Add push rule.
  6. In the Available push rules list, click a push rule.
  7. Click Add.
  8. Click Save.
Back To Top

Encrypt push requests that push applications send to BlackBerry devices

You can configure a BlackBerry® MDS Connection Service to use SSL or TLS to encrypt the push requests that server-side push applications send to BlackBerry devices. By default, the BlackBerry MDS Connection Service does not encrypt the push requests that server-side push applications send.
  1. In the BlackBerry Administration Service, in the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view > MDS Connection Service.
  2. Click the instance that you want to change.
  3. Click Edit instance.
  4. In the Access control section, in the Push encryption drop-down list, click Yes.
  5. Click Save all.
Back To Top
Next topic: Managing push application requests
Previous topic: Turn on Integrated Windows authentication so that users can access resources on your organization's network

Was this information helpful? Send us your comments.