Administration Guide

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server Express 5  >  BlackBerry Enterprise Server Express for Microsoft Exchange  >  Administration Guide BlackBerry Enterprise Server Express for Microsoft Exchange - 5.0.3

Creating and configuring VPN profiles

Wi-Fi® enabled BlackBerry® devices have built-in VPN clients that supports several types of VPN concentrators.

To create a VPN profile, you configure the VPN configuration settings (for example, the IP address of the VPN concentrator, user names and passwords, and cryptographic methods that the BlackBerry® Enterprise Server Express uses) on a BlackBerry device or using a VPN profile or IT policy. You can assign one or more VPN profiles to a user account or to a group. If a user account has a VPN profile, you can associate the VPN profile with the Wi-Fi profile for the user account.

Depending on your organization's security policy, you can save a user name and password to a BlackBerry device to prevent the BlackBerry device from prompting the user for the login information the first time (or each time) the BlackBerry device connects to the enterprise Wi-Fi network.

Create a VPN profile

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > Wi-Fi configuration.
  2. Click Create VPN profile.
  3. In the Name field, type a name for the VPN profile.
  4. Click Save.
After you finish: Configure the VPN profile.

Create a VPN profile based on an existing VPN profile

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > Wi-Fi configuration.
  2. Click Manage VPN profiles.
  3. Click the name of the VPN profile that you want to copy.
  4. Click Copy profile.
  5. Type a name for the new VPN profile.
  6. Click Save.
After you finish: Configure the VPN profile.

Configure a VPN profile

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > Wi-Fi configuration.
  2. Click Manage VPN profiles.
  3. Click the name of the VPN profile.
  4. Click Edit profile.
  5. On the VPN profile settings tab, change the values for the configuration settings.
  6. Click Save All.
After you finish:
  • For information about VPN configuration settings, see the BlackBerry Enterprise Server Policy Reference Guide.
  • To update BlackBerry device information immediately, resend the IT policy to the BlackBerry device.

Assign a VPN profile to a group

You can assign one or more VPN profiles to a group.
Before you begin: Create and configure a VPN profile.
  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Group.
  2. Click Manage groups.
  3. In the Manage groups section, click the group that you want to assign a VPN profile to.
  4. On the VPN profiles tab, click Edit group.
  5. In the Available VPN profiles list, click the profile that you want to assign to the group and click Add. Repeat for any additional profiles that you want to assign to the group.
  6. Click Save.

When you assign a VPN profile to a group that has at least one user account assigned to it, the BlackBerry Administration Service creates jobs to deliver the resulting objects to BlackBerry devices.

Assign a VPN profile to a user account

You can assign one or more VPN profile to a user account.
Before you begin: Create and configure a VPN profile.
  1. In the BlackBerry® Administration Service, expand User.
  2. Click Manage users.
  3. Search for a user account.
  4. Click the display name for the user account.
  5. Click Edit user.
  6. On the VPN profiles tab, in the VPN profile name section, in the drop-down list, click the appropriate VPN profile.
  7. If required, in the VPN User Specific Settings section, specify the login information that you want to associate with the VPN profile.
  8. Click the Add icon.
  9. Click Save All.

When you assign a VPN profile to a user account, the BlackBerry Administration Service creates a job to deliver the resulting object to the BlackBerry device.

Associate a VPN profile with a Wi-Fi profile

To permit a BlackBerry® device to connect to a Wi-Fi® network using a VPN session, you must associate a VPN profile with a Wi-Fi profile that you assigned to the user account.

  1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy > Wi-Fi configuration.
  2. Click Manage Wi-Fi profiles.
  3. Click the name of the Wi-Fi profile.
  4. Click Edit profile.
  5. On the Wi-Fi profile settings tab, in the Wi-Fi Associations section, in the VPN profile drop-down list, click the VPN profile that you want to associate with the Wi-Fi profile.
  6. Click Save All.
After you finish: To update the BlackBerry device information immediately, resend the IT policy to the BlackBerry device.
Next topic: Delete a Wi-Fi profile
Previous topic: Configure a Wi-Fi profile

Was this information helpful? Send us your comments.