Configure the BlackBerry Enterprise Service 10 User Administration Tool to skip certificate validation

When the BlackBerry Enterprise Service 10 User Administration Tool connects to the BlackBerry Administration Service, it verifies that the FQDN that you configured the tool to use matches the SSL certificate of the BlackBerry Administration Service. You can configure the tool to skip this verification process for specific servers.
  1. On the computer that hosts the BlackBerry Enterprise Service 10 User Administration Tool, navigate to <drive>:\Program Files (x86)\Research In Motion\BlackBerry Resource Kit for BlackBerry Enterprise Service 10\BlackBerry Enterprise Service 10 User Administration Tool Client.
  2. In a text editor, open the BESUserAdminClient.exe.config file.
    If your computer's operating system uses UAC and does not permit you to modify the configuration file at this location, open the virtualized copy of the BESUserAdminClient.exe.config file in the application data folder for the current user (for example, <drive>\Users\<user_name>\AppData\Local\VirtualStore\Program Files (x86)\Research In Motion\BlackBerry Resource Kit for BlackBerry Enterprise Service 10).
  3. In the <userSettings> section, after <RIM.Enterprise.BRK.BESUserAdminClient.Properties.Settings>, type the following:
    <setting name="CertValidationExcludedHosts" serializeAs="String">
    	<value>server</value>
    </setting>

    <server> is the FQDN or IP address of the computer that hosts the BlackBerry Administration Service. If you want to specify multiple computers, separate each FQDN or IP address using a comma ( , ) or semi-colon ( ; ).
    Example:
    <setting name="CertValidationExcludedHosts" serializeAs="String">
    	<value>server1.testnet.company.net;192.0.2.124</value>
    </setting>
  4. Save and close the BESUserAdminClient.exe.config file.
After you finish: Restart the BlackBerry Enterprise Service 10 User Administration Tool.


Was this information helpful? Send us your comments.