Import the certificate into the Java keystore on BEMS

For the Presence and Docs service to trust the BlackBerry Proxy server’s certificate, you must import BlackBerry Connectivity Node certificate. Use the DBmanager to import the certificate into the BEMS Java keystore. By default, DBmanager is located in the installation folder at <drive>:\GoodEnterpriseMobilityServer<version>\GoodEnterpriseMobilityServer\DBManager.
Save a copy of the ca.cer certificate you exported to a convenient location on the computer that hosts BEMS. For instructions, see Export the BlackBerry Proxy certificate to the local computer.
  1. On the computer that hosts the on-premises BEMS, verify that the PATH System variable includes the path to the JAVA directory.
    1. In a command prompt, type set | findstr "Path".
    2. Press Enter.
    For more information about setting the Path system variable, see Set an environment variable for the Java location.
  2. Make a backup of the Java keystore file. The Java keystore file is located at %JAVA_HOME%\lib\security\cacerts, where JAVA_HOME is confirmed in Step 1.
  3. Import the root BlackBerry Proxy certificate.
    1. Open a command prompt and navigate to the DBManager folder. For example, if the installation files are saved to your Downloads folder, type C:\Users\besadmin\Downloads\GoodEnterpriseMobilityServer<version>\GoodEnterpriseMobilityServer\DBManager
    2. Import the certificate. Type java -jar dbmanager-<version>-jar-with-dependencies.jar -moduleName pushnotify -dbType sqlserver -dbName <SQL_server_DB_name> -dbHost <Name of the computer hosting the SQL DB> -dbPort 1433 -userName gems_sa -password <BEMS_service_account_password> -action addcertificate -pemFile "C:\<path to the pemfile location>\<certificate name>.cer" -alias gdcert
  4. Restart the Good Technology Common Services service in the Windows Service Manager.
Configure the Core BEMS service for communicating to BlackBerry Dynamics. For instructions, see Configure the BlackBerry Dynamics server in BEMS.