Prerequisites: Deploying BlackBerry Work with BlackBerry Access
BlackBerry Work
with BlackBerry Access
When users install
BlackBerry Access for Windows
or BlackBerry Access for macOS
, BlackBerry Work
is also installed as an integrated web extension for BlackBerry Access
.Before you deploy
BlackBerry Access for Windows
or BlackBerry Access for macOS
with BlackBerry Work
, note the following prerequisites:- Verify that the “DisableBlackBerry Work” app configuration setting is not selected (see BlackBerry Access app configuration settings).
- BlackBerry WorkusesMicrosoft Exchange Web Servicesinstead ofMicrosoft Exchange ActiveSync.BlackBerry Workdoesn’t use a configuration file for theMicrosoft Exchange Web ServicesAutodiscover service. Verify that theMicrosoft Exchange Web ServicesAutodiscover service is enabled. For more information about using EWSEditor to check if the Autodiscover service is enabled, visit support.blackberry.com/community to read article 40351.
- Verify that theBlackBerry Enterprise Mobility Serveris configured for theMicrosoft Exchange Web ServicesAutodiscover service. For instructions, see the BlackBerry Enterprise Mobility Server Installation and Configuration content.To useBEMSfor Autodiscover, the user must be assigned the BlackBerry Core and Mail Services or Good Enterprise Services entitlement. The entitlement must be configured in theBlackBerry Dynamicsconnectivity profile linked to the FQDN of theBEMSand port 8443. For more information, see Configure BlackBerry Work connection settings.Autodiscovery of the user's mailbox occurs as follows:
- BlackBerry Workconnects toBEMSto perform autodiscovery if the properBEMS-related entitlements are configured in theBlackBerry Dynamicsconnectivity profile and assigned to the user. Good Enterprise Services or BlackBerry Core and Mail Services entitlements both cover this requirement.
- If that fails,BlackBerry Workattempts to connect to https://<emaildomain.com>/autodiscover/autodiscover.svc
- If that fails,BlackBerry Workattempts to connect to https://autodiscover.<emaildomain.com>/autodiscover/autodiscover.svc.
- IfMicrosoft Exchange Web Servicesis using a self-signed server certificate, ensure that the “Alert user for invalid or expired certificate” app configuration setting is not selected.
If you want to enable
Kerberos
Constrained Delegation, note the following prerequisites:- In theMicrosoft Internet Information Services(IIS), enableKerberosauthentication (underWindowsauthentication) for theMicrosoft Exchange Web Servicesweb server.
- InMicrosoft Active Directory Users and Computers, in theMicrosoftManagement Console (MMC), on the Delegation tab, add theMicrosoft Exchange Web ServicesHTTP service for theUEMadministrator account.
- IfKerberosConstrained Delegation is enabled, users can’t enter their authentication credentials (username and password). Authentication is delegated to theUEMadministrator account.
- For more information about setting upKerberosConstrained Delegation, read Configuring Kerberos for BlackBerry Dynamics apps in theBlackBerry UEMConfiguration content.