- About this guide
- What is BEMS?
- Preinstallation checklists
- Installation and upgrade
- Prerequisites: Installing and configuring BEMS
- Core requirements
- Configure the Java Runtime Environment
- Prerequisites: Connect for Skype for Business
- Preparing the computer that hosts BEMS for use with Skype for Business
- BlackBerry Connect service database requirements
- Preparing the Skype for Business topology for BEMS
- Prepare the initial computer hosting BEMS
- Prepare additional computers hosting BEMS
- Creating an additional trusted application pool
- Removing provisioning of the BEMS as a trusted application and trusted application pool
- Remove provisioning of the BEMS as a trusted application and trusted application pool
- SSL certificate requirements for Skype for Business
- Mutual TLS (MTLS) certificates
- Steps to create a CA-signed certificate for the local computer account using a CSR for BEMS
- Steps to create a CA-signed for the local computer account using automatic enrollment for BEMS
- Create a CSR for the local computer account for BEMS
- Obtain a CA-signed certificate from the CA server
- Import the CA-signed certificate on the CSR requesting BEMS
- Create a Personal Certificate for the local computer account for BEMS
- Export the CA-signed certificate and private key from the Microsoft Management Console
- Import the CA-signed certificate and private key to additional BEMS instances
- Presence prerequisites: Skype for Business
- Prerequisites: BlackBerry Push Notifications service
- Prerequisites: Cisco Unified Communications Manager IM and Presence Service requirements for Presence
- Prerequisites: Docs service
- Prerequisites: BlackBerry Directory Lookup, BlackBerry Follow-Me, and BlackBerry Certificate Lookup services
- Installing or upgrading the BEMS software
- Removing the BEMS software
- Troubleshooting BEMS installation or upgrade
- Appendices
- Appendix: AlwaysOn Availability support for SQL Server
- Steps to setup SQL Server for AlwaysOn availability
- Configure the BEMS services databases for AlwaysOn availability
- Enabling AlwaysOn availability group failover to subnets for the BEMS-Core and Mail services
- Enabling AlwaysOn availability group failover to subnets for the Connect service
- Enabling AlwaysOn availability group failover to subnets for the Docs service
- Architecture: BEMS notification flow using the Microsoft Graph API
- Architecture: BEMS
- Appendix: AlwaysOn Availability support for SQL Server
- BlackBerry Docs
- BlackBerry Enterprise Mobility Server 3.7
- BEMS Installation Guide
- Prerequisites: Installing and configuring BEMS
- Core requirements
- Setting up a Windows service account for BEMS
- Configure permissions for the service account
Configure permissions for the service account
A service account is a
Windows
account that runs the services for BEMS
. The BEMS
service
account must be a member of the local Administrators group on the computer that you
install BEMS
on,
and it must have the Log on as a service permission. The service account must also
have permission to access the Microsoft SQL
Server
.- On the taskbar, clickStart > Administrative Tools > Computer Management.
- In the left pane, expandLocal Users and Groups.
- Navigate to theGroupsfolder.
- In the right pane, double-clickAdministrators.
- ClickAdd.
- In theEnter the object names to selectfield, type the name of the service account (for example, BESAdmin).
- ClickOK.
- ClickApply.
- ClickOK.
- On the taskbar, clickStart > Administrative Tools > Local Security Policy.
- In the left pane, expandLocal policies.
- ClickUser Rights Assignment.
- Configure theLog on as a servicepermission for the service account.