- About this guide
- What is BEMS?
- Preinstallation checklists
- Installation and upgrade
- Prerequisites: Installing and configuring BEMS
- Core requirements
- Configure the Java Runtime Environment
- Prerequisites: Connect for Skype for Business
- Preparing the computer that hosts BEMS for use with Skype for Business
- BlackBerry Connect service database requirements
- Preparing the Skype for Business topology for BEMS
- Prepare the initial computer hosting BEMS
- Prepare additional computers hosting BEMS
- Creating an additional trusted application pool
- Removing provisioning of the BEMS as a trusted application and trusted application pool
- Remove provisioning of the BEMS as a trusted application and trusted application pool
- SSL certificate requirements for Skype for Business
- Mutual TLS (MTLS) certificates
- Steps to create a CA-signed certificate for the local computer account using a CSR for BEMS
- Steps to create a CA-signed for the local computer account using automatic enrollment for BEMS
- Create a CSR for the local computer account for BEMS
- Obtain a CA-signed certificate from the CA server
- Import the CA-signed certificate on the CSR requesting BEMS
- Create a Personal Certificate for the local computer account for BEMS
- Export the CA-signed certificate and private key from the Microsoft Management Console
- Import the CA-signed certificate and private key to additional BEMS instances
- Presence prerequisites: Skype for Business
- Prerequisites: BlackBerry Push Notifications service
- Prerequisites: Cisco Unified Communications Manager IM and Presence Service requirements for Presence
- Prerequisites: Docs service
- Prerequisites: BlackBerry Directory Lookup, BlackBerry Follow-Me, and BlackBerry Certificate Lookup services
- Installing or upgrading the BEMS software
- Removing the BEMS software
- Troubleshooting BEMS installation or upgrade
- Appendices
- Appendix: AlwaysOn Availability support for SQL Server
- Steps to setup SQL Server for AlwaysOn availability
- Configure the BEMS services databases for AlwaysOn availability
- Enabling AlwaysOn availability group failover to subnets for the BEMS-Core and Mail services
- Enabling AlwaysOn availability group failover to subnets for the Connect service
- Enabling AlwaysOn availability group failover to subnets for the Docs service
- Architecture: BEMS notification flow using the Microsoft Graph API
- Architecture: BEMS
- Appendix: AlwaysOn Availability support for SQL Server
- BlackBerry Docs
- BlackBerry Enterprise Mobility Server 3.7
- BEMS Installation Guide
- Prerequisites: Installing and configuring BEMS
- Prerequisites: Connect for Skype for Business
- SSL certificate requirements for Skype for Business
- Import the CA-signed certificate and private key to additional BEMS instances
Import the CA-signed certificate and private key to additional BEMS instances
BEMS
instancesComplete this task on each computer that hosts the
Presence
and/or Connect
service and is configured to use Skype for Business
. You can use one signed certificate for multiple BEMS
instances. For more information about importing the certificate, visit docs.microsoft.com and read 'Import a Certificate'. - Verify that you have the access to the exported signed certificate. Instructions, see Export the CA-signed certificate and private key from the Microsoft Management Console
- If the certificate was exported and a security principal was specified, you must log in as a member of that specified group or user.
- Make sure that you have the password that is assigned to the exported certificate.
- On the computer that hostsBEMS, open theMicrosoftManagement Console.
- ExpandPersonal.
- Right-clickCertificates, then click> All Tasks > Import.
- ClickNext.
- Navigate to the certificate that you want to import. ClickNext.
- Enter the password for the private key. ClickNext.
- ClickFinish.