Skip Navigation
  1. BlackBerry Docs
  2. BlackBerry Enterprise Mobility Server 3.8
  3. Configuring the BlackBerry Connect service
  4. Configure the Connect service to receive SSL communications for a new installation
  5. Configure BEMS-Connect to use a secure connection using your own SSL certificate
  6. Bind the SSL certificate to the Connect service SSL port

Bind the SSL certificate to the
Connect
 service SSL port

Import the CA-signed certificate to the computer that hosts the
Connect
 service.
  1. Copy the thumbprint of the imported certificate.
    1. Double-click the imported certificate.
    2. Click the
      Details
       tab.
    3. In the
      Show
       dropdown list, click
      Properties Only
      .
    4. In the
      Field
       column, click
      Thumbprint
      .
    5. Copy the hexidecimal values into a text editor. Delete the spaces between the hexadecimal values. For example, if you copied 80 82 41 2f..., it becomes 8082412f...
    6. Keep the text editor open. 
  2. If required, login to the computer that hosts the
    Connect
     service with the service account.
  3. Open a command prompt (run as administrator).
  4. Check that a certificate is not already bound to port 8082. Type
    netsh http show sslcert
    . If you use a new certificate, document the hash information for port 8082. The certificate hash is used in step 4.
    If a certificate is bound to port 8082 or a port that you want to use, type
    netstat -abn > netstatoutput.txt
     to output the list of ports and processes to which they are bound. You must first delete the certificate before binding the new certificate or select a new port to bind the SSL. If you choose to bind the certificate to another port, consider this modification when configuring the
    Connect
     service. To delete the existing certificate, type
    netsh http delete sslcert ipport=0.0.0.0:8082
     or the port that you want to bind the certificate to.
    For more information about netsh, visit the Technet Library to see Netsh Commands for Hypertext Transfer Protocol (HTTP).
  5. Bind the certificate to the SSL port. In a command prompt (run as administrator), type
    netsh http add sslcert ipport=0.0.0.0:<
    port
    > certhash=<
    thumbprint
    > appid={E1743F08-8F12-41DB-BCCD-9E30FF2100EA}
    Where <
    thumbprint
    > is the thumbprint of the signed certificate that you exported to the text editor. For instructions, see Import the signed certificate to the computer that hosts the Connect service.
  6. Press
    Enter
    .
  7. To verify the certificate binding, type
    netsh http show sslcert
    .