Skip Navigation

Configuring the 
BlackBerry 2FA
 server for high availability

You can use the same ports for all 
BlackBerry 2FA
 servers. 
To maintain the unique encryption of configuration information, it is recommended that you do not copy the bb2fa-config.json file between 
BlackBerry 2FA
 servers. You must configure each server separately in the 
BlackBerry UEM
 management console.
Task
Description
Step 1
If you have not already done so, set up high availability for your VPN gateway. For more information, see the documentation for your VPN gateway.
Step 2
Install two or more 
BlackBerry 2FA
 servers. For each server, generate and download an activation file. During subsequent installations, you can choose not to select the 
BlackBerry 2FA
 app files. You do not need to install the files more than once. For more information, see the 
BlackBerry 2FA
 server installation and upgrade content
.
Step 3
Create a profile for the 
BlackBerry 2FA
 servers on the VPN server. For more information, see Configuring a connection between the BlackBerry 2FA server and a VPN gateway.
Step 4
Connect each 
BlackBerry 2FA
 server, to a VPN gateway. For more information, see Configure the BlackBerry 2FA server to connect to a VPN gateway.
Step 5
Step 6
Step 7
Step 8
Step 9
Step 10
If needed, send the 
BlackBerry 2FA
 app to devices. For more information, see Installing the BlackBerry 2FA app on devices.