- About this guide
- What is BEMS?
- Preinstallation checklists
- Installation and upgrade
- Supported installation and upgrade paths
- Best practices: Preparing to upgrade
- Steps to install BEMS
- Steps to upgrade BEMS
- Steps to upgrade BEMS and change to an alternate JRE
- Steps to upgrade BEMS and change the instant messaging service
- Steps to upgrade BEMS and change the instant messaging service to Skype for Business Online
- Steps to install BEMS instances into a cluster
- Prerequisites: Installing and configuring BEMS
- Core requirements
- Configure the Java Runtime Environment
- Prerequisites: Connect for Microsoft Lync Server and Skype for Business
- Preparing the computer that hosts BEMS for use with Microsoft Lync Server 2010, Microsoft Lync Server 2013, or Skype for Business
- BlackBerry Connect service database requirements
- Preparing the Microsoft Lync Server and Skype for Business topology for BEMS
- SSL certificate requirements for Microsoft Lync Server and Skype for Business
- Mutual TLS (MTLS) certificates
- Steps to create a CA-signed certificate for the local computer account using a CSR for BEMS
- Steps to create a CA-signed for the local computer account using automatic enrollment for BEMS
- Create a CSR for the local computer account for BEMS
- Create a Personal Certificate for the local computer account for BEMS
- Export the CA-signed certificate and private key from the Microsoft Management Console
- Import the CA-signed certificate and private key to additional BEMS instances
- Prerequisites: Connect for Skype for Business Online
- Presence prerequisites: Microsoft Lync Server, Skype for Business, and Skype for Business Online
- Prerequisites: BlackBerry Push Notifications service
- Supported Load Balancer affinity using Microsoft Exchange Server 2010
- Microsoft Exchange Web Services proxy support
- Microsoft Exchange Web Services Namespace Configuration
- Grant application impersonation permission to the service account
- Set Basic authentication for the Microsoft Exchange Web Services protocol
- Microsoft Exchange Autodiscover
- BlackBerry Push Notifications database requirements
- Prerequisites: Cisco Unified Communications Manager IM and Presence Service requirements for Presence
- Prerequisites: Docs service
- Prerequisites: BlackBerry Directory Lookup, BlackBerry Follow-Me, and BlackBerry Certificate Lookup services
- Installing or upgrading the BEMS software
- Removing the BEMS software
- Appendices
- Appendix A: Migrating your Good Share database to BEMS-Docs
- Appendix: AlwaysOn Availability support for SQL Server
- Steps to setup SQL Server for AlwaysOn availability
- Configure the BEMS services databases for AlwaysOn availability
- Enabling AlwaysOn availability group failover to subnets for the BEMS-Core and Mail services
- Enabling AlwaysOn availability group failover to subnets for the Connect service
- Enabling AlwaysOn availability group failover to subnets for the Docs service
- Architecture: BEMS
- Legal notice
- BlackBerry Docs
- BlackBerry Enterprise Mobility Server 3.1
- BEMS Installation Guide
- Prerequisites: Installing and configuring BEMS
- Prerequisites: Connect for Microsoft Lync Server and Skype for Business
- SSL certificate requirements for Microsoft Lync Server and Skype for Business
- Export the CA-signed certificate and private key from the Microsoft Management Console
Export the CA-signed certificate and private key from the Microsoft Management Console
Microsoft
Management ConsoleExport the certificate from the
Microsoft
Management Console (MMC). Make sure to include the private key and save it as a .pfx file. For more information, visit docs.microsoft.com and read 'Export a Certificate with the Private Key' Verify that you created a CA-signed certificate for the local computer account to use on multiple
BEMS
instances running the Connect
and/or Presence
services. For instructions on creating a CA-signed certificate using automatic enrollment, see Create a Personal Certificate for the local computer account for BEMS. For instructions on creating a CA-signed certificate using a CSR, see Create a CSR for the local computer account for BEMS.- On the computer that hostsBEMS, open theMicrosoftManagement Console.
- ExpandPersonal.
- ClickCertificates.
- Right-click the personal certificate that you created and clickAll Tasks > Export.
- In theCertificate Export Wizard, selectYes, export the private key.
- ClickNext.
- Verify that theInclude all certificates in the certification path if possiblecheck box is selected. Clear the other check boxes.
- Select the appropriate security method and enter the required security information. ClickNext.If you select Groups and users, make sure that you log on to theBEMSinstance where the certificate will be imported as the user or member of that group.
- ClickBrowseto specify a name for the certificate and save it to your desktop.
- ClickNext.
- ClickFinish.
- ClickOK.