Blackbe;rry ENTERPRISE SERVER FOR IBM LOTUS DOMINO - - FEATURE AND... Installation guide

Feature and Technical Overview
BlackBerry Enterprise Server for IBM Lotus Domino
Version: 4.1 | Service Pack: 6

SWDT305802-456681-0711025924-001

Contents
1New in this release............................................................................................................................................................. 5
2BlackBerry Enterprise Server architecture.................................................................................................................... 9
Architecture: BlackBerry Enterprise Server............................................................................................................................. 9
Architecture: BlackBerry Enterprise Server remote components........................................................................................ 13
3 BlackBerry Enterprise Server components and features............................................................................................ 19
BlackBerry messaging and collaboration services................................................................................................................. 19
BlackBerry Messaging Agent................................................................................................................................................ 19
BlackBerry Collaboration Service......................................................................................................................................... 21
BlackBerry Synchronization Service..................................................................................................................................... 24
BlackBerry Attachment Service............................................................................................................................................. 25
BlackBerry MDS........................................................................................................................................................................... 26
BlackBerry Applications......................................................................................................................................................... 28
Types of BlackBerry Applications.......................................................................................................................................... 28
BlackBerry MDS Connection Service................................................................................................................................... 29
BlackBerry MDS Integration Service.................................................................................................................................... 31
BlackBerry device management................................................................................................................................................ 32
Wireless implementation of BlackBerry devices................................................................................................................. 32
Centralized maintenance of BlackBerry devices................................................................................................................ 33
Controlling third-party applications on BlackBerry devices............................................................................................ 33
BlackBerry Enterprise Solution security................................................................................................................................... 34
Master encryption keys.......................................................................................................................................................... 35
Standard message encryption............................................................................................................................................... 35
Options for extending messaging security......................................................................................................................... 36
Options for encrypting stored data...................................................................................................................................... 37
Controlling BlackBerry device access to the BlackBerry Enterprise Server................................................................... 38
Management of BlackBerry device security over the wireless network using IT administration commands........... 39
BlackBerry Policy Service........................................................................................................................................................... 39
BlackBerry Configuration Panel................................................................................................................................................ 41
4 BlackBerry Enterprise Server process flows.................................................................................................................. 43
Messaging process flows............................................................................................................................................................ 43
Process flow: Sending a message to a BlackBerry device................................................................................................. 43

Process flow: Sending a message from a BlackBerry device............................................................................................ 44
Process flow: Sending a message that contains an attachment from a BlackBerry device........................................ 46
Process flow: Receiving a message that is encrypted using IBM Lotus Notes.............................................................. 47
Process flow: Searching an organization's address book on a BlackBerry device........................................................ 48
Instant messaging process flows.............................................................................................................................................. 49
Process flow: Starting an instant messaging session using the BlackBerry Client for use with Microsoft Office
Live Communications Server 2005 (Windows Messenger)............................................................................................... 49
Process flow: Starting an instant messaging session using the BlackBerry Client for use with Microsoft Office
Live Communications Server 2005 (Microsoft Office Communicator)........................................................................... 50
Process flow: Starting an instant messaging session using the BlackBerry Client for use with Microsoft Office
Communications Server 2007............................................................................................................................................... 52
Process flow: Starting an instant messaging session using the BlackBerry Client for IBM Lotus Sametime........... 53
Process flow: Starting an instant messaging session using the BlackBerry Client for Novell GroupWise Messenger
.................................................................................................................................................................................................... 55
Process flow: Sending a file to a contact using the BlackBerry Client for IBM Lotus Sametime................................ 56
Message attachment process flows.......................................................................................................................................... 57
Process flow: Viewing a message attachment.................................................................................................................... 57
Process flow: Viewing an attachment through a link........................................................................................................ 59
Organizer data process flows.................................................................................................................................................... 59
Process flow: Synchronizing organizer data for the first time on a BlackBerry device................................................ 60
Process flow: Synchronizing subsequent changes to organizer data............................................................................. 61
Mobile data process flows.......................................................................................................................................................... 62
Process flow: Requesting BlackBerry Browser content on a BlackBerry device............................................................ 62
Process flow: Requesting BlackBerry Browser content while access control is turned on for the BlackBerry MDS
Connection Service................................................................................................................................................................. 63
Process flow: Requesting BlackBerry Browser content with two-factor authentication turned on........................... 64
Process flow: Pushing application content to a BlackBerry device................................................................................. 65
Process flow: Requesting BlackBerry MDS Runtime Applications from a BlackBerry device..................................... 66
BlackBerry device management process flows....................................................................................................................... 67
Process flow: Activating the BlackBerry device over the wireless network................................................................... 67
Process flow: Resending an IT policy to the BlackBerry device manually...................................................................... 68
Process flow: Authenticating the data on a BlackBerry device without connecting to the BlackBerry Infrastructure
.................................................................................................................................................................................................... 68
Process flow: Sending an application to a BlackBerry device over the wireless network............................................ 68

5 Glossary................................................................................................................................................................................ 71
6 Legal notice.......................................................................................................................................................................... 75

New in this release 1
Feature Description
Rich-content email messages BlackBerry® Enterprise Server version 4.1 SP6 supports HTML and rich-content
email messages for BlackBerry devices that are running BlackBerry® Device
Software version 4.5 or later. By default, this feature is turned on.
IBM® Lotus® Domino® version 7.0.2 or later is required to support rich-content
email messages on the BlackBerry Enterprise Server. For more information about
the impact of supporting HTML email messages and rich-content email
messages on memory and CPU resources, visit www.blackberry.com/go/
serverdocs to see the Impact of supporting HTML and RTF email messages
document.
The BlackBerry Enterprise Server and its components support HTML email
messages in a Japanese environment when the following options are selected in
the regional and language settings of the computer: Install files for complex
script and right-to-left languages, and Install files for East Asian languages.
Changes to the BlackBerry
Configuration Database schema
BlackBerry Enterprise Server version 4.1 SP6 contains changes to the BlackBerry
Configuration Database schema. The changes occur in the upgrade file that is
named UpgradeV20080410.sql.
Support for IBM® Lotus Notes® links In IBM Lotus Notes, users can include document links, anchor links, view links,
or database links (application links) in their email messages. BlackBerry
Enterprise Server version 4.1 SP6 supports IBM Lotus Notes links in the email
messages that users receive on their BlackBerry devices. The BlackBerry
EnterpriseServerretrievesthetargetinformationfromtheappropriateIBMLotus
Domino server and converts it into HTTP format. In plain-text email messages,
a link appears as a web address. In rich-content email messages, a link appears
as an icon.
Users can click on the HTTP links to view documents, folders, views, or database
information in the BlackBerry® Browser. If the target information is stored on a
secure IBM Lotus Domino server, the BlackBerry devices might prompt users to
type their login information after they click a link.
By default, this feature is turned on.
Feature and Technical Overview New in this release
5

Feature Description
For more information, visit www.blackberry.com/go/serverdocs to see the
Support for IBM Lotus Notes Links on BlackBerry Devices document.
Support for IBM Lotus Notes hotspot
links
Inprevious versionsof theBlackBerry EnterpriseServer, ifusers includedhotspot
links in their email messages using IBM Lotus Notes, the BlackBerry Messaging
Agent deleted the links from the messages before users received them on their
BlackBerry devices.
In BlackBerry Enterprise Server version 4.1 SP6, the BlackBerry Messaging Agent
retains the hotspot links in the messages that users receive on their BlackBerry
devices.
Support for Microsoft® Office
Communications Server 2007
TheBlackBerryCollaborationServicesupportsMicrosoftOfficeCommunications
Server 2007. BlackBerry Enterprise Server version 4.1 SP6 supports a new
collaboration client for use with this instant messaging server: the BlackBerry®
Client for use with Microsoft® Office Communications Server 2007.
Support for IBM® Lotus® Sametime®
version 8.0
The BlackBerry Collaboration Service supports IBM Lotus Sametime version 8.0.
New names for the BlackBerry
collaboration clients
The collaboration client that was previously named BlackBerry® Instant
Messaging for Microsoft® Office Live Communications Server 2005 is now
named the BlackBerry® Client for use with Microsoft® Office Live
Communications Server 2005.
The collaboration client that was previously named BlackBerry® Instant
Messaging for IBM® Lotus® Sametime® is now named the BlackBerry® Client
for IBM® Lotus® Sametime®.
The collaboration client that was previously named BlackBerry® Instant
Messaging for Novell® GroupWise® Messenger is now named the BlackBerry®
Client for Novell® GroupWise® Messenger.
Control RIM value-added applications You can use new and existing IT policy rules to control RIM value-added
applications. For more information about new IT policy rules, see the Policy
Reference Guide.
Support for IBM Lotus Domino version
8.0.1 and IBM Lotus Notes version 8.0.1
BlackBerry Enterprise Server version 4.1 SP6 supports IBM Lotus Domino version
8.0.1 and IBM Lotus Notes version 8.0.1.
Feature and Technical Overview New in this release
6

Feature Description
New naming conventions for the
BlackBerry® Mobile Data System and
related software
The component of the BlackBerry Enterprise Server that was previously named
the BlackBerry MDS Services is now named the BlackBerry MDS Integration
Service. The term BlackBerry MDS Services now refers collectively to the
BlackBerry MDS Integration Service and the BlackBerry MDS Connection
Service.
BlackBerry® MDS Studio Applications are now named BlackBerry® MDS
Runtime Applications. Java® applications that are developed for and used on
BlackBerry devices are now named BlackBerry Java Applications. Browser
applications that are developed for and used on BlackBerry devices are now
named BlackBerry® Browser Applications. The term BlackBerry Applications
refers collectively to BlackBerry MDS Runtime Applications, BlackBerry Java
Applications, and BlackBerry Browser Applications.
TheBlackBerry ManagerUIand theBlackBerry Enterprise Serverdocumentation
reflect these new naming conventions.
Feature and Technical Overview New in this release
7

BlackBerry Enterprise Server architecture 2
Architecture: BlackBerry Enterprise Server
The BlackBerry® Enterprise Server consists of various components that are designed to perform the following actions:
• provide productivity tools and data from an organization's applications to its BlackBerry device users
• monitor other BlackBerry Enterprise Server components
• process, route, compress, and encrypt data
• communicate with the wireless network
Feature and Technical Overview BlackBerry Enterprise Server architecture
9

Component Description
BlackBerry Attachment Service The BlackBerry Attachment Service converts supported message attachments
into a format that users can view on their BlackBerry devices.
Feature and Technical Overview Architecture: BlackBerry Enterprise Server
10

Component Description
BlackBerry Collaboration Service The BlackBerry Collaboration Service provides a connection between your
organization's instant messaging server and the collaboration client on
BlackBerry devices.
BlackBerry Configuration Database The BlackBerry Configuration Database is a relational database that contains
configuration data that BlackBerry Enterprise Server components use. The
BlackBerry Configuration Database includes the following data:
• details about the connection from the BlackBerry Enterprise Server to the
wireless network
• user list
•address mappings between PINs and email addresses for BlackBerry MDS
Connection Service push features
• read-only copy of each master encryption key
BlackBerry Controller The BlackBerry Controller monitors the BlackBerry Enterprise Server
components and restarts them if they stop responding.
BlackBerry Dispatcher The BlackBerry Dispatcher compresses and encrypts all of the data that is sent
to and from BlackBerry devices. It sends the data through the BlackBerry Router,
to and from the wireless network.
BlackBerry Manager The BlackBerry Manager connects to the BlackBerry Configuration Database.
You can use the BlackBerry Manager to manage the BlackBerry Domain,
including user accounts and device administration. The BlackBerry Domain
consists of a single BlackBerry Configuration Database and all the BlackBerry
Enterprise Server instances that use it.
BlackBerry MDS Connection Service The BlackBerry MDS Connection Service enables users to access web content,
the Internet, or your organization's intranet, and also enables applications on
BlackBerry devices to connect to your organization's application or content
servers for application data and updates.
BlackBerry MDS Integration Service The BlackBerry MDS Integration Service provides application-level integration
for BlackBerry® MDS Runtime Applications on BlackBerry devices. You can use
the BlackBerry MDS Integration Service to install BlackBerry MDS Runtime
Applications that are stored in the BlackBerry MDS Application Repository on
BlackBerry devices. You can also use it to manage, update, and remove
BlackBerry MDS Runtime Applications.
Feature and Technical Overview Architecture: BlackBerry Enterprise Server
11

Component Description
BlackBerry MDS Application
Repository
The BlackBerry MDS Application Repository stores BlackBerry MDS Runtime
Applications that your organization's developers can create and publish using
the BlackBerry® MDS Studio or the BlackBerry® Plug-in for Microsoft® Visual
Studio® developer tools. You can use the BlackBerry Manager to manage the
BlackBerry MDS Runtime Applications that are stored in the BlackBerry MDS
Application Repository.
BlackBerry Messaging Agent The BlackBerry Messaging Agent connects to your organization's messaging
server to provide messaging services, calendar management, address lookups,
attachment viewing, attachment downloading, and encryption key generation.
The BlackBerry Messaging Agent also acts as a gateway for the BlackBerry
Synchronization Service to access organizer data on the messaging server. The
BlackBerry Messaging Agent synchronizes configuration data between the
BlackBerry Configuration Database and the BlackBerry profiles database.
BlackBerry Policy Service The BlackBerry Policy Service performs administration services over the wireless
network. It sends IT policies and IT administration commands and provisions
service books. IT policies and IT administration commands define BlackBerry
device security, settings for synchronizing data over the wireless network, and
otherconfigurationsettingsonBlackBerrydevices.TheBlackBerryPolicyService
also sends service books to configure feature and component settings on
BlackBerry devices.
BlackBerry profiles database The BlackBerry profiles database is an IBM® Lotus® Domino® database that
contains configuration data for user accounts.
BlackBerry Router The BlackBerry Router connects to the wireless network to send data to and from
BlackBerry devices. It also sends data within your organization's network to
BlackBerrydevicesthat areconnectedtocomputers with theBlackBerry®Device
Manager.
BlackBerry state databases The BlackBerry state databases contain data that links messages sent from or
received on BlackBerry devices to corresponding messages in users' email
applications. The data in the BlackBerry state databases supports features such
as email reconciliation, message forwarding, message filing, and replying with
text.
BlackBerry Synchronization Service The BlackBerry Synchronization Service synchronizes organizer data between
BlackBerry devices and the messaging server over the wireless network.
Feature and Technical Overview Architecture: BlackBerry Enterprise Server
12

Component Description
organization's application or content
server
The organization's application or content server provides push applications and
intranet content for the BlackBerry MDS Services.
instant messaging server The instant messaging server stores instant messaging accounts.
messaging server The messaging server stores email accounts.
user's computer with the BlackBerry
Device Manager
The user's computer with the BlackBerry Device Manager enables users to
connect their BlackBerry devices to their computers using a serial or USB
connection. The BlackBerry Enterprise Server and BlackBerry devices use this
connection to send data between them.
Data traffic from BlackBerry devices bypasses the wireless network while
BlackBerry devices are connected to users' computers. The BlackBerry Device
Manager connects to the BlackBerry Router, which sends data directly to
BlackBerry devices.
Users can install the BlackBerry Device Manager separately from the
BlackBerry® Desktop Manager or with it as part of the full BlackBerry® Desktop
Software installation. The BlackBerry Device Manager is an optional component,
but it is required to support a bypass connection to the BlackBerry Router.
Architecture: BlackBerry Enterprise Server remote components
You can install all BlackBerry® Enterprise Server components on one computer, or you can install certain components on
separate computers. Different components impact system resources differently. You can choose to install only one remote
component on each computer in your organization's environment.
Feature and Technical Overview Architecture: BlackBerry Enterprise Server remote components
13

Sample architecture with a remote BlackBerry Collaboration Service
Feature and Technical Overview Architecture: BlackBerry Enterprise Server remote components
14

Sample architecture with a remote BlackBerry MDS Connection Service
Feature and Technical Overview Architecture: BlackBerry Enterprise Server remote components
15

Sample architecture with a remote BlackBerry MDS Integration Service
Component Description
BlackBerry Manager A remote BlackBerry Manager enables you to manage the BlackBerry Domain
from their computers.
BlackBerry Attachment Service A remote BlackBerry Attachment Service can support multiple BlackBerry
Enterprise Server instances.
The BlackBerry Attachment Service can use increased system resources when it
processes concurrent conversion requests. You can install the BlackBerry
Attachment Service on a remote computer to increase the number of concurrent
conversions without impacting message delivery.
BlackBerry Collaboration Service A remote BlackBerry Collaboration Service can support multiple BlackBerry
Enterprise Server instances.
The BlackBerry Collaboration Service uses a persistent socket connection for
each instant messaging session. You can install the BlackBerry Collaboration
Service on a remote computer to maximize the number of available sockets.
Feature and Technical Overview Architecture: BlackBerry Enterprise Server remote components
16

Component Description
You can install only one type of BlackBerry Collaboration Service (for example,
IBM® Lotus® Sametime®), and users can use only one type of enterprise instant
messaging application on their BlackBerry devices.
BlackBerry MDS Connection Service A remote BlackBerry MDS Connection Service can support multiple BlackBerry
Enterprise Server instances.
The BlackBerry MDS Connection Service can use increased system resources
when it processes content requests. You can install the BlackBerry MDS
Connection Service on a remote computer to minimize the impact on message
and data delivery.
BlackBerry MDS Integration Service A remote instance of the BlackBerry MDS Integration Service can support
multiple BlackBerry Enterprise Server instances and one BlackBerry MDS
Application Repository.
The BlackBerry MDS Integration Service can use increased system resources
when processing content requests. You can install a BlackBerry MDS Integration
Service on a remote computer to minimize the impact on message delivery.
BlackBerry MDS Application
Repository
A remote BlackBerry MDS Application Repository can support one instance of
the BlackBerry MDS Integration Service. You must install the BlackBerry MDS
Application Repository on the same database server as the BlackBerry
Configuration Database.
BlackBerry Router A remote BlackBerry Router can support multiple BlackBerry Enterprise Server
instances.
The BlackBerry Router does not use many system resources, but it is a critical
connectionpointfortheBlackBerry®EnterpriseSolution.Youcaninstallmultiple
standby instances of the BlackBerry Router as failover locations in the event that
the active BlackBerry Router is unavailable.
BlackBerry Configuration Database A remote BlackBerry Configuration Database can support multiple BlackBerry
Enterprise Server instances, which creates a BlackBerry Domain.
Feature and Technical Overview Architecture: BlackBerry Enterprise Server remote components
17