Blackbe;rry ENTERPRISE SERVER FOR MICROSOFT EXCHANGE - ENTERPRISE SERVER WIRELESS SOFTWARE... Instruction Manual

Administration Guide
BlackBerry Enterprise Server
Wireless Software Upgrades
Version: 4.1 | Service Pack: 5

SWDT207654-207654-0624045711-001

Contents
1Upgrading the BlackBerry Device Software over the wireless network.................................................................. 3
Wireless software upgrades....................................................................................................................................................... 3
Sources of software upgrade requests..................................................................................................................................... 3
Applications that the wireless software upgrade process supports.................................................................................... 3
Types of software upgrade packages....................................................................................................................................... 4
Approximate duration for downloading and installing wireless software upgrades ................................................... 4
Features of wireless software upgrades................................................................................................................................... 5
Architecture: BlackBerry Infrastructure components............................................................................................................ 7
Components................................................................................................................................................................................. 8
2Protecting wireless software upgrades.......................................................................................................................... 9
Measures of security for wired and wireless solutions.......................................................................................................... 9
Controlling wireless software upgrades using the BlackBerry Enterprise Server............................................................. 9
Administrative roles that can control software upgrade requests.................................................................................. 9
How the BlackBerry Enterprise Solution authenticates requests for wireless software upgrades................................. 9
Authenticating requests for wireless software upgrades................................................................................................. 10
How the BlackBerry device protects the existing BlackBerry Device Software................................................................ 10
How the BlackBerry Enterprise Solution verifies the BlackBerry Device Software upgrade files.................................. 11
Battery power requirements for protecting the BlackBerry device against attack........................................................... 11
How a BlackBerry device protects user data during a wireless software upgrade........................................................... 11
Protection of user data on locked BlackBerry devices...................................................................................................... 11
User data that the BlackBerry device can encrypt when the content protection feature is turned on .................... 12
How the BlackBerry Enterprise Solution controls installation of third-party applications that wireless software
upgrades do not support............................................................................................................................................................ 13
3 Requesting wireless software upgrades......................................................................................................................... 15
Process flow: Requesting a wireless software upgrade from a BlackBerry device............................................................ 15
Severity levels for software upgrade requests........................................................................................................................ 15
Information that a software upgrade request displays......................................................................................................... 16
Prerequisites: Requesting wireless software upgrades......................................................................................................... 16
Minimum requirements for wireless software upgrades................................................................................................... 16
Device memory requirements for wireless software upgrades........................................................................................ 16
Battery power requirements for wireless software upgrades........................................................................................... 17
Best practice: Preventing possible BlackBerry device issues during the software upgrade process......................... 17

Search criteria for BlackBerry devices..................................................................................................................................... 17
How a user can respond to a software upgrade request....................................................................................................... 18
Send a software upgrade request......................................................................................................................................... 18
4 Restricting wireless software upgrades......................................................................................................................... 21
Preventing wireless software upgrades based on the source of the upgrade request..................................................... 21
Allow wireless service providers to send software upgrade requests............................................................................. 21
Prevent BlackBerry device users from sending software upgrade requests.................................................................. 21
Preventing wireless software upgrades based on the network connection type.............................................................. 22
Upgrading software over a serial bypass connection........................................................................................................ 22
Prevent BlackBerry device users from downloading software upgrade packages over a Wi-Fi connection............. 22
Prevent BlackBerry device users from downloading software upgrade packages over a WAN connection............. 23
Prevent BlackBerry device users from downloading software upgrade packages over a roaming WAN connection
.................................................................................................................................................................................................... 23
Prevent BlackBerry device users from downloading software upgrade packages over an international roaming
WAN connection...................................................................................................................................................................... 23
5 Managing wireless software upgrades........................................................................................................................... 25
Monitoring software upgrade requests and cancellation requests..................................................................................... 25
Cancel a wireless software upgrade..................................................................................................................................... 25
View upgrade properties for BlackBerry devices................................................................................................................ 26
6 Legal....................................................................................................................................................................................... 29
7Glossary................................................................................................................................................................................ 33

Upgrading the BlackBerry Device Software over the
wireless network 1
Wireless software upgrades
Wireless software upgrades are designed to allow you to manage upgrades of the BlackBerry® Device Software over the
wireless network for the BlackBerry devices in your organization.
You can use the BlackBerry® Enterprise Server to send software upgrade packages to users with BlackBerry devices that
support wireless software upgrades. To receive upgrade requests that you send over the wireless network, or to download,
reject, defer, install, or cancel wireless software upgrades, users are not required to connect their supported BlackBerry
devices to their computers.
Sources of software upgrade requests
Source Description
administrators of the BlackBerry®
Enterprise Server
By default, you can use the BlackBerry Manager to view and send wireless
software upgrade requests to supported BlackBerry devices.
BlackBerry device users If you permit, BlackBerry device users can request wireless software
upgrades or make cancellation requests using their BlackBerry devices.
wireless service providers If you permit, wireless service providers can search for, send, and monitor
wireless software upgrades using the BlackBerry® Provisioning System
administration web site.
Applications that the wireless software upgrade process supports
The wireless software upgrade process supports BlackBerry® Device Software applications that Research In Motion creates.
It does not support upgrading instant messaging applications or other third-party applications on the BlackBerry device.
During the wireless software upgrade process, as in the wired software upgrade process, if the upgrade process is upgrading
third-party applications on the BlackBerry device, the BlackBerry device deletes all data for third-party applications that
are both designed not to use synchronization and designed to use RIM persistent APIs on the BlackBerry device. The upgrade
process does not delete third-party applications from the BlackBerry device.
Administration Guide Upgrading the BlackBerry Device Software over the wireless network
3

Types of software upgrade packages
Software upgrade packages that Research In Motion makes available on the BlackBerry® Infrastructure can introduce new
features and address known software issues on BlackBerry devices.
Type Description
platform update • applies to applications on the BlackBerry device other than
Java® applications (for example, the software for the JVM, the
native support libraries for the JRE, the operating system, and the
wireless transceiver)
• is typically 500 KB or less
• typically requires up to 5 minutes to download over the wireless
network
partial software upgrade • applies to wireless transceiver code
• is typically less than 1 MB
• typically requires up to 15 minutes to download over the wireless
network
complete software upgrade •applies to existing, complete BlackBerry® Device Software on the
BlackBerry device
• is typically more than 1 MB
• typically requires 1 to 2 hours to download over the wireless
network
Approximate duration for downloading and installing wireless software upgrades
The duration of the download and installation process for wireless software upgrades depends on the type of upgrade, size
of the software upgrade package, the wireless network conditions, and the network type.
Administration Guide Upgrading the BlackBerry Device Software over the wireless network
4

Type of upgrade Size of upgrade
package
Duration of
download
Duration of installation for
average amount of
BlackBerry device data (12
MB)
Duration of installation for
large amount of BlackBerry
device data (25 MB)
platform update 500 KB 2 minutes • installing the wireless
software update – 5
minutes
• installing the wireless
software update – 5
minutes
partial software
upgrade
8 MB 15 minutes • backing up the
BlackBerry® device data
– 15 to 30 minutes
• installing the wireless
software upgrade – 30
to 45 minutes
•restoring the BlackBerry
device data – 15 to 30
minutes
• backing up the BlackBerry
device data – 45 minutes
• installing the wireless
software upgrade – 30 to
45 minutes
• restoring the BlackBerry
device data – 45 minutes
complete
software
upgrade
15 MB 30 minutes • backing up the
BlackBerry device data
– 15 to 30 minutes
• installing the wireless
software upgrade – 30
to 45 minutes
•restoring the BlackBerry
device data – 15 to 30
minutes
• backing up the BlackBerry
device data – 45 minutes
• installing the wireless
software upgrade – 30 to
45 minutes
• restoring the BlackBerry
device data – 45 minutes
Features of wireless software upgrades
Administration Guide Upgrading the BlackBerry Device Software over the wireless network
5

Feature Description
approval of software upgrade
packages that are available
Research In Motion and wireless service providers approve software upgrade
packages before RIM makes the software upgrade packages available on the
BlackBerry® Infrastructure.
automated detection of when new
upgrade packages are available
• The BlackBerry® Enterprise Server contacts the BlackBerry Infrastructure
once daily to check for updates to the software upgrade packages.
• The BlackBerry Enterprise Server makes new software packages available
automatically.
•The BlackBerry Manager automatically indicates the BlackBerry devices on
which you can apply the software upgrade.
control of wireless software upgrades If you have the appropriate administrative role and permission on the BlackBerry
Enterprise Server, you can perform the following actions:
• view and send software upgrade requests only to supported BlackBerry
devices to which the software upgrade package applies
•control the software upgrade process by permitting or restricting upgrade
requests to specific sources and to specific network connection types
• send software upgrade requests that users must accept within 72 hours,
after which their BlackBerry devices retrieve and install the software
packages automatically
automated backup and restoral of data
on BlackBerry devices
• The BlackBerry device is designed to back up user data, RIM-provided
standard applications (such as contacts, messages, pictures, and ring
tones), and existing third-party applications automatically during the
software upgrade process.
• The BlackBerry device is designed to restore the backed-up user data and
applications when the software upgrade process completes.
Administration Guide Upgrading the BlackBerry Device Software over the wireless network
6

Architecture: BlackBerry Infrastructure components
Component Description
BlackBerry® Provisioning System administration web site TheBlackBerryProvisioningSystemadministrationwebsite
is the Internet interface of the BlackBerry Provisioning
System. Wireless service providers use the administration
web site to manage subscribers and BlackBerry devices on
their wireless network.
availability server The availability server is designed to manage and store
information about the availability of software upgrade
packages.
The availability server is designed to provide administrators
with information about the latest approved software
upgrade packages and recommended upgrade paths.
Wireless service providers can access this information using
the BlackBerry Provisioning System administration web
site.
upgrade package server The upgrade package server is designed to store and send
software upgrade packages to the BlackBerry device. It
controls the rate at which subscribers can download
software upgrade packages. Research In Motion
administrators upload software upgrade packages to this
server as they are approved.
upgrade detail server The upgrade detail server is designed to provide the
BlackBerry device with a list of the upgrade files that are
needed for a particular wireless software upgrade.
software upgrade database Thesoftwareupgrade databaseisthe primarydatabasethat
contains the software upgrade information and metadata
that the BlackBerry® Infrastructure processes.
Administration Guide Upgrading the BlackBerry Device Software over the wireless network
7

Components
Administration Guide Upgrading the BlackBerry Device Software over the wireless network
8

Protecting wireless software upgrades 2
Measures of security for wired and wireless solutions
Measure Description
confidentiality Only the intended recipient of data or a message can view the data or the contents of the
message.
integrity The recipient can detect if a third party changed the data or the message in transit between
the sender and the recipient.
authenticity The recipient can identify and trust the identity of the sender.
Controlling wireless software upgrades using the BlackBerry Enterprise Server
By default, only the BlackBerry® Enterprise Server can select software upgrade packages that are available, send them to
BlackBerry devices over the wireless network, and request that the BlackBerry device users download the software upgrade
packages. Wireless service providers cannot select software upgrade packages and send them to BlackBerry devices unless
you allow them to using IT policy.
Administrative roles that can control software upgrade requests
The following administrative roles can perform software upgrade tasks and manage the software upgrade process on a
BlackBerry® Enterprise Server:
• security administrator
• enterprise administrator
• device administrator
How the BlackBerry Enterprise Solution authenticates requests for wireless
software upgrades
Request source Description of authentication method
BlackBerry® Enterprise Server The BlackBerry Enterprise Server and the BlackBerry device are designed to
encrypt all of the data sent between them, including data for wireless software
upgrades, using standard BlackBerry encryption.
Administration Guide Protecting wireless software upgrades
9

Request source Description of authentication method
BlackBerry® Infrastructure
BlackBerry® Provisioning System
administration web site
The BlackBerry device is designed to use digital signature validation to
authenticate the following types of data:
• control messages that the BlackBerry device receives from the BlackBerry
Infrastructure or the administration site that requests the wireless software
upgrade
•upgrade instructions that the BlackBerry device requests and receives from
the BlackBerry Infrastructure or the administration site that sends the
wireless software upgrade
Authenticating requests for wireless software upgrades
Before the BlackBerry® Infrastructure sends data about a wireless software upgrade to a BlackBerry device, it performs the
following actions:
• generates an ECDSA key periodically, using ECC over a 521-bit curve
• signs the ECDSA key, using a stored root certificate
• signs the software upgrade data using the digitally signed ECDSA key
When the BlackBerry device receives the data, it performs the following actions:
•decrypts the ECDSA key, using a public key common to all BlackBerry devices that support wireless software upgrades
• verifies the digital signature on the ECDSA key, using a stored root certificate
How the BlackBerry device protects the existing BlackBerry Device Software
During the software upgrade process, security features of the BlackBerry® device components are designed to protect the
BlackBerry® Device Software from an attack by a user with malicious intent. Each time a user turns on the BlackBerry device,
specific components on the BlackBerry device are designed to automatically check the authenticity of the operating system
and the integrity of the BlackBerry Device Software. The BlackBerry Device Software must pass these security tests before
the user can run the applications on the BlackBerry device and before the wireless software upgrades can update the
applications successfully.
Administration Guide Protecting wireless software upgrades
10

How the BlackBerry Enterprise Solution verifies the BlackBerry Device Software
upgrade files
The signing authority system that Research In Motion® provides is designed to authorize and authenticate the code of the
software upgrade package by digitally signing the software upgrade package. After the BlackBerry® device user downloads
a software upgrade package to the BlackBerry device, the BlackBerry device verifies the digital signature on the software
upgrade package before it can install the software upgrade package successfully.
The signing authority system uses code signing to authorize and authenticate the upgraded BlackBerry® Device Software
before the user can run any of the upgraded applications on the BlackBerry device.
Battery power requirements for protecting the BlackBerry device against attack
If the battery power level on a BlackBerry® device drops below the required minimum to perform a wireless software upgrade,
the BlackBerry device prompts the user to recharge the battery and start the software upgrade process again. This security
measure is designed to protect the BlackBerry device against attacks from users with malicious intent who might try to take
advantage of low battery power during a wireless software upgrade.
You can set the Secure Wipe If Low Battery IT policy rule to require that the BlackBerry device delete all user data if the
BlackBerry device has insufficient battery power to receive IT policy updates or IT administration commands.
How a BlackBerry device protects user data during a wireless software upgrade
When the content protection feature on a BlackBerry® device is turned on, the following measures to encrypt user data are
designed to take effect:
• the user must type the BlackBerry device password before the software upgrade process can back up or restore the
user data
• the BlackBerry device encrypts stored user data during the software upgrade process
Protection of user data on locked BlackBerry devices
When the content protection feature on the BlackBerry® device is turned on, the BlackBerry device is designed to protect
user data in the following ways:
• use 256-bit AES encryption to encrypt stored data
• use an ECC public key to encrypt data that the BlackBerry device receives
Administration Guide Protecting wireless software upgrades
11

User data that the BlackBerry device can encrypt when the content protection feature is turned
on
Item Description
AutoText all text that automatically replaces the text that a BlackBerry® device user
types
BlackBerry® Browser •content that web sites or third-party applications push to the BlackBerry
device
• web sites that the user saves on the BlackBerry device
• browser cache
calendar • subject
• location
• meeting organizer
• meeting participants
• notes included in the appointment or meeting invitation
address book contacts all contact information except the contact title and category
For information about using the Force Include Address Book In Content
Protection IT policy rule to prevent users from turning off encryption for the
address book, see the Policy Reference Guide.
message list • subject
• email addresses
• message body
• attachments
memo list • title
• information included in the body of the note
Open Mobile Alliance™ DRM
applications
a key that identifies the BlackBerry device and a key that identifies the SIM
card (if available) that the BlackBerry device adds to DRM forward-locked
applications
RSA SecurID® library the contents of the .sdtid file seed that is stored in flash memory
tasks • subject
• information included in the body of the task
Administration Guide Protecting wireless software upgrades
12

How the BlackBerry Enterprise Solution controls installation of third-party
applications that wireless software upgrades do not support
To send third-party applications to a BlackBerry® device over the wireless network, you must assign a software configuration
to the BlackBerry device user and set an application control policy. The BlackBerry device user can then connect to the
shared application loader tool, and install or upgrade to the third-party applications that you provide.
The application control policy rules for the BlackBerry® Enterprise Server are designed so that you can permit or prevent
the installation of specific third-party applications on the BlackBerry device, and so that you can limit the permissions of
third-party applications on the BlackBerry device. You can assign values for an application control policy rule in the
application control policy.
Administration Guide Protecting wireless software upgrades
13

Administration Guide Requesting wireless software upgrades
14

Requesting wireless software upgrades 3
Process flow: Requesting a wireless software upgrade from a BlackBerry device
1. The BlackBerry® device user requests a wireless software upgrade.
2. The BlackBerry® Enterprise Server sends information about any available software upgrades to the BlackBerry device.
3. The BlackBerry device user selects one or more software upgrade packages.
4. The BlackBerry device connects to the upgrade detail server.
5. The upgrade detail server determines whether the BlackBerry device can perform the wireless software upgrade. If
applicable, the upgrade detail server allows the BlackBerry device to connect to the upgrade package server to retrieve
the software upgrade package.
Severity levels for software upgrade requests
Severity level Description
Mandatory • use to send a software upgrade package that the BlackBerry® device
retrievesand installs automaticallyif the user does not accept the software
upgrade request within 72 hours
•mightfixone or moresoftwareissues that arecriticalto how theBlackBerry
device works
• might include one or more important new BlackBerry device features
Critical • use to send a request that indicates that the user should download and
install the wireless software upgrade immediately
• might include one or more important new BlackBerry device features
• might fix one or more software issues that impact how the BlackBerry
device works
High • use to send a request that indicates that the user should download and
install the wireless software upgrade as soon as possible
• might include one or more important new BlackBerry device features
•might fix one or more software issues that visibly impact BlackBerry device
features but are not critical to how the BlackBerry device works
Medium • use to send a request that indicates that the user should download and
install the wireless software upgrade as soon as it is convenient to do so
Administration Guide Requesting wireless software upgrades
15

Severity level Description
• might include one or more new BlackBerry device features
•might fix one or more software issues that do not visibly impact BlackBerry
device features and are not critical to how the BlackBerry device works
Low •use to send a request that indicates that the user can download and install
the wireless software upgrade when wanted
• might include one or more minor new BlackBerry device features
• might fix one or more minor software issues
Information that a software upgrade request displays
A software upgrade request provides BlackBerry® device users with the following information about the software upgrade
packages that are available:
• software version number
• approximate size of the software upgrade package
• severity level of the software upgrade request, which tells users how soon they should consider upgrading
• description of the software upgrade package
Prerequisites: Requesting wireless software upgrades
• review the BlackBerry® device hardware, software, memory, and battery power requirements for wireless software
upgrades
• understand the BlackBerry device behavior that might occur during the software upgrade process
Minimum requirements for wireless software upgrades
• BlackBerry® Enterprise Server version 4.1 SP5 or later
• Supported BlackBerry device models that run BlackBerry® Device Software version 4.5 or later
Device memory requirements for wireless software upgrades
The BlackBerry® device must have 16 MB of RAM and at least 64 MB of flash memory available to start and successfully
complete a wireless software upgrade.
If the amount of available flash memory on the BlackBerry device decreases to less than 400 KB, the BlackBerry device runs
the LMM automatically, to identify and delete unreferenced and cached data associated with BlackBerry device applications
such as the message list, organizer data, and data for third-party applications.
Administration Guide Requesting wireless software upgrades
16

If the software upgrade process requires more memory, the LMM deletes medium-priority items such as very old email
messages and out-of-date calendar entries.
If the minimum amount of memory required is still not available, the BlackBerry device user must delete items manually.
Battery power requirements for wireless software upgrades
The battery power level on a BlackBerry® device must be 50 percent or higher for the BlackBerry device to retrieve software
upgrade packages over the wireless network. If the battery power level drops below the minimum requirement, the software
upgrade process suspends. The BlackBerry device resumes retrieving the software upgrade package when the battery power
level returns to 50 percent.
Best practice: Preventing possible BlackBerry device issues during the software upgrade process
Possible issue Possible solution
The software upgrade process might not complete if the
user turns off the BlackBerry® device.
Do not turn off the BlackBerry device after the software
upgrade process starts.
The software upgrade process might not complete if the
user removes the expandable memory from the BlackBerry
device.
Do not remove the expandable memory after the software
upgrade process starts.
A user cannot make an emergency call on the BlackBerry
device.
Pause or cancel the current software upgrade process to
make an emergency call on the BlackBerry device.
A user does not receive incoming calls on the BlackBerry
device.
Pause or cancel the current software upgrade process to
receive an incoming call on the BlackBerry device.
The BlackBerry device might have reduced response times
and will require user attention if the content protection
feature is turned on.
Type the password for the BlackBerry device, if the content
protection feature is turned on or if the BlackBerry device
resets after it installs an application.
The BlackBerry device loses all of its user data if the user
starts to upgrade the BlackBerry® Desktop Software.
Do not upgrade the BlackBerry Desktop Software until after
the software upgrade process completes.
Search criteria for BlackBerry devices
BlackBerry device criteria Search method
registered with a specific wireless service provider In the Carrier drop-down list, click the name of a wireless
service provider.
Administration Guide Requesting wireless software upgrades
17

BlackBerry device criteria Search method
a specific BlackBerry® device model In the Device drop-down list, click the model number of a
BlackBerry device.
currently using a specific BlackBerry® Device Software
version
In the From Version drop-down list, click the version
number of a software upgrade package.
can upgrade to a specific BlackBerry Device Software
version
In the To Version drop-down list, click the version number
of a software upgrade package.
status of a previous upgrade or cancellation request In the Upgrade Status drop-down list, click a status.
sequential number of the command for a previously sent
upgrade or cancellation request
In the Sequence drop-down list, click a number.
activated on a specific BlackBerry® Enterprise Server In the Server drop-down list, click a BlackBerry Enterprise
Server.
application of a specific IT policy In the IT Policy drop-down list, click an IT policy name.
How a user can respond to a software upgrade request
Response Description
accept the upgrade request • The BlackBerry® device starts the software download process.
•The user can monitor the progress of the wireless software download on
the BlackBerry device and can continue to use the BlackBerry device,
where permitted by the wireless technology.
• When the software download process completes successfully, the
BlackBerry device prompts the user to install the software upgrade
package.
defer the upgrade request •A prompt appears on the BlackBerry device every 24 hours, to remind the
user to install the software upgrade package.
reject the upgrade request • The upgrade request process is designed to stop.
Send a software upgrade request
Before you begin: You must log in to the BlackBerry® Enterprise Server using the appropriate administrative role and
permission.
Administration Guide Requesting wireless software upgrades
18