Blackbe;rry PRD-10459-035 - Enterprise Server For MDS Instruction Manual

BlackBerry Enterprise Server for MDS Applications
Version: 4.1 | Service Pack: 7
Administration Guide

Published: 2010-01-11
SWD-966846-0111050411-001

Contents
1 Creating administrator accounts.............................................................................................................................................. 9
Administrative roles........................................................................................................................................................................ 9
Creating a BlackBerry Enterprise Server administrator in a Microsoft SQL Server environment......................................... 10
Assign an administrative role to a new or existing Microsoft SQL Server database account....................................... 10
Configure the BlackBerry Manager to use database authentication in a Microsoft SQL Server environment................... 11
2 Configuring security options..................................................................................................................................................... 12
How the BlackBerry Enterprise Solution encrypts data on the transport layer....................................................................... 12
Symmetric key encryption algorithms that the BlackBerry Enterprise Solution uses.................................................... 12
Change the encryption type.................................................................................................................................................. 12
Generating organization-specific encryption keys for PIN message encryption.................................................................... 13
Generate a new peer-to-peer encryption key..................................................................................................................... 13
Authenticating the BlackBerry MDS Integration Service to the BlackBerry Manager and web services............................ 13
Allow the BlackBerry MDS Integration Service to communicate with the BlackBerry Manager.................................. 14
Allow client authentication between the BlackBerry MDS Integration Service and web services............................... 14
3 Setting up proxy servers for BlackBerry Enterprise Server components............................................................................ 16
Configuring certain BlackBerry Enterprise Server components to use proxy servers............................................................ 16
Configure a BlackBerry Enterprise Server component to use a .pac file......................................................................... 16
Configure a BlackBerry Enterprise Server component to use a proxy server.................................................................. 17
Configure a BlackBerry Enterprise Server component to authenticate to a proxy server on behalf of BlackBerry
devices..................................................................................................................................................................................... 17
4 Sharing BlackBerry Enterprise Server components............................................................................................................... 19
Configuring multiple BlackBerry Enterprise Server instances to use the same BlackBerry Enterprise Server component
........................................................................................................................................................................................................... 19
Configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry MDS Connection Service
.................................................................................................................................................................................................. 19
Configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry MDS Integration Service
.................................................................................................................................................................................................. 20
5 Configuring user accounts......................................................................................................................................................... 21
Adding user accounts to the BlackBerry Enterprise Server....................................................................................................... 21
Add user accounts to the BlackBerry Enterprise Server.................................................................................................... 21
Creating user groups...................................................................................................................................................................... 21

Create a user group................................................................................................................................................................ 21
Add a user account to a user group..................................................................................................................................... 22
6 Sending software and BlackBerry Java Applications to BlackBerry devices...................................................................... 23
Making BlackBerry Device Software and Java applications available to users....................................................................... 23
Making software and applications available on a network drive.............................................................................................. 23
Install the BlackBerry Device Software on a network drive.............................................................................................. 23
Add a Java application to a network drive........................................................................................................................... 24
Add the BlackBerry MDS Runtime to a network drive....................................................................................................... 24
Indexing applications on a network drive.................................................................................................................................... 24
Create or update a software index for applications on a network drive.......................................................................... 24
Share a network drive for applications................................................................................................................................ 25
Defining software configurations.................................................................................................................................................. 25
Create a software configuration........................................................................................................................................... 25
Define an application control policy.................................................................................................................................... 26
Assign an application control policy to an application...................................................................................................... 26
Assign a software configuration to a user group................................................................................................................ 27
Assign a software configuration to a user account............................................................................................................ 27
Send an application to a BlackBerry device over the wireless network................................................................................... 27
Monitor wireless application push failures.................................................................................................................................. 28
Error messages: Wireless application push......................................................................................................................... 28
Install the BlackBerry Device Software or BlackBerry Applications on a BlackBerry device using the BlackBerry Manager
........................................................................................................................................................................................................... 30
7 Making BlackBerry MDS Runtime Applications available to users..................................................................................... 32
Creating BlackBerry MDS Runtime Applications and sending them to BlackBerry devices................................................. 32
Preparing BlackBerry devices to install BlackBerry MDS Runtime Applications.................................................................... 34
Configuring access to web services and managing signed and unsigned applications........................................................ 35
Allow BlackBerry MDS Runtime Applications to access web services using HTTPS...................................................... 35
Define a BlackBerry MDS Runtime Application as a trusted application........................................................................ 35
Configure whether users can install unsigned BlackBerry MDS Runtime Applications on BlackBerry devices......... 36
Configuring how users access and use BlackBerry MDS Runtime Applications..................................................................... 36
Create a BlackBerry MDS Integration Service device policy............................................................................................. 36
Assign a BlackBerry MDS Integration Service device policy to a user group................................................................. 37
Assign a BlackBerry MDS Integration Service device policy to a specific user.............................................................. 37
Sending BlackBerry MDS Runtime Applications and BlackBerry Browser Applications to BlackBerry devices.................. 38

Install a BlackBerry MDS Runtime Application on BlackBerry devices........................................................................... 38
Install a BlackBerry MDS Runtime Application on a specific BlackBerry device............................................................ 38
Applying an application control policy to a BlackBerry MDS Runtime Application............................................................... 39
Add the application launcher file for a BlackBerry MDS Runtime Application to the network drive.......................... 39
Assign an application control policy to a BlackBerry MDS Runtime Application........................................................... 40
8 Configuring how users access enterprise applications and web content.......................................................................... 42
Specifying a BlackBerry MDS Connection Service as the central push server........................................................................ 42
Specify the central push server............................................................................................................................................. 42
Configuring how BlackBerry devices authenticate to content servers..................................................................................... 42
Configure how BlackBerry devices authenticate to content servers................................................................................ 43
Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use
NTLM........................................................................................................................................................................................ 43
Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use
Kerberos................................................................................................................................................................................... 44
Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use
LTPA......................................................................................................................................................................................... 44
Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to the RSA Authentication
Manager.................................................................................................................................................................................. 44
Configuring how the BlackBerry MDS Connection Service manages requests for web content.......................................... 45
Configure the BlackBerry MDS Connection Service to manage HTTP cookie storage.................................................. 45
Configure the timeout limit for HTTP connections with BlackBerry devices.................................................................. 46
Configure the timeout limit for HTTP connections to web servers................................................................................... 46
Configure the maximum number of times that the BlackBerry Browser accepts HTTP redirections........................... 46
Permitting push applications to make trusted connections to a BlackBerry MDS Connection Service............................... 47
Create a key store to store certificates for use with HTTPS connections........................................................................ 47
Add a certificate for the BlackBerry MDS Connection Service......................................................................................... 47
Export the BlackBerry MDS Connection Service certificate to make it available to push applications....................... 48
Import the BlackBerry MDS Connection Service certificate to the key store of a push application............................ 48
Configuring a BlackBerry MDS Connection Service to trust web servers................................................................................ 49
Allow BlackBerry devices to connect to untrusted web servers........................................................................................ 49
Configure the BlackBerry MDS Connection Service to retrieve certificates for web servers........................................ 49
Configure the BlackBerry MDS Connection Service to retrieve the status of certificates for web servers................. 50
Add a retrieved certificate for a web server to the key store............................................................................................ 51
Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices................................................ 51

Specify the maximum amount of data that the BlackBerry MDS Connection Service can send to BlackBerry devices
.................................................................................................................................................................................................. 51
Specify the pending content timeout limit for the BlackBerry MDS Connection Service............................................. 51
Allow Java applications to use persistent socket connections with the BlackBerry MDS Connection Service........... 52
Specify the thread pool size of the BlackBerry MDS Connection Service....................................................................... 52
Specify the maximum number of persistent socket connections..................................................................................... 52
Specify the port number that the web server listens on for push application requests................................................ 53
Specify how often the BlackBerry MDS Connection Service polls for configuration information................................ 53
9 Assigning BlackBerry devices to users..................................................................................................................................... 54
Assigning BlackBerry devices to user accounts.......................................................................................................................... 54
Option 1: Activate a BlackBerry device using the BlackBerry Manager........................................................................... 54
Option 2: Activating BlackBerry devices over the wireless network................................................................................ 54
10 Managing administrator accounts............................................................................................................................................ 57
Assign a BlackBerry Enterprise Server administrator to a different administrative role........................................................ 57
Delete an administrator account from a BlackBerry Enterprise Server.................................................................................... 57
11 Controlling the BlackBerry Enterprise Solution...................................................................................................................... 58
Controlling BlackBerry device access to the BlackBerry Enterprise Server............................................................................. 58
Turn on the Enterprise Service Policy.................................................................................................................................. 58
Permit a user to override the Enterprise Service Policy..................................................................................................... 59
Controlling BlackBerry device behavior using IT policies.......................................................................................................... 59
Create an IT policy.................................................................................................................................................................. 59
Assign an IT policy to a group of users................................................................................................................................ 60
Assign an IT policy to a user account................................................................................................................................... 61
Enforcing IT policy changes over the wireless network..................................................................................................... 61
Deactivating BlackBerry devices without applied IT policies............................................................................................ 62
Changing the default behavior of BlackBerry devices and the BlackBerry Desktop Software..................................... 63
Returning to the default behavior of BlackBerry devices and the BlackBerry Desktop Software................................ 64
Creating new IT policy rules to control third-party applications...................................................................................... 64
12 Managing user accounts............................................................................................................................................................ 66
Managing user groups................................................................................................................................................................... 66
Change the properties of a user group................................................................................................................................ 66
Rename a user group............................................................................................................................................................. 66

Delete a user group................................................................................................................................................................ 67
Managing user accounts................................................................................................................................................................ 67
Move a user account to a different user group................................................................................................................... 67
Move a user account out of a user group............................................................................................................................ 67
Move a user account from one BlackBerry Enterprise Server to another........................................................................ 68
Delete a user account from the BlackBerry Enterprise Server.......................................................................................... 68
13 Protecting and reassigning BlackBerry devices..................................................................................................................... 69
Protecting lost, stolen, or replaced BlackBerry devices.............................................................................................................. 69
Protect a lost BlackBerry device........................................................................................................................................... 69
Protect a lost BlackBerry device that a user might recover.............................................................................................. 70
Protect a stolen BlackBerry device....................................................................................................................................... 70
Reissuing BlackBerry devices to new users................................................................................................................................. 70
Preparing a BlackBerry device for redistribution................................................................................................................ 71
14 Managing the delivery of BlackBerry Java Applications, BlackBerry Device Software, and device settings to
BlackBerry devices...................................................................................................................................................................... 72
Managing BlackBerry Java Applications on BlackBerry devices............................................................................................... 72
Upgrade an application on a BlackBerry device over the wireless network................................................................... 72
Remove applications from BlackBerry devices over the wireless network...................................................................... 72
Change an application control policy.................................................................................................................................. 72
Managing software configurations............................................................................................................................................... 73
Delete a software configuration from a user account........................................................................................................ 73
Create a software configuration based on an existing software configuration.............................................................. 73
15 Managing attachment support.................................................................................................................................................. 74
Changing how a BlackBerry Attachment Service converts attachments................................................................................. 74
Optimize how the BlackBerry Attachment Service converts attachments...................................................................... 74
BlackBerry Attachment Service optimization settings....................................................................................................... 75
Change the maximum file size for attachments that users can receive.......................................................................... 76
Suggested file sizes for attachments................................................................................................................................... 76
Change the maximum dimensions for image attachments that users can view............................................................ 76
Changing how the BlackBerry Messaging Agent reconciles attachments to the messaging server................................... 77
Change the maximum file size for attachments that users can send.............................................................................. 77
Prevent users from sending large attachments.................................................................................................................. 78
Change the maximum file size of attachments that users can download....................................................................... 78

Turn off support for an attachment file format........................................................................................................................... 78
Add support for additional attachment file formats................................................................................................................... 79
16 Managing BlackBerry MDS Runtime Applications and BlackBerry Browser Applications.............................................. 80
Upgrade a BlackBerry MDS Runtime Application on BlackBerry devices............................................................................... 80
Remove a trusted certificate from the BlackBerry MDS Integration Service........................................................................... 81
Making installed BlackBerry MDS Runtime Applications unavailable on BlackBerry devices.............................................. 81
Make an installed BlackBerry MDS Runtime Application unavailable on BlackBerry devices..................................... 81
Make an installed BlackBerry MDS Runtime Application available on BlackBerry devices again............................... 81
Removing BlackBerry MDS Runtime Applications and BlackBerry Browser Applications..................................................... 82
Make a BlackBerry MDS Runtime Application unavailable for installation.................................................................... 82
Remove an installed BlackBerry MDS Runtime Application from BlackBerry devices.................................................. 82
Remove an installed BlackBerry MDS Runtime Application from a specific BlackBerry device................................... 83
ConfiguringanewconnectionbetweenaBlackBerryMDSIntegrationServiceandaBlackBerryMDSConnectionService
........................................................................................................................................................................................................... 83
Make a BlackBerry MDS Connection Service available to a BlackBerry MDS Integration Service.............................. 84
Make a BlackBerry MDS Connection Service unavailable to a BlackBerry MDS Integration Service.......................... 84
17 Managing how users access enterprise applications and web content.............................................................................. 85
Restricting user access to content on web servers..................................................................................................................... 85
Restrict requests for content on web servers from BlackBerry devices........................................................................... 85
Specify web address patterns............................................................................................................................................... 85
Create a pull rule.................................................................................................................................................................... 86
Restrict or allow web address patterns using a pull rule................................................................................................... 86
Assign a pull rule to a user group......................................................................................................................................... 87
Assign a pull rule to a specific user...................................................................................................................................... 87
Restricting user access to media content in the BlackBerry Browser...................................................................................... 87
Prevent users from accessing specific media types........................................................................................................... 88
Configure a maximum file size for media types.................................................................................................................. 88
Restricting the push application content that users can receive.............................................................................................. 88
Restrict push applications from sending data to BlackBerry devices.............................................................................. 89
Create push initiators for push applications....................................................................................................................... 89
Turn on push authorization................................................................................................................................................... 90
Create a push rule.................................................................................................................................................................. 90
Assign push initiators to a push rule.................................................................................................................................... 91
Assign a push rule to a user group....................................................................................................................................... 91

Assign a push rule to a specific user.................................................................................................................................... 91
Encrypt push requests that push applications send to BlackBerry devices.................................................................... 92
Associate a push initiator with the BlackBerry MDS Integration Service........................................................................ 92
Managing push application requests........................................................................................................................................... 93
Specify device ports for application-reliable push requests............................................................................................. 93
Store push application requests in the BlackBerry Configuration Database.................................................................. 94
Configure the settings for storing push requests in the BlackBerry Configuration Database...................................... 94
Configure the maximum number of active connections that the BlackBerry MDS Connection Service can process
.................................................................................................................................................................................................. 94
Configure the maximum number of queued connections that the BlackBerry MDS Connection Service can process
.................................................................................................................................................................................................. 95
Delete requests from the push request queue manually................................................................................................... 95
18 Monitoring a BlackBerry Domain.............................................................................................................................................. 96
How the BlackBerry Controller monitors the BlackBerry Enterprise Server components...................................................... 96
Changing how the BlackBerry Controller monitors the BlackBerry Enterprise Server components and restarts services
........................................................................................................................................................................................................... 96
Change how the BlackBerry Controller restarts the BlackBerry Messaging Agent....................................................... 96
Change how the BlackBerry Controller restarts the BlackBerry Enterprise Server services......................................... 99
Monitoring the BlackBerry MDS Integration Service notification messages.......................................................................... 100
Set up monitoring of the BlackBerry MDS Integration Service notification messages for a BlackBerry device......... 100
Monitor the BlackBerry MDS Integration Service notification messages for a BlackBerry device............................... 101
Filter the BlackBerry MDS Integration Service notification messages by date and time.............................................. 101
Block notification messages from a web services host...................................................................................................... 101
Remove all notification messages for the BlackBerry MDS Integration Service............................................................ 102
Monitoring PIN messages, SMS text messages, and calls......................................................................................................... 102
Change the default location for the PIN message, SMS text message, and phone log files........................................ 102
Monitor PIN messages........................................................................................................................................................... 102
Monitor SMS text messages.................................................................................................................................................. 103
Turn off call logging............................................................................................................................................................... 104
Log files for the BlackBerry Enterprise Server components....................................................................................................... 104
Changing where the BlackBerry Enterprise Server components write log files...................................................................... 104
Change the location where the BlackBerry Enterprise Server components write log files........................................... 104
Store all of the BlackBerry Enterprise Server component log files in one folder............................................................ 105
Changing how the BlackBerry Enterprise Server components create log files....................................................................... 105

Add a prefix to the file names of all the BlackBerry Enterprise Server component log files......................................... 105
Configure the maximum size for a BlackBerry Enterprise Server component log file................................................... 105
Change the logging level for a BlackBerry Enterprise Server component...................................................................... 106
Create a new BlackBerry Enterprise Server component log file when the current log file reaches the maximum size
.................................................................................................................................................................................................. 106
Change the identifier for a BlackBerry Enterprise Server component log file................................................................ 107
Prevent a BlackBerry Enterprise Server component from creating a daily log file......................................................... 107
Configure when to delete BlackBerry Enterprise Server component log files................................................................ 107
Changing how the BlackBerry MDS Connection Service creates a log file............................................................................. 108
Change the logging level for the BlackBerry MDS Connection Service.......................................................................... 108
Change the location where the BlackBerry MDS Connection Service writes log files.................................................. 108
Change the interval at which the BlackBerry MDS Connection Service writes information to the log file................ 109
Change the logging level for the UDP log file.................................................................................................................... 109
Change the port number that the BlackBerry MDS Connection Service connects to when sending UDP log file
messages................................................................................................................................................................................. 109
Change the logging level for the TCP log file..................................................................................................................... 110
Change the port number that the BlackBerry MDS Connection Service connects to when sending TCP log file
messages................................................................................................................................................................................. 110
Change the logging level for the Event log file.................................................................................................................. 110
Change which BlackBerry MDS Connection Service activities are written to the log file..................................................... 111
19 Managing a BlackBerry Domain............................................................................................................................................... 113
Managing multiple BlackBerry Domain instances...................................................................................................................... 113
Connect the BlackBerry Manager to a different BlackBerry Domain.............................................................................. 113
Managing CAL keys........................................................................................................................................................................ 113
Add or delete a CAL key........................................................................................................................................................ 114
Copy a license key to a text file............................................................................................................................................ 114
20 Glossary......................................................................................................................................................................................... 115
21 Legal notice.................................................................................................................................................................................. 118