Configuring certain BlackBerry Enterprise Server components to use proxy servers............Configure a BlackBerry Enterprise Server component to use a .pac file................ Configure a BlackBerry Enterprise Server component to use a proxy server..............Configure a BlackBerry Enterprise Server component to authenticate to a proxy server on behalf of BlackBerry devices.......................................
Page 4
Configuring multiple BlackBerry Enterprise Server instances to use the same BlackBerry Enterprise Server component....................................Configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry MDS Connection Service ........................................Configure multiple BlackBerry Enterprise Server instances to use the same BlackBerry MDS Integration Service ........................................
Page 5
Map an address book field in the email application to an address book field on all BlackBerry devices....Map an address book field in the email application to an address book field on a specific BlackBerry device..Map address book fields that users defined to address book fields on all BlackBerry devices........
Page 6
Install a BlackBerry MDS Runtime Application on a specific BlackBerry device............Applying an application control policy to a BlackBerry MDS Runtime Application............Add the application launcher file for a BlackBerry MDS Runtime Application to the network drive......Assign an application control policy to a BlackBerry MDS Runtime Application............
Page 7
Add retrieved certificates for web servers........................... Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices.......... Specify the maximum amount of data that the BlackBerry MDS Connection Service can send to BlackBerry devices ........................................Specify the pending content timeout limit for the BlackBerry MDS Connection Service...........
Page 8
Deactivating BlackBerry devices without applied IT policies................... Changing the default behavior of the BlackBerry devices and BlackBerry Desktop Software in your organization ........................................Returning to the original default behavior of BlackBerry devices and the BlackBerry Desktop Software....Creating new IT policy rules to control third-party applications..................
Page 9
Do not deliver messages to a BlackBerry device when no filter rules apply..............107 Forward messages from inbox subfolders to a BlackBerry device................... 108 Turn off synchronization for messages sent from BlackBerry devices that belong to a user group......108 Turn off synchronization for messages sent from a BlackBerry device................108 Turn off message forwarding to user accounts in a user group..................
Page 10
Prevent users from sending specific file types to instant messaging contacts using the BlackBerry Client for IBM Lotus Sametime..................................122 Specifying the maximum size of file types that users can send using the BlackBerry Client for IBM Lotus Sametime ........................................122 Prevent users from sending instant messaging conversations in email messages............
Page 11
Sametime users..................................123 Troubleshooting: Instant messaging............................124 Users cannot view phone numbers for contacts in the BlackBerry Client for IBM Lotus Sametime......125 Optimizing how the BlackBerry Attachment Service converts attachments..............126 Optimize how the BlackBerry Attachment Service converts attachments..............126 BlackBerry Attachment Service optimization settings......................
Page 12
Change how the BlackBerry Controller restarts the BlackBerry Messaging Agent............Change how the BlackBerry Controller restarts the BlackBerry Enterprise Server services........154 Monitoring the BlackBerry MDS Integration Service notification messages..............156 Set up monitoring of the BlackBerry MDS Integration Service notification messages for a BlackBerry device..156...
Page 13
Configure the maximum size for a BlackBerry Enterprise Server component log file..........Change the logging level for a BlackBerry Enterprise Server component..............162 Create a new BlackBerry Enterprise Server component log file when the current log file reaches the maximum size......................................162 Change the identifier for a BlackBerry Enterprise Server component log file..............
Page 14
21 Managing a BlackBerry Domain............................169 Managing multiple BlackBerry Domain instances......................... 169 Connect the BlackBerry Manager to a different BlackBerry Domain................169 Managing CAL keys..................................169 Add or delete a CAL key................................. 169 Copy a license key to a text file............................. 170 22 Glossary....................................
You assign each BlackBerry Enterprise Server administrator to an administrative role. If you already manage your organization using Windows® groups, assign those groups to the administrative roles so that you can manage role membership through the group.
BlackBerry® Enterprise Server administrators are database users who can access the BlackBerry Configuration Database using the BlackBerry Manager. This access is restricted to the administrative roles that the BlackBerry Enterprise Server administrators are assigned to. Only administrators who are assigned to the security administrator role can create other BlackBerry Enterprise Server administrators accounts.
The BlackBerry® Configuration Database uses the most restrictive settings to determine which tasks the BlackBerry Manager displays, so an administrator who is assigned both enterprise and junior help desk roles sees only the tasks for the junior help desk role.
Note: Do not assign more than one administrative role to an administrator. The BlackBerry® Configuration Database uses the most restrictive settings to determine which tasks the BlackBerry Manager displays, so an administrator who is assigned both enterprise and junior help desk roles sees only the tasks for the junior help desk role.
BlackBerry device and the BlackBerry Enterprise Server. This data encryption process occurs automatically and is designed to verify that a message that a user sends from a BlackBerry device, which is outside the organization's firewall, remains protected on the transport layer until the BlackBerry Enterprise Server receives the message.
These technologies also help to maintain the integrity and privacy of the data from the time that a BlackBerry device user sends a message from the BlackBerry device to when the message recipient decrypts and opens the message.
Prerequisites: Protecting data using the PGP Support Package for BlackBerry devices • Set the PGP® Universal Server Address IT policy rule in the IT policy that you assign to BlackBerry® device users. • Instruct the BlackBerry device users to install the PGP® Support Package for BlackBerry® devices on their BlackBerry devices and enroll with the PGP Universal Server so that the BlackBerry devices can process PGP messages.
7.0, by default, BlackBerry devices can decrypt IBM Lotus Notes encrypted messages and S/MIME-encrypted messages. If you are running the BlackBerry Enterprise Server version 4.1 or later for IBM Lotus Domino in an IBM Lotus Domino environment, the BlackBerry Enterprise Server supports using the AES algorithm with the master encryption key of the BlackBerry device to encrypt the Notes ID file and password and store them in the BlackBerry Enterprise Server for IBM Lotus Domino messaging agent memory.
S/MIME-encrypted messages. Each time this occurs subsequently, the BlackBerry devices also increase the period that support is turned off for by 10-minute increments to a maximum of 24 hours. The BlackBerry devices then return the period to the default value of one hour.
BlackBerry MDS Integration Service and the BlackBerry Manager. You can install a self-signed certificate for the BlackBerry MDS Integration Service, or you can get a signed root certificate from a certificate authority and install it in the key store using the Java® keytool. You can replace the self-signed certificate...
HTTPS to communicate with web servers to receive application data and application updates, you must export the certificate for the BlackBerry MDS Integration Service to the web services hosts. This allows BlackBerry MDS Runtime Applications that use web services to authenticate to the web services and access them.
Connection Service and the BlackBerry MDS Integration Service. You cannot use a proxy server to exchange data between these components of the BlackBerry Enterprise Server. If you use a .pac file configuration, you can change the .pac file to allow a direct connection between the BlackBerry MDS Connection Service and the BlackBerry MDS Integration Service.
Collaboration Service to access web servers through a proxy server. You can specify more than one proxy string in a proxy mapping rule for a web address. If the BlackBerry® Enterprise Server component cannot access the web server using the first proxy string, it tries to access the web server using the subsequent proxy strings that you typed, until it accesses the web server successfully.
Page 29
Click a URL. Click Properties. In the User Name field, type the user name that the BlackBerry Enterprise Server component can use to connect to the proxy server that is defined for the web address. In the Password field, type the password for the user name.
On the Global tab, click Service Control & Customization. Click MDS CS to BES Mapping. In the MDS CS to BES Mappings dialog box, in the left pane, click the BlackBerry MDS Connection Service that you have set as the central push server.
Page 32
On the Global tab, click Service Control & Customization. Click IM to BES Mapping. In the IM to BES Mappings dialog box, in the left pane, click the BlackBerry Collaboration Service that you want multiple BlackBerry Enterprise Server instances to use.
Setting up user accounts Adding user accounts to the BlackBerry Enterprise Server When you add a user account to the BlackBerry® Enterprise Server, the messaging environment must meet the following requirements to support user accounts in different locations in your messaging environment:...
Create a user group Create groups of user accounts in the BlackBerry® Domain to apply common configuration properties for the user group or to perform administrative tasks on all user accounts in the user group. User accounts in a user group can be located on different BlackBerry®...
To synchronize organizer data with BlackBerry devices, you configure the IBM® Lotus® Domino® user accounts to provide the BlackBerry® Enterprise Server with access to the organizer data databases that are normally stored on users' computers. Option 1: Create a roaming user profile to support organizer data synchronization You can create roaming user profiles so that users can access their messaging profiles using the email applications on computers in the IBM®...
Administration Guide Synchronizing organizer data items with BlackBerry devices Option 3: Allow users to access their messaging profiles using a browser To provide users with access to many IBM® Lotus Notes® features using a browser on their computers, you can configure users as IBM®...
Making software and applications available on a network drive To make the BlackBerry® Device Software or applications available for users to install on or add to their BlackBerry devices, you must save the BlackBerry Device Software and applications to a network drive and create a software index. You can maintain only one version of software or an application on the network drive at a time.
Extract the .alx and .cod files to the path that you created in step 1. Add the BlackBerry MDS Runtime to a network drive You add the BlackBerry® MDS Runtime to a network drive for users to install on their BlackBerry devices so that they can use BlackBerry MDS Runtime Applications.
Create or update a software index for applications on a network drive Not all software or applications require indexing. If you add BlackBerry® Device Software version 4.0 or later for Java® based BlackBerry devices, it creates the index files automatically. If you change an .alx file for an application that already appears in a software index on your organization's network drive, you must update the software index.
Defining software configurations You must either install all of the application files that you want to install on a specific BlackBerry device model on the BlackBerry® Enterprise Server or on a computer with a shared network drive before you can set an application control policy on a BlackBerry device.
Click OK. Assign a software configuration to a user account In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server. On the Users tab, click the user account that you want to assign the software configuration to.
Click the Software Config Status tab. In the Name field, type the name of the user whose BlackBerry device you want to monitor. If you leave the Name field empty, the search applies to all users in the BlackBerry Domain.
Page 43
This message appears when a BlackBerry device reports a timeout failure while waiting for the application modules. Resend the application to the BlackBerry device. If the second wireless application push is not successful, in the log files that you collected, locate the user account that is experiencing the issue. Trace the installation activity.
Page 44
This message appears when the BlackBerry Policy Service does not receive an acknowledgment message that a BlackBerry device has received application data. Verify that the BlackBerry device is turned on and is located in a wireless coverage area. Resend the application. Device reported a %s error while installing module This message appears when an error occurs in the BlackBerry Policy Service that prevents the application from installing successfully on a BlackBerry device.
BlackBerry Manager If you want to save network bandwidth, or if you want to install the BlackBerry® Device Software or add applications to BlackBerry devices before you distribute the BlackBerry devices to users, you can use the BlackBerry Manager to complete the installation process.
Page 46
To read the Deploying Java Applications document, visit www.blackberry.com/ developers and click the White Papers link. To download the .zip file for the appropriate collaboration client, visit www.blackberry.com/support/downloads. For information about the compatibility of collaboration clients and versions of the BlackBerry Enterprise Server, visit na.blackberry.com/eng/support/downloads/im_server_compatibility.jsp.
BlackBerry devices. Email message filters that you create and apply using the BlackBerry Manager override the email message filters that users create using the BlackBerry® Desktop Manager or their BlackBerry devices. You can specify the order that the email message filters are applied in.
13. To move the email message filter higher or lower in the list, click Move Up or Move Down. The BlackBerry Enterprise Server applies email message filters in the order that they are listed in. Organize the email message filters from the least restrictive to the most restrictive.
13. To move the email message filter higher or lower in the list, click Move Up or Move Down. The BlackBerry® Enterprise Server applies email message filters in the order that they are listed in. Organize the email message filters from the least restrictive to the most restrictive.
13. Click Move Up or Move Down to move the filter higher or lower in the list. The BlackBerry Enterprise Server applies email message filters in the order that they are listed in. Organize the email message filters from the least restrictive to the most restrictive.
PGP message protection that applies to the messages. If a user does not select a message classification, by default, the BlackBerry device applies the first classification in the list. You can change the order that the BlackBerry device lists the classifications in.
After you finish: If you create more than one message classification, order the classifications in the list. By default, if a user does not select a message classification, the BlackBerry device applies the first classification in the list. Create a message classification based on an existing classification Before you begin: Create a message classification.
You can map up to four custom fields that users define in the address books on their computers to their BlackBerry devices. When users request a remote address lookup from the IBM® Lotus Notes® address book, the fields that you configure display...
Click Edit PIM Sync Global Field Mapping. In the Desktop Field column, click a field. In the Device Field column, in the drop-down list, click the address book field for the BlackBerry device that you want to map to the field in the email application.
Map address book fields that users defined to address book fields on a specific BlackBerry device You can map up to four address book fields that users define in the email application to a specific BlackBerry® device. In the BlackBerry Manager, in the left pane, click a BlackBerry® Enterprise Server.
Creating BlackBerry MDS Runtime Applications and sending them to BlackBerry devices To see the documentation for administrators of the BlackBerry® Enterprise Server, visit www.blackberry.com/go/ serverdocs. To see the BlackBerry Mobile Data System Technical Overview and documentation for BlackBerry developer tools, visit www.blackberry.com/developers. Task Actor...
Page 58
Administration Guide Creating BlackBerry MDS Runtime Applications and sending them to BlackBerry devices Task Actor Resource BlackBerry Plug-in for Microsoft Visual Studio Release Notes and Known Issues List Create a BlackBerry MDS Runtime Developer BlackBerry MDS Studio Getting Started Application.
MDS Runtime installed and activated. You can install the BlackBerry MDS Runtime on BlackBerry devices over the wireless network, or you can add it to a network drive and instruct users to install it on their BlackBerry devices using the application loader tool in the BlackBerry®...
Define a BlackBerry MDS Runtime Application as a trusted application A developer in your organization can sign a BlackBerry® MDS Runtime Application with a digital certificate. Add this digital certificate to the BlackBerry MDS Integration Service to define the BlackBerry MDS Runtime Application as a trusted application that can send data to and receive data from application servers or web servers.
Configure whether users can install unsigned BlackBerry MDS Runtime Applications on BlackBerry devices You can configure whether users are allowed to install BlackBerry® MDS Runtime Applications that are not signed with a digital certificate. By default, users are allowed to install unsigned BlackBerry MDS Runtime Applications on their BlackBerry devices.
Assign a BlackBerry MDS Integration Service device policy to a user group Before you begin: Make sure that all of the users in the group are connected to the same BlackBerry® MDS Integration Service. The group must contain at least one user.
Click the BlackBerry MDS Runtime Application that you want to install. Click Next. In the Group size for pushing field, type the number of BlackBerry devices to send the installation request to at the same time. 10. In the Push interval field, type an interval for the BlackBerry MDS Integration Service to send the installation request to BlackBerry devices.
Administration Guide Applying an application control policy to a BlackBerry MDS Runtime Application To display a prompt on the BlackBerry device that allows the user to cancel the installation, clear the Required check box. 12. Click Next. 13. Click Finish.
Indexing applications on a network drive, 37 Assign an application control policy to a BlackBerry MDS Runtime Application Before you begin: Add the application launcher (.cod) file for the BlackBerry® MDS Runtime Application to the network drive. In the BlackBerry Manager, create a software configuration that includes the application launcher file for the BlackBerry MDS Runtime Application.
After you finish: • If you have the BlackBerry MDS Integration Service installed, verify that the central push server appears in the list of BlackBerry MDS Connection Service instances that are available to the BlackBerry MDS Integration Service. You can configure multiple instances of the BlackBerry®...
BlackBerry devices every 30 minutes. The BlackBerry device prompts users only if the connection to the content server persists for more than 30 minutes. In the BlackBerry Manager, in the left pane, click a BlackBerry MDS Connection Service.
Configure the BlackBerry MDS Connection Service to authenticate BlackBerry devices to content servers that use LTPA BlackBerry® devices that are running BlackBerry® Device Software version 3.8 or later manage how they store the HTTP cookies that they use to authenticate to content servers that use LTPA authentication technology. For BlackBerry devices that use previous versions of the BlackBerry Device Software, you must allow the BlackBerry MDS Connection Service to manage HTTP cookie storage on the BlackBerry devices.
Configure the timeout limit for HTTP connections with BlackBerry devices You can specify how long the BlackBerry® MDS Connection Service waits for a BlackBerry device to send data before it closes the HTTP connection to the BlackBerry device. The default timeout limit is 120,000 milliseconds (2 minutes).
Configure the timeout limit for HTTP connections to web servers You can specify how long the BlackBerry® MDS Connection Service waits for a web server to send data before it closes the HTTP connection to the web server. The default timeout limit is 120,000 milliseconds (2 minutes).
Allowing push applications to make trusted connections to the BlackBerry MDS Connection Service You can use the Java® keytool to create a self-signed certificate for the BlackBerry MDS Connection Service, or you can import a signed certificate from a trusted public certificate authority. You can use the Java keytool to export the BlackBerry MDS Connection Service certificate from the key store, and import the certificate to the key stores that the Java push applications use.
Export the BlackBerry MDS Connection Service certificate to make it available to push applications You must export the certificate for the BlackBerry® MDS Connection Service to import it to the key store of a server-side push application. Before you begin: Add a self-signed or publicly signed certificate for the BlackBerry MDS Connection Service to the key store.
Your organization can trust a web server that hosts push applications if the BlackBerry® Enterprise Server stores a certificate for it in the key store. To trust web servers, you can configure BlackBerry devices to use the BlackBerry MDS Connection Service to retrieve certificate information for web servers that host push applications, and use the Java®...
Do not change the default LDAP port parameters unless a port conflict exists with another service on the same computer. If you change the port number or host server information, you must stop and restart the BlackBerry MDS Connection Service to reload this information.
Configuring how the BlackBerry MDS Connection Service connects to BlackBerry devices Add retrieved certificates for web servers You can use the Java® keytool to add a certificate for a web server to the BlackBerry® MDS Connection Service key store. The certificate allows connections to the trusted web server.
Specify the thread pool size of the BlackBerry MDS Connection Service You can specify the maximum number of threads that the BlackBerry® MDS Connection Service can process simultaneously. Before you begin: Verify that your system memory can support the thread pool size that you want to specify.
Specify how often the BlackBerry MDS Connection Service polls for configuration information You can specify how often the BlackBerry® MDS Connection Service polls the BlackBerry Configuration Database for changes to the BlackBerry MDS Connection Service and BlackBerry Collaboration Service administrative settings. The default interval is 5 minutes.
BlackBerry device when it is activated. If you change the BlackBerry Enterprise Server settings to load the headers and body of messages onto a user's BlackBerry device when it is activated, the BlackBerry Enterprise Server can load up to 750 messages from the last 14 days for each user.
Assigning BlackBerry devices to user accounts When you assign a BlackBerry® device to a user account, you associate the BlackBerry device with that user’s email account. To assign BlackBerry devices to user accounts and activate the BlackBerry devices, you can use any of the following methods:...
Page 81
Wireless activation The wireless activation process activates BlackBerry® devices on the BlackBerry® Enterprise Server remotely. Neither you nor the users are required to connect the BlackBerry devices to a computer on your organization's network to complete the activation process. You can use the wireless activation feature to activate a large number of BlackBerry devices remotely. When BlackBerry device users want to activate new or replacement BlackBerry devices on the BlackBerry Enterprise Server over the wireless network, they must notify you.
Page 82
You can customize the character length of the activation password and the type of activation password that you send to users in a BlackBerry® Domain. For example, for the BlackBerry® 7100 Series, you can assign the 7100 Friendly password type to require users to press only one key at a time.
Type the parameters, subject, and message. Click OK. Send an activation password to a user In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server. On the Users tab, click a user account. Click Service Access. Click Set Activation Password.
When users complete the activation process, the BlackBerry® Enterprise Server adds messages and organizer data to the BlackBerry devices through the BlackBerry Router. If a connection to the BlackBerry Router is interrupted, the data transfer continues over the wireless network.
As organizational changes occur, you might need to move an administrator to a different administrative role. In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Role Administration tab, click the role that the administrator is assigned to.
BlackBerry devices of a specific manufacturer or model. You can allow a specific user to override the Enterprise Service Policy so that the user can still connect to the BlackBerry Enterprise Server even if that user's BlackBerry device or BlackBerry enabled device meets criteria that you exclude from the allowed list.
The default settings for IT policy rules reflect the default behavior of BlackBerry devices or the BlackBerry Desktop Software. You can use IT policy rules to change the behavior of supported BlackBerry device types. For more information, see the Policy Reference Guide.
Click Open. Click OK. Assign an IT policy to a group of users In the BlackBerry® Manager, in the left pane, click User Groups List. In the Group Name list, click a group. Click Edit Group Template. Click IT Policy.
BlackBerry Desktop Software over the wireless network. By default, the BlackBerry Enterprise Server is designed to resend the IT policy to the BlackBerry devices of users that are assigned to that IT policy within a short period of time after you update the IT policy.
If you set the Disable Users With Unapplied IT Policy field, by default, the BlackBerry Enterprise Server sends the IT policy to the BlackBerry device every 30 minutes until the device applies the IT policy successfully or the time limit expires. If the time limit expires, the BlackBerry Enterprise Server deactivates the PIN for the BlackBerry device user.
BlackBerry device. When an IT policy rule allows a numneric range, you can select any numerical value within the permitted range. A lock icon next to a field on the BlackBerry device indicates that the IT policy controls the setting and the user cannot change it.
Creating new IT policy rules to control third-party applications You can create new IT policy rules to control the applications that your organization creates for BlackBerry® devices that are running in your enterprise environment. After you create a new IT policy rule, you can add it to and assign a value to it in new or existing IT policy.
Page 94
16. In the Policy Item Settings section, provide a value for the IT policy rule in this IT policy. 17. Click OK. Change or delete IT policy rules for third-party applications In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Edit Properties. Click IT Policy.
When you apply configuration properties to a group, or perform administrative tasks on a group, these settings apply to all user accounts in the group. In the BlackBerry® Manager, in the left pane, click User Groups. On the User Groups List tab, click a group.
Domain. If you move a user account from one BlackBerry Enterprise Server to another, the destination BlackBerry Enterprise Server creates a replica of the user’s BlackBerry state database and sends new service books to the BlackBerry device over the wireless network.
Perform one of the following actions: • To retain the BlackBerry Enterprise Server information in the user’s person document and state database, click • To delete the BlackBerry Enterprise Server information from the user’s person document and state database, click...
Protect a lost BlackBerry device If a user misplaces a BlackBerry® device or a BlackBerry device is stolen, you can protect the data on the BlackBerry device by locking the BlackBerry device or making it unavailable. In the BlackBerry Manager, in the left pane, click a BlackBerry® Enterprise Server.
Protect a lost BlackBerry device that a user might recover If a BlackBerry® device is lost but the user might recover it, you can protect the BlackBerry device by scheduling it to start deleting all user information and application data and become unavailable after a period of time that you specify. You can also specify whether the user can cancel the scheduled command if the user recovers the BlackBerry device.
Reissuing BlackBerry devices to new users Preparing a BlackBerry device for redistribution Before you reissue a BlackBerry® device to a new user, delete application data from the BlackBerry device, and then replace the applications on the BlackBerry device. Choose a method to delete the previous user’s application data from the BlackBerry device and make the BlackBerry device unavailable to that user before assigning the BlackBerry device to a new user.
You can upgrade a BlackBerry® Java Application, the collaboration client, and the BlackBerry® MDS Runtime on BlackBerry devices over the wireless network. The BlackBerry® Enterprise Server might take up to 4 hours to upgrade an application on a BlackBerry device.
Managing software configurations Delete a software configuration from a user account In the BlackBerry® Manager, click a BlackBerry® Enterprise Server. In the Users list, click the user account that you want to delete the software configuration from. Click Device Management.
Click OK. Turn off synchronization of organizer data for a specific user account In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server. On the Users tab, double-click a user account. In the left pane, click PIM Sync.
For each type of organizer data, in the Synchronization type drop-down list, perform one of the following actions: • To synchronize data from the BlackBerry® Enterprise Server to the BlackBerry device only, click Server to Device. • To synchronize data from the BlackBerry device to the BlackBerry Enterprise Server only, click Device to Server.
For each type of organizer data, in the Synchronization type drop-down list, perform one of the following actions: • To synchronize data from the BlackBerry Enterprise Server to the BlackBerry device only, click Server to Device. • To synchronize data from the BlackBerry device to the BlackBerry Enterprise Server only, click Device to Server.
For each type of organizer data, in the Conflict resolution drop-down list, perform one of the following actions: • To specify that the BlackBerry Enterprise Server data overrides the BlackBerry device data, click Server Wins. • To specify that the BlackBerry device data overrides the BlackBerry Enterprise Server data, click Device Wins.
Server. These settings control how the BlackBerry Enterprise Server forwards email messages from users’ email applications to their BlackBerry devices. You can also manage individual user accounts, provide support to users, control the size of the message queue, and control the load on the BlackBerry Messaging Agent to process forwarding requests. By default, email message forwarding is turned on when you add a user account to the BlackBerry Enterprise Server.
Managing message forwarding Forward messages from inbox subfolders to a BlackBerry device You can specify which subfolders in a user's email application the BlackBerry® Enterprise Server can forward messages from. By default, the BlackBerry Enterprise Server forwards messages from the inbox only.
Turn off message forwarding to user accounts in a user group You can temporarily stop the BlackBerry® Enterprise Server from forwarding messages to user accounts that are in a user group (for example, if the members of the user group are out of a wireless coverage area and do not want to receive messages during that time).
The BlackBerry® Enterprise Server supports RTF and HTML-formatted messages on BlackBerry devices that are running BlackBerry® Device Software version 4.5 or later. You can turn off support for rich content and inline images in messages. Users can configure the message settings on their BlackBerry devices. The settings that you define override the settings that users define.
Click OK. Turn off the ability to search for remote email messages from the BlackBerry device You can prevent BlackBerry® device users from searching for email messages that are located on the messaging server from their BlackBerry devices. Before you begin: Wireless email reconciliation must be turned on to use the feature.
In the left pane, click Redirection. In the Auto Signature section, double-click the Signature field. Type the signature that you want to appear in the messages that the users send from their BlackBerry devices. Click OK. Select the Signature check box.
Users cannot change the disclaimers that you define. Add a disclaimer to all messages sent from a user’s BlackBerry device In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server. On the Users tab, double-click a user account.
You can add a disclaimer to all messages that are sent by an individual user that is different from the disclaimer that you added for all users on a BlackBerry® Enterprise Server. You can specify conflict rules for dislaimers to define the order in which the BlackBerry Enterprise Server applies the disclaimers.
When you delete pending messages from the incoming message queue, the BlackBerry® Enterprise Server does not send the messages to the user’s BlackBerry device. The messages still appear in the user’s IBM® Lotus Notes® Inbox. In the BlackBerry Manager, in the left pane, click a BlackBerry Enterprise Server.
Sending notification messages to users You can use the BlackBerry® Manager to send a notification message to an individual user, to all users on a BlackBerry® Enterprise Server, or to all users in the BlackBerry Domain. You can send notifications as email messages or PIN messages.
BlackBerry devices automatically, informing users about an issue with wireless email delivery. Change the subject for automated notification messages You can change the subject for automated notification messages that users receive on their BlackBerry® devices. If you do not create a subject, the BlackBerry® Enterprise Server uses the default subject.
The BlackBerry® Collaboration Service is designed to provide a connection between your organization's instant messaging server and the collaboration client on BlackBerry devices. In certain instant messaging environments, you can use TLS or HTTPS to encrypt the connection between certain instant messaging components.
If users are using the BlackBerry® Client for use with Microsoft® Office Live Communications Server 2005 or the BlackBerry® Client for use with Microsoft® Office Communications Server 2007, you can change the transport protocol that the BlackBerry Collaboration Service uses to connect to the instant messaging server in your organization's environment.
TLS certificate on the Microsoft Office Communicator Web Access server. • HTTP: Use standard HTTP if you do not want the BlackBerry Collaboration Service to encrypt the data that it sends to the Microsoft Office Communicator Web Access Server.
Specify the idle timeout limit for instant messaging sessions If the maximum number of instant messaging sessions that can be open at the same time is reached, the BlackBerry® Collaboration Service closes idle sessions that have exceeded the idle timeout limit.
To control the use of network resources in your organization's environment, you can use the media content management feature to specify the maximum size of specific file types that BlackBerry® device users can send to each other using the BlackBerry® Client for IBM® Lotus® Sametime®. The maximum file size that you specify for a file type must not exceed the maximum file size that is specified on the IBM®...
.txt files in the internal memory of their BlackBerry devices or on an external memory device. You can turn off this feature if you do not want BlackBerry device users to save their instant messaging conversations on their BlackBerry devices.
The IBM Lotus Sametime API cannot retrieve phone numbers for BlackBerry Instant Messaging contacts from the IBM Lotus Sametime server. If the BlackBerry Enterprise Server is located in a network that does not permit direct HTTP connections to the IBM Lotus Sametime server, the BlackBerry Collaboration Service cannot retrieve the phone numbers from the IBM Lotus Sametime server instead of the IBM Lotus Sametime API.
BlackBerry Attachment Service uses. By default, the BlackBerry Attachment Service does not limit the file size of an attachment that is embedded in a message or retrieved using a link. The BlackBerry Enterprise Server sends data to BlackBerry devices over the wireless network in packets that are no larger than 64 KB, and it can send an unlimited number of packets.
Per Process Attachment Service can convert simultaneously in a single conversion process. You can use this setting with the Busy Threshold (s) setting to control thread saturation and to manage the BlackBerry Attachment Service workload. Busy This field specifies the busy threshold at which the BlackBerry...
Change the maximum file size for attachments that users can receive The BlackBerry® Attachment Service uses memory during the attachment conversion process. If users try to open large or complex attachments (for example, .pdf files and ASCII text files that are larger than 2 MB) or multiple attachments at the same time, you might want to limit the file size for attachments.
By default, the BlackBerry Messaging Agent limits the file size of an attachment that it receives from a BlackBerry device to a maximum of 3 MB. If the BlackBerry Messaging Agent receives more than one attachment at a time, it limits the total file size of those attachments to a maximum of 5 MB.
Certain versions of the BlackBerry® Device Software enable users to download attachments in their native formats (for example, .txt for a text file) to their BlackBerry devices. Users can open and make changes to the downloaded files using an appropriate third-party application on their BlackBerry devices. Depending on the file format, a user might be able to open the file using the media application on the BlackBerry device.
The BlackBerry® Attachment Service uses distillers to convert attachments in supported file formats so that users can view the attachments on their BlackBerry devices. By default, all supported distillers are turned on. You can turn off a distiller to prevent users from viewing attachments in a specific file format. For example, if you turn off the .pdf distiller, users cannot view .pdf attachments on their BlackBerry devices.
Click Next. In the Group size for pushing field, type the number of BlackBerry devices that you want to send the upgrade request to simultaneously. In the Push interval (minute) field, type an interval after which the BlackBerry MDS Integration Service sends the upgrade request to BlackBerry devices.
Remove a trusted certificate from the BlackBerry MDS Integration Service If you do not want the BlackBerry® MDS Integration Service to authenticate BlackBerry MDS Runtime Applications that use a specific digital certificate, remove the digital certificate from the BlackBerry MDS Integration Service.
After you finish: If you remove a BlackBerry MDS Runtime Application from the BlackBerry MDS Application Repository, the application still runs on the BlackBerry devices that it is installed on. If you do not want users to use an installed BlackBerry MDS Runtime Application, remove the application from the users’...
BlackBerry MDS Connection Service You can make a local or remote BlackBerry® MDS Connection Service available to a BlackBerry MDS Integration Service in the same BlackBerry Domain. You can make multiple instances of the BlackBerry MDS Connection Service available to the same BlackBerry MDS Integration Service.
You can make a BlackBerry® MDS Connection Service available to any BlackBerry MDS Integration Service in the same BlackBerry Domain. Before you begin: The BlackBerry MDS Connection Service that you specify must have a fully qualified domain name or IP address. The BlackBerry MDS Connection Service cannot use localhost or 127.0.0.1.
Create a pull rule In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Edit Properties. In the left pane, click Access Control.
Restricting user access to media content in the BlackBerry Browser You can use standard definitions for MIME media types to restrict the media types that the BlackBerry® MDS Connection Service can send to the BlackBerry® Browser and other applications on users' BlackBerry devices.
You can configure the BlackBerry® MDS Connection Service to prevent users from accessing every format of a media type (for example, video), or a specific format of a media type (for example, .mp3), through the BlackBerry® Browser and other applications on the BlackBerry device.
Create a push rule. • Assign push initiators to the push rule. In the BlackBerry® Manager, in the left pane, click a user group. On the Group Configuration tab, click Edit Group Template. In the left pane, click Access Control.
Encrypt push requests that push applications send to BlackBerry devices You can configure the BlackBerry® MDS Connection Service to use SSL or TLS to encrypt the push requests that server-side push applications send to BlackBerry devices. By default, the BlackBerry MDS Connection Service does not encrypt the push requests that server-side push applications send.
In the left pane, click Connection Service Details. Double-click URL. Type the full web address or domain name and port number of the BlackBerry MDS Connection Service that is associated with the push initiator. In the Push Initiator drop-down list, click the push initiator that you want to associate with the BlackBerry MDS Integration Service.
Type the maximum number of push requests that you want the BlackBerry Configuration Database to store. Double-click Maximum Push Message Age. Type the maximum length of time, in minutes, that you want the BlackBerry Configuration Database to store a push request before the BlackBerry® Enterprise Server deletes it from the BlackBerry Configuration Database.
The BlackBerry® MDS Connection Service queues push connections when the number of connections exceeds a limit that you specify. You can configure the maximum number of push connections that the BlackBerry MDS Connection Service can queue. The BlackBerry MDS Connection Service sends a "service unavailable" message to BlackBerry devices for pending push connections that exceed this limit.
The BlackBerry® Controller detects when activity stops and restarts the appropriate BlackBerry® Enterprise Server services, which enables the BlackBerry Enterprise Server to continue to run in the event of nonresponsive threads or inactive services. The BlackBerry Controller monitors the IBM® Lotus® Domino® server that is installed on the BlackBerry Enterprise Server (as either a service or an application) and the following BlackBerry Enterprise Server components: •...
Page 154
Administration Guide Changing how the BlackBerry Controller monitors the BlackBerry Enterprise Server components and restarts services Perform any of the following tasks: Task Steps Change how the BlackBerry Double-click RestartOnCrash. Controller restarts the BlackBerry In the Value data field, type 0.
Page 155
Administration Guide Changing how the BlackBerry Controller monitors the BlackBerry Enterprise Server components and restarts services Task Steps and the BlackBerry Controller should The default value is 0. assume the BlackBerry Messaging Agent has stopped responding. Prevent the BlackBerry Controller...
Change how the BlackBerry Controller restarts the BlackBerry Enterprise Server services By default, the BlackBerry® Controller restarts the BlackBerry® Enterprise Server services if they stop responding. On the computer that hosts the BlackBerry Enterprise Server component that you want to change, open the Registry Editor.
Page 157
Administration Guide Changing how the BlackBerry Controller monitors the BlackBerry Enterprise Server components and restarts services Task Steps Prevent the BlackBerry Dispatcher Create a DWORD value that is named RestartDispatcherOnCrash. from restarting if it stops responding. Double-click the new DWORD value.
BlackBerry® MDS Runtime Applications generate. An excessive number of messages from a specific BlackBerry MDS Runtime Application or messages of a specific type might indicate that a problem exists with a BlackBerry device, a BlackBerry MDS Runtime Application, or the web services.
In the BlackBerry Manager, in the left pane, click a BlackBerry MDS Integration Service. Click Monitor Messages. On the Monitor Messages tab, in the Device field, type the PIN of the BlackBerry device that you want to view notification messages for.
By default, the log files are stored in the root directory that is defined in the BlackBerry® Configuration Database. You can choose to store the log files in a location that is different from where the BlackBerry® Enterprise Server component log files are stored.
You use the log files for SMS text messages to monitor the time and the frequency at which users send SMS text messages from their BlackBerry® devices. By default, the logging of SMS text messages is turned off. The log files are named using the format SMSLog_yyyymmdd.
Turn off call logging You use the call log files to monitor the time and frequency at which users make calls from their BlackBerry® devices. By default, the logging of calls is turned on. The log files are named using the format PhoneCallLog_<yyyymmdd>.csv.
Windows® Services, restart the BlackBerry Enterprise Server services. Store all of the BlackBerry Enterprise Server component log files in one folder You can store all of the BlackBerry® Enterprise Server component log files in one folder instead of organizing the folders by date.
• 4: Debug: This level logs additional information to the log files that can help you troubleshoot the BlackBerry Enterprise Server environment. • 5: Verbose: This level logs all events that are associated with a BlackBerry Enterprise Server component to the log files.
Services, restart the appropriate BlackBerry Enterprise Server services. Change the identifier for a BlackBerry Enterprise Server component log file On the computer that hosts the BlackBerry® Manager, on the taskbar, click Start > Programs > BlackBerry Enterprise Server > BlackBerry Server Configuration.
• 2: Warning: This level logs warning messages to the log files. • 3: Information: This level logs daily activities to the log files. • 4: Debug: This level logs additional information to the log files that can help you troubleshoot the BlackBerry MDS Connection Service.
Change the port number that the BlackBerry MDS Connection Service connects to when sending UDP log file messages The SNMP agent for the BlackBerry® Enterprise Server receives UDP log file messages on the same port number that the BlackBerry MDS Integration Service connects to when sending UDP log messages.
Change which BlackBerry MDS Connection Service activities are written to the log file Change the logging level for the TCP log file In the BlackBerry® Manager, in the left pane, click a BlackBerry MDS Connection Service. On the Connection Service tab, click Edit Properties.
Page 169
Administration Guide Change which BlackBerry MDS Connection Service activities are written to the log file On the Connection Service tab, click Edit Properties. In the left pane, click Logs. Perform any of the following tasks: Task Steps Monitor activity at the SRP network layer.
Click OK. Change which BlackBerry Collaboration Service activities are written to the log file In the BlackBerry® Manager, in the left pane, click a BlackBerry Collaboration Service. On the Collaboration Service tab, click Edit Properties. In the left pane, click Logs.
Managing CAL keys CAL keys control how many user accounts can exist on a BlackBerry® Enterprise Server at the same time. When you exceed the number of licensed user accounts, the BlackBerry Manager informs you that you require more CAL keys.
• To delete a CAL key, right-click the license key that you want to delete. Click Remove License Key. Click Close. Copy a license key to a text file In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Account. Click License Management.
A BlackBerry Domain consists of the BlackBerry Configuration Database with its users and any BlackBerry® Enterprise Server instances that connect to it. BlackBerry MDS BlackBerry® Mobile Data System A client access license (CAL) limits how many users you can add to the BlackBerry® Enterprise Server. CMIME Compressed Multipurpose Internet Mail Extensions certificate revocation list...
Page 174
Gateways and routing components use this information to identify the type and source of the BlackBerry device data, and the appropriate destination service to route the data to.
Page 175
Administration Guide Glossary personal information management personal identification number S/MIME Secure Multipurpose Internet Mail Extensions Short Message Service SNMP Simple Network Management Protocol Server Routing Protocol Secure Sockets Layer Transmission Control Protocol Transport Layer Security Triple DES Triple Data Encryption Standard User Datagram Protocol...
Page 178
Administration Guide Legal notice PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.
Page 179
WARRANTIES PROVIDED BY RIM FOR PORTIONS OF ANY RIM PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION. Certain features outlined in this documentation require a minimum version of BlackBerry® Enterprise Server Software, BlackBerry® Desktop Software, and/or BlackBerry® Device Software and may require additional development or Third Party Products and Services for access to corporate applications.
Need help?
Do you have a question about the ENTERPRISE SERVER FOR IBM LOTUS DOMINO and is the answer not in the manual?
Questions and answers