Change how to load existing email messages on to BlackBerry devices................Options for assigning a BlackBerry device to a user account....................Assign a BlackBerry device to a user account using the BlackBerry Manager..............Assigning a BlackBerry device to a user over the wireless network..................
Page 4
Map user-defined address book fields to address book fields on all BlackBerry devices..........Map an address book field in the email application to an address book field on a specific BlackBerry device..Map user-defined address book fields to address book fields on a specific BlackBerry device.........
Page 5
Preconfigured IT policies in the BlackBerry Professional Software..................Enforcing IT policy changes over the wireless network......................Changing the default behavior of BlackBerry devices and the BlackBerry Desktop Software in your organization ........................................Reverting to the default behavior of BlackBerry devices and BlackBerry Desktop Software..........
Page 6
Configure the BlackBerry MDS Connection Service to authenticate on behalf of BlackBerry devices with content servers that use LTPA................................Configure the BlackBerry MDS Connection Service to authenticate on behalf of BlackBerry devices with the RSA Authentication Manager................................ Allowing push applications on external web servers to make trusted connections to the BlackBerry MDS Connection Service......................................
Page 7
Assign a software configuration to a user account......................Send an application to a BlackBerry device over the wireless network................Load the BlackBerry Device Software or applications on to a BlackBerry device using the BlackBerry Manager..Managing applications on BlackBerry devices........................
Page 8
Add a CAL key....................................Copy a CAL key to a text file..............................Remove a CAL key..................................11 Removing the BlackBerry Professional Software from the host server..............Remove the BlackBerry Professional Software from the host server.................. Remove the registry entries from the host server........................
Managing user accounts Add a user account You must set up user accounts on your messaging server before you set up user accounts in the BlackBerry® Professional Software. When you create a user account, you can assign an IT policy to control settings for the account. You can select one of the preconfigured IT policies, or create your own and select it.
Remove a user account from the BlackBerry Professional Software When you remove a user account from the BlackBerry® Professional Software, you can retain the BlackBerry configuration and permissions information in the user's mailbox so that you can add the user account again at a later time.
By default, the BlackBerry® Professional Software loads up to 200 message headers from the previous 5 days on to BlackBerry devices. If you set the BlackBerry Professional Software to load both the email message body and message headers on to a BlackBerry device, the BlackBerry Professional Software can load up to 750 email messages from the previous 14 days for a user.
Assign a BlackBerry device to a user account using the BlackBerry Manager You can use this method if you want to assign a BlackBerry® device to a user account and control the activation of the BlackBerry device before distributing it to the user.
Assign a BlackBerry device to a user using the BlackBerry Desktop Manager When the BlackBerry® Desktop Manager is installed on a user's computer, the user can control the initial activation of a BlackBerry device. During the activation process, the BlackBerry Desktop Manager prompts the user to associate the BlackBerry device with the user's account on the messaging server and to generate an encryption key.
Protect a lost BlackBerry device If a user misplaces a BlackBerry® device, you can help protect the data on the BlackBerry device by issuing commands to lock the BlackBerry device or to make it unavailable. In the BlackBerry Manager, click the Users tab.
Prepare an existing BlackBerry device for distribution to a new user To prepare an existing BlackBerry® device for distribution to a new user, delete the previous user’s application data from the BlackBerry device and add or remove applications. To remove all applications and data from the BlackBerry device, return the BlackBerry device to its factory default state.
Page 16
Administration Guide Protecting lost or stolen BlackBerry devices On the Device Software Configuration screen, clear the check boxes beside the applications that you want to remove. Select the check boxes beside the applications that you want to install. Complete the application loader wizard.
• To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software only, click Device to Server. • To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software and from the BlackBerry Professional Software to the BlackBerry device, click Bidirectional.
• To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software only, click Device to Server. • To synchronize address book data from the BlackBerry device to the BlackBerry Professional Software and from the BlackBerry Professional Software to the BlackBerry device, click Bidirectional.
In the left pane, click Global PIM Sync. In the Tasks section, in the Synchronization Type drop-down list, click one of the following synchronization options: • To synchronize task data from the BlackBerry® Professional Software to the BlackBerry device only, click Server to Device.
Administration Guide Customizing memo synchronization • To synchronize task data from the BlackBerry® Professional Software to the BlackBerry device only, click Server to Device. • To synchronize task data from the BlackBerry device to the BlackBerry Professional Software only, click Device to Server.
In the left pane, click PIM Sync. In the Memos section, in the Synchronization Type drop-down list, click one of the following synchronization options: • To synchronize memo data from the BlackBerry® Professional Software to the BlackBerry device only, click Server to Device.
In the Message Filters section, in the Synchronization Type drop-down list, accept the Bidirectional option. In the Conflict Resolution drop-down list, click one of the following conflict resolution options: • To specify that the BlackBerry® Professional Software information overrules the BlackBerry device information, click Server Wins.
In the Message Filters section, in the Synchronization Type drop-down list, accept the Bidirectional option. In the Conflict Resolution drop-down list, click one of the following conflict resolution options: • To specify that the BlackBerry® Professional Software information overrules the BlackBerry device information, click Server Wins.
Turn off synchronization for contact pictures on a user account By default, pictures that users add to contact entries in their address books are synchronized between their BlackBerry® devices and the email application on their computers. Users can add, delete, and change pictures in the email application on their computers or on their BlackBerry devices.
You can create both global field mappings that apply to all user accounts and user field mappings that apply to specific user accounts. When users request a remote address lookup in the global address list, the fields that you configure display on BlackBerry devices.
In the Device Field column, in the drop-down list, click the address book field that you want to map to a field on BlackBerry devices. Click OK. Map user-defined address book fields to address book fields on all BlackBerry devices In the BlackBerry® Manager, click the Home tab.
Map user-defined address book fields to address book fields on a specific BlackBerry device You can map up to four address book fields that users define in the email application to a specific field on the BlackBerry® device. In the BlackBerry Manager, click the Users tab.
When a user receives an email message in the incoming message queue, the BlackBerry Professional Software applies filters to determine how to direct the message: forward, forward with priority, or do not forward to the user’s BlackBerry device. Email message filters that you configure in the BlackBerry Professional Software overrule the email message filters that users define using the BlackBerry®...
13. Click Move Up or Move Down to move the filter higher or lower in the list. The BlackBerry® Professional Software applies email message filters based on the order in which they appear. Organize the email message filters from the least restrictive to the most restrictive.
13. Click Move Up or Move Down to move the filter higher or lower in the list. The BlackBerry® Professional Software applies email message filters based on the order in which they appear. Organize the email message filters from the least restrictive to the most restrictive.
BlackBerry devices. You can also manage individual user accounts, provide support to users, and control the size of the message queue and the load on the BlackBerry Messaging Agent to process forwarding requests. By default, email message forwarding is turned on for all user accounts.
When you turn off message forwarding for a user account, the user can send email messages but cannot receive them on the BlackBerry device. The user can later turn on message forwarding on the BlackBerry device manually.
In the left pane, click Redirection. In the Auto Signature section, double-click the Signature field. Type the signature that you want to appear in the messages that the user sends from the BlackBerry device. Click OK. Add a disclaimer to all messages sent from all BlackBerry devices Users cannot change the disclaimers that you define.
Click OK. Specify conflict rules for multiple disclaimers If you add different disclaimers for a single user and for all users, you can specify conflict rules to control how the BlackBerry® Professional Software applies the disclaimers. In the BlackBerry Manager, click the Home tab.
When you delete pending messages from the incoming message queue, the BlackBerry® Professional Software does not send the messages to the user’s BlackBerry device. Messages still appear in the email application on the user’s computer. In the BlackBerry Manager, click the Users tab.
Monitoring messages sent from BlackBerry devices If your organization requires you to retain a copy of all messages that users send from their BlackBerry® devices, use the auto BCC option in the BlackBerry® Professional Software to send copies of all messages to a specified recipient.
The BlackBerry® Attachment Service in the BlackBerry® Professional Software uses distillers to convert attachments in supported file formats for display on the BlackBerry device. By default, all supported distillers are turned on. You can add or turn off support for attachment file formats.
By default, the BlackBerry® Attachment Service in the BlackBerry® Professional Software does not limit the file size of an attachment that is embedded in a message or retrieved through a link . The BlackBerry Professional Software sends data to the BlackBerry device in packets that are no larger than 64 KB; however, the BlackBerry Professional Software can send an unlimited number of packets.
Configure the maximum file size for attachments You can change the maximum file size of attachment file formats to control the amount of memory that the BlackBerry® Attachment Service in the BlackBerry® Professional Software uses during the attachment conversion process.
DOM and caches the DOM locally. By default, the BlackBerry Attachment Service maintains the cache for 25 minutes or until a new request exceeds the cache limit for that process. If the cache limit is exceeded, the BlackBerry...
Page 43
Attachment Service deletes the document with the oldest time stamp in the cache. When users request to view an attachment on their BlackBerry devices, the BlackBerry Attachment Service accesses the DOM to process the request. The BlackBerry Attachment Service keeps all cached data in memory only and never caches the original document.
Page 44
Administration Guide Optimize the handling of file attachments Click OK. On the server that hosts the BlackBerry Professional Software, in the Microsoft® Windows® Services, restart the BlackBerry Attachment Service.
Controlling BlackBerry device behavior using IT policy You can use one or more IT policies to customize and control the functionality of BlackBerry® devices and the BlackBerry® Desktop Software. You can customize the settings in the IT policy rules for your environment. For more information, see the Policy Reference Guide.
Page 46
Administration Guide Preconfigured IT policies in the BlackBerry Professional Software IT policy rule Default IT Basic Medium Medium Advanced Advanced policy password password password security IT policy security security IT security IT security (disallow policy policy (disallow application application downloads) IT...
BlackBerry Desktop Software behavior over the wireless network. By default, the BlackBerry Professional Software resends the IT policy to the appropriate BlackBerry devices within a short period of time after you update the IT policy. You can also resend an IT policy to a BlackBerry device manually. You can configure the BlackBerry Professional Software...
BlackBerry device. When an IT policy rule allows a numeric range, you can select any numerical value within the permitted range. A lock icon next to a field on the BlackBerry device indicates that the IT policy controls the setting and the user cannot change it.
10. Click Apply. Create an IT policy based on an existing IT policy In the BlackBerry® Manager, click the Home tab. In the Common section, click Create IT Policy. In the list of policies, click the IT policy that you want to base the new IT policy on.
IT policy rules that control features or services that are not included in your version of the BlackBerry® Professional Software. Do not edit the IT policy definitions file. Download the .xml file that contains IT policy rule definitions from www.blackberry.com. Unzip the file to a temporary folder.
Administration Guide Resend an IT policy to a BlackBerry device manually Resend an IT policy to a BlackBerry device manually In the BlackBerry® Manager, click the Users tab. Click the user account that you want to resend the IT policy to.
Specify the central push server You can configure the BlackBerry® MDS Connection Service as a central push server. The central push server acts as a single host that receives content push requests from server-side applications that reside on a corporate application server, web server, or database.
Configure the BlackBerry MDS Connection Service to authenticate on behalf of BlackBerry devices with content servers that use LTPA Turn on HTTP cookie storage to allow the BlackBerry® MDS Connection Service to authenticate with content servers that use LTPA authentication technology.
Your organization can trust a web server that hosts push applications but is external to your environment if the BlackBerry® Professional Software stores a certificate for it in the key store file. To trust external web servers, you can configure BlackBerry devices to use the BlackBerry MDS Connection Service to retrieve certificate information for web servers that host push applications, and then use the Java®...
Do not change the default LDAP port parameters unless there is a port conflict with another service on the same computer. If you change port or host information, you must stop and restart the BlackBerry MDS Connection Service to reload the configuration information.
Install retrieved certificates for web servers Use the Java® keytool to add a certificate for a web server to the BlackBerry® Professional Software key store and permit connections to the trusted web server. For more information about using the Java keytool, visit java.sun.com/j2se/1.5.0/...
Turn on pull authorization for the BlackBerry® MDS Connection Service to prevent users from accessing web content on their BlackBerry devices. If you want to provide access to certain web servers, you can create URL patterns and assign a pull rule that allows a user to access specified web servers.
Using standard definitions for MIME media types, you can restrict the types of media—for example, audio and video—that the BlackBerry® MDS Connection Service can deliver to applications on the BlackBerry device. For more information about MIME media types, visit www.iana.org.
You can configure the BlackBerry® MDS Connection Service to prevent users from accessing every format of a media type (for example, video), or a specific format of a media type (for example, mp4), from the applications on the BlackBerry device.
Page 61
Configure the timeout interval for HTTP connections with web servers You can specify the length of time, in milliseconds, that the BlackBerry® MDS Connection Service waits for a web server to send data before it closes the HTTP connection with the web server. The default interval is 120,000 milliseconds (2 minutes).
HTTP redirections occur when an application on the BlackBerry® device requests a web page from a web server and the web server returns a redirection status code that indicates a new URL for the web page. The default value is five redirections.
Double-click Push Initiators. Click New. Double-click Push Principal Name. Type the name of the server-side application that you want to allow to send push requests to BlackBerry devices. Double-click Credentials. Type the password for the server-side push application. Make sure that the value of the authorization HTTP header in a push request from a server-side push application matches the push principal name and password that you specified for the push initiator.
Administration Guide Restricting the push content that users can receive on their BlackBerry devices Create a push rule In the BlackBerry® Manager, click the Home tab. Click Edit Global Properties. In the left pane, click Access Control. Double-click Push Rules.
You can configure the BlackBerry® MDS Connection Service to encrypt the push requests that server-side push applications send to BlackBerry devices using SSL or TLS. By default, the BlackBerry MDS Connection Service does not encrypt the push requests that server-side push applications send.
Click Push/PAP. Click Store Push Submissions. In the drop-down list, click True. Click Apply. On the server that hosts the BlackBerry® Professional Software, on the taskbar, click Start > Administrative Tools > Services. Right-click BlackBerry MDS Connection Service. Click Restart.
Page 67
Connection Service can process You can configure the maximum number of push connections that the BlackBerry® MDS Connection Service can process at the same time. When this limit is reached, the BlackBerry MDS Connection Service queues the remaining push connections.
Click Apply. Specify the BlackBerry MDS Connection Service flow control timeout limit You can specify how long the BlackBerry® MDS Connection Service waits for acknowledgement from a BlackBerry device before it discards pending content for that BlackBerry device. In the BlackBerry Manager, click the Connection Service tab.
Make sure there is adequate system memory to support the thread pool size that you want to specify. You can specify the maximum number of threads that the BlackBerry® MDS Connection Service can process at the same time before it rejects processing requests.
Administration Guide Managing push application requests On the server that hosts the BlackBerry® Professional Software, on the taskbar, click Start > Administrative Tools > Services. Right-click BlackBerry MDS Connection Service. Click Restart. Notify any push application developer in your environment that you have changed the port number.
You can make BlackBerry® Device Software or applications available to users in the following ways: • install BlackBerry Device Software on or add applications to a BlackBerry device that is connected to the server that hosts the BlackBerry® Professional Software •...
You create a software index for the applications that you add to the network drive so that the application loader tool and software configurations can locate the applications that are available to add to BlackBerry® devices. When you create a software index, the BlackBerry®...
A software configuration points to the shared network location of the BlackBerry® Device Software and applications that you plan to install on a specific BlackBerry device model. Using a software configuration, you can remotely add and remove third-party applications using the application loader tool on BlackBerry devices that are connected to computers running the BlackBerry®...
Administration Guide Applying application control policies In the Application Name list, select the check box beside the BlackBerry device models that you want to configure the BlackBerry Device Software or applications for. 10. Select or clear the check box for each application that you want to install or remove.
• To assign the application control policy that is assigned at the application software level, click <default>. An asterisk is added to the policy name. • To assign the default application control policy rules that are preconfigured on the BlackBerry device, click <none>.
Remove an application from a BlackBerry device You cannot remove an application from a BlackBerry® device over the wireless network. You can remove the icon for the application, and you can make the application inaccessible on the BlackBerry device; however, the application remains installed on the BlackBerry device.
You can upgrade applications on BlackBerry® devices over the wireless network. The BlackBerry® Professional Software might take up to four hours to upgrade an application on a BlackBerry device. If the Disposition is set to Required in the application control policy, the application upgrade is also sent over the wireless network.
Protecting BlackBerry device data in transit From the time that the user sends data (for example, an email message) from the BlackBerry® device until the BlackBerry® Professional Software receives the data, and from the time that the BlackBerry Professional Software receives and forwards data to the user until the user receives the data on the BlackBerry device, standard BlackBerry encryption uses a symmetric algorithm to protect the data.
Page 80
In the drop-down list, click the encryption type that you want to use. Click OK. After you finish: If you change the encryption type, you must reactivate the BlackBerry devices in the BlackBerry Domain under one of the following conditions: •...
Save the file. Remove a CAL key You can remove a CAL key only if you have more than one. You must have a CAL key that supports the BlackBerry® Professional Software user accounts in your organization. In the BlackBerry Manager, click the Home tab.
Removing the BlackBerry Professional Software from the host server Remove the BlackBerry Professional Software from the host server On the server that hosts the BlackBerry® Professional Software, on the taskbar, click Start > Settings > Control Panel > Add/Remove Programs. Click BlackBerry Professional Software.
Page 86
Administration Guide Legal notice DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.
Page 87
WARRANTIES PROVIDED BY RIM FOR PORTIONS OF ANY RIM PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION. Certain features outlined in this documentation require a minimum version of BlackBerry® Enterprise Server Software, BlackBerry® Desktop Software, and/or BlackBerry® Device Software and may require additional development or Third Party Products and Services for access to corporate applications.
Need help?
Do you have a question about the PROFESSIONAL SOFTWARE FOR MICROSOFT EXCHANGE and is the answer not in the manual?
Questions and answers