Blackberry PRD-10459-035 - Enterprise Server For MDS Administration Manual
  1. Manuals
  2. Brands
  3. Blackberry Manuals
  4. Software
  5. PRD-10459-035 - Enterprise Server For MDS
  6. Administration manual
Blackberry PRD-10459-035 - Enterprise Server For MDS Administration Manual

Blackberry PRD-10459-035 - Enterprise Server For MDS Administration Manual

Administration guide
Hide thumbs
Table of Contents

Advertisement

Quick Links

Download this manual
BlackBerry Enterprise Server for MDS Applications
Version: 4.1 | Service Pack: 7
Administration Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the PRD-10459-035 - Enterprise Server For MDS and is the answer not in the manual?

Questions and answers

Subscribe to Our Youtube Channel

Related Manuals for Blackberry PRD-10459-035 - Enterprise Server For MDS

Summary of Contents for Blackberry PRD-10459-035 - Enterprise Server For MDS

  • Page 1 BlackBerry Enterprise Server for MDS Applications Version: 4.1 | Service Pack: 7 Administration Guide...
  • Page 2 Published: 2010-01-11 SWD-966846-0111050411-001...

  • Page 3: Table Of Contents

    Configure a BlackBerry Enterprise Server component to use a .pac file................. Configure a BlackBerry Enterprise Server component to use a proxy server..............Configure a BlackBerry Enterprise Server component to authenticate to a proxy server on behalf of BlackBerry devices..................................... 4 Sharing BlackBerry Enterprise Server components.......................
  • Page 4 Send an application to a BlackBerry device over the wireless network................... Monitor wireless application push failures..........................Error messages: Wireless application push......................... Install the BlackBerry Device Software or BlackBerry Applications on a BlackBerry device using the BlackBerry Manager ........................................... 7 Making BlackBerry MDS Runtime Applications available to users..................
  • Page 5 Install a BlackBerry MDS Runtime Application on a specific BlackBerry device............Applying an application control policy to a BlackBerry MDS Runtime Application............... Add the application launcher file for a BlackBerry MDS Runtime Application to the network drive......Assign an application control policy to a BlackBerry MDS Runtime Application............
  • Page 6 Specify the maximum amount of data that the BlackBerry MDS Connection Service can send to BlackBerry devices ........................................Specify the pending content timeout limit for the BlackBerry MDS Connection Service..........Allow Java applications to use persistent socket connections with the BlackBerry MDS Connection Service...
  • Page 7 Protect a stolen BlackBerry device............................Reissuing BlackBerry devices to new users..........................Preparing a BlackBerry device for redistribution........................ 14 Managing the delivery of BlackBerry Java Applications, BlackBerry Device Software, and device settings to BlackBerry devices..................................Managing BlackBerry Java Applications on BlackBerry devices....................
  • Page 8 Remove an installed BlackBerry MDS Runtime Application from BlackBerry devices..........Remove an installed BlackBerry MDS Runtime Application from a specific BlackBerry device........Configuring a new connection between a BlackBerry MDS Integration Service and a BlackBerry MDS Connection Service ........................................... Make a BlackBerry MDS Connection Service available to a BlackBerry MDS Integration Service......
  • Page 9 Change how the BlackBerry Controller restarts the BlackBerry Enterprise Server services......... Monitoring the BlackBerry MDS Integration Service notification messages................100 Set up monitoring of the BlackBerry MDS Integration Service notification messages for a BlackBerry device..100 Monitor the BlackBerry MDS Integration Service notification messages for a BlackBerry device.......
  • Page 10 Configure the maximum size for a BlackBerry Enterprise Server component log file........... 105 Change the logging level for a BlackBerry Enterprise Server component..............106 Create a new BlackBerry Enterprise Server component log file when the current log file reaches the maximum size ........................................106 Change the identifier for a BlackBerry Enterprise Server component log file..............

  • Page 11: Creating Administrator Accounts

    Creating administrator accounts Administrative roles You can use the predefined roles in the BlackBerry® Enterprise Server, that mirror typical administrative roles that exist in organizations, to control which administrators can perform specific tasks and what information the administrators can view.

  • Page 12: Creating A Blackberry Enterprise Server Administrator In A Microsoft Sql Server Environment

    The BlackBerry® Configuration Database uses the most restrictive settings to determine which tasks the BlackBerry Manager displays, so an administrator who is assigned both enterprise and junior help desk roles sees only the tasks for the junior help desk role.

  • Page 13: Configure The Blackberry Manager To Use Database Authentication In A Microsoft Sql Server Environment

    Configure the BlackBerry Manager to use database authentication in a Microsoft SQL Server environment During the installation process, if you choose to connect to the BlackBerry® Configuration Database using Windows® authentication, the BlackBerry Manager uses Windows authentication automatically. If you create database accounts for your administrators, you must change the type of authentication that the BlackBerry Manager uses.

  • Page 14: Configuring Security Options

    The BlackBerry Enterprise Solution uses the symmetric key encryption algorithm to create message keys and master encryption keys, and uses those encryption keys to encrypt all data that the BlackBerry device sends or receives, while the data travels between the BlackBerry device and the BlackBerry Enterprise Server.

  • Page 15: Generating Organization-Specific Encryption Keys For Pin Message Encryption

    By default, all BlackBerry® devices store a common PIN encryption key that they use to protect PIN messages. To limit the number of BlackBerry devices that can decrypt PIN messages that users in your organization send from their BlackBerry devices, you can generate a new PIN encryption key that is stored on and known only to BlackBerry devices in your organization.

  • Page 16: Allow The Blackberry Mds Integration Service To Communicate With The Blackberry Manager

    Administration Guide Authenticating the BlackBerry MDS Integration Service to the BlackBerry Manager and web services You can also export the certificate for the BlackBerry MDS Integration Service to allow client authentication with external web services. For more information about using the Java keytool, visit java.sun.com/javase/6/docs/technotes/tools/windows/keytool.html.
  • Page 17 Administration Guide Authenticating the BlackBerry MDS Integration Service to the BlackBerry Manager and web services • If multiple BlackBerry MDS Integration Service servers are installed, export the certificate for each BlackBerry MDS Integration Service. • Allow BlackBerry MDS Runtime Applications to access web services using HTTPS.

  • Page 18: Setting Up Proxy Servers For Blackberry Enterprise Server Components

    BlackBerry MDS Integration Service. You cannot use a proxy server to exchange data between these components. If you use a .pac file configuration, you can change the .pac file to permit a direct connection between the BlackBerry MDS Connection Service and BlackBerry MDS Integration Service.

  • Page 19: Configure A Blackberry Enterprise Server Component To Use A Proxy Server

    You can specify more than one proxy string in a proxy mapping rule for a web address. If the BlackBerry® Enterprise Server component cannot access the web server using the first proxy string, it tries to access the web server using the subsequent proxy strings that you typed, until it accesses the web server successfully.
  • Page 20 Click a URL. Click Properties. In the User Name field, type the user name that the BlackBerry Enterprise Server component can use to connect to the proxy server that is defined for the web address. In the Password field, type the password for the user name.

  • Page 21: Sharing Blackberry Enterprise Server Components

    On the Global tab, click Service Control & Customization. Click MDS CS to BES Mapping. In the MDS CS to BES Mappings dialog box, in the left pane, click the BlackBerry MDS Connection Service that you have set as the central push server.

  • Page 22: Configure Multiple Blackberry Enterprise Server Instances To Use The Same Blackberry Mds Integration Service

    In the drop-down list, click the BlackBerry MDS Integration Service that you want to assign to the BlackBerry Enterprise Server. Click OK. After you finish: Repeat this task for each BlackBerry Enterprise Server that you want to associate with the same BlackBerry MDS Integration Service. Related topics...

  • Page 23: Configuring User Accounts

    You can create user groups and assign user accounts to user groups based on custom criteria, such as user location, organizational group, or BlackBerry® device model. User accounts that are part of a user group can exist on multiple BlackBerry® Enterprise Server instances in the BlackBerry Domain.

  • Page 24: Add A User Account To A User Group

    On the Users tab, click one or more user accounts. Click Assign User to Group. Click a group name. Click OK. When you add user accounts to a group, the BlackBerry Manager assigns the group properties to the user accounts automatically.

  • Page 25: Sending Software And Blackberry Java Applications To Blackberry Devices

    Making software and applications available on a network drive To make the BlackBerry® Device Software or applications available for users to install on or add to their BlackBerry devices, you must save the BlackBerry Device Software and applications to a network drive and create a software index. You can maintain only one version of software or an application on the network drive at a time.

  • Page 26: Add A Java Application To A Network Drive

    Copy the .alx, .cod, and .dll files to the subfolder. Add the BlackBerry MDS Runtime to a network drive You add the BlackBerry® MDS Runtime to a network drive for users to install on their BlackBerry devices so that they can use BlackBerry MDS Runtime Applications.

  • Page 27: Share A Network Drive For Applications

    You must create a separate software configuration for each BlackBerry device series in your organization. You must either install all of the application files that you want to install on a specific BlackBerry device model on the BlackBerry® Enterprise Server or on a computer with a shared network drive before you can set an application control policy on a BlackBerry device.

  • Page 28: Define An Application Control Policy

    Defining software configurations • To permit users to add applications to BlackBerry devices, select the check box beside the application name. • To prevent users from adding the application to BlackBerry devices, clear the check box beside the application name. Click OK.

  • Page 29: Assign A Software Configuration To A User Group

    Administration Guide Send an application to a BlackBerry device over the wireless network Allow the user to set application controls on the BlackBerry device. To allow the application control settings that are configured on the BlackBerry device, click <none>. Click OK.

  • Page 30: Monitor Wireless Application Push Failures

    Click the Software Config Status tab. In the Name field, type the name of the user whose BlackBerry device you want to monitor. If you leave the Name field empty, the search applies to all users in the BlackBerry Domain.
  • Page 31 Monitor wireless application push failures Resend the application to the BlackBerry device. If the second wireless application push is not successful, in the log files that you collected, locate the user account that is experiencing the issue. Trace the installation activity.

  • Page 32: Install The Blackberry Device Software Or Blackberry Applications On A Blackberry Device Using The Blackberry Manager

    BlackBerry device using the BlackBerry Manager If you want to save network bandwidth, or if you want to install the BlackBerry® Device Software or add applications to BlackBerry devices before you distribute the BlackBerry devices to users, you can use the BlackBerry Manager to complete the installation process.
  • Page 33 Administration Guide Install the BlackBerry Device Software or BlackBerry Applications on a BlackBerry device using the BlackBerry Manager To make sure that the application remains installed on a BlackBerry device, change the Disposition application control policy to Required. Click OK.

  • Page 34: Making Blackberry Mds Runtime Applications Available To Users

    Creating BlackBerry MDS Runtime Applications and sending them to BlackBerry devices To see the documentation for administrators of the BlackBerry® Enterprise Server, visit www.blackberry.com/go/serverdocs. To see the BlackBerry Mobile Data System Technical Overview and documentation for BlackBerry developer tools, visit www.blackberry.com/developers. Task...
  • Page 35 Administration Guide Creating BlackBerry MDS Runtime Applications and sending them to BlackBerry devices Task Actor Resource Install the BlackBerry® MDS Studio or the Developer BlackBerry MDS Studio Developer Guide BlackBerry® Plug-in for Microsoft® Visual • Section: Installing, configuring, and Studio®.

  • Page 36: Preparing Blackberry Devices To Install Blackberry Mds Runtime Applications

    Runtime installed and activated. You can install the BlackBerry MDS Runtime on BlackBerry devices over the wireless network, or you can add it to a network drive and instruct users to install it on their BlackBerry devices using the application loader tool...

  • Page 37: Configuring Access To Web Services And Managing Signed And Unsigned Applications

    Define a BlackBerry MDS Runtime Application as a trusted application A developer in your organization can sign a BlackBerry® MDS Runtime Application with a digital certificate. Add this digital certificate to the BlackBerry MDS Integration Service to define the BlackBerry MDS Runtime Application as a trusted application that can send data to and receive data from application servers or web servers.

  • Page 38: Configure Whether Users Can Install Unsigned Blackberry Mds Runtime Applications On Blackberry Devices

    Configure whether users can install unsigned BlackBerry MDS Runtime Applications on BlackBerry devices You can configure whether users are allowed to install BlackBerry® MDS Runtime Applications that are not signed with a digital certificate. By default, users are allowed to install unsigned BlackBerry MDS Runtime Applications on their BlackBerry devices.

  • Page 39: Assign A Blackberry Mds Integration Service Device Policy To A User Group

    Assign a BlackBerry MDS Integration Service device policy to a user group Before you begin: Make sure that all of the users in the group are connected to the same BlackBerry® MDS Integration Service. The group must contain at least one user.

  • Page 40: Sending Blackberry Mds Runtime Applications And Blackberry Browser Applications To Blackberry Devices

    Click the BlackBerry MDS Runtime Application that you want to install. Click Next. In the Group size for pushing field, type the number of BlackBerry devices to send the installation request to at the same time. 10. In the Push interval field, type an interval for the BlackBerry MDS Integration Service to send the installation request to BlackBerry devices.

  • Page 41: Applying An Application Control Policy To A Blackberry Mds Runtime Application

    Runtime Application that was created using BlackBerry® MDS Studio version 2.0 or later or the BlackBerry® Plug-in for Microsoft® Visual Studio® version 1.1 or later. You can use an application control policy to specify the types of data on BlackBerry devices that the BlackBerry MDS Runtime Application can and cannot access.

  • Page 42: Assign An Application Control Policy To A Blackberry Mds Runtime Application

    Assign an application control policy to a BlackBerry MDS Runtime Application Before you begin: Add the application launcher (.cod) file for the BlackBerry® MDS Runtime Application to the network drive. In the BlackBerry Manager, create a software configuration that includes the application launcher file for the BlackBerry MDS Runtime Application.
  • Page 43 Administration Guide Applying an application control policy to a BlackBerry MDS Runtime Application Related topics Defining software configurations, 25...

  • Page 44: Configuring How Users Access Enterprise Applications And Web Content

    Specifying a BlackBerry MDS Connection Service as the central push server You can specify one BlackBerry® MDS Connection Service in a BlackBerry Domain as the central push server. The central push server receives content push requests from server-side applications that are located on an application server, on a web server, or in a database.

  • Page 45: Configure How Blackberry Devices Authenticate To Content Servers

    BlackBerry devices, click True. Double-click Authentication Timeout. Type the length of time, in milliseconds, that you want authentication information for BlackBerry devices to remain valid on the content server. By default, the authentication timeout limit is 1 hour.

  • Page 46: Configure The Blackberry Mds Connection Service To Authenticate Blackberry Devices To Content Servers That Use Kerberos

    LTPA BlackBerry® devices that are running BlackBerry® Device Software version 3.8 or later manage how they store the HTTP cookies that they use to authenticate to content servers that use LTPA authentication technology. For BlackBerry devices that use previous versions of the BlackBerry Device Software, you must allow the BlackBerry MDS Connection Service to manage HTTP cookie storage on the BlackBerry devices.

  • Page 47: Configuring How The Blackberry Mds Connection Service Manages Requests For Web Content

    RSA Authentication Timeout. Type a number, in minutes. By default, the authenticated connection persists for 24 hours. To specify how long a BlackBerry device can remain connected to your organization's network while the user is inactive, double-click RSA Inactivity Timeout. Type a number, in minutes.

  • Page 48: Configure The Timeout Limit For Http Connections With Blackberry Devices

    Configure the timeout limit for HTTP connections to web servers You can specify how long the BlackBerry® MDS Connection Service waits for a web server to send data before it closes the HTTP connection to the web server. The default timeout limit is 120,000 milliseconds (2 minutes).

  • Page 49: Permitting Push Applications To Make Trusted Connections To A Blackberry Mds Connection Service

    MDS Connection Service. You can use the Java® keytool to create a self-signed certificate for the BlackBerry MDS Connection Service, or you can import a signed certificate from a trusted public certification authority. You can use the Java keytool to export the BlackBerry MDS Connection Service certificate from the key store, and import the certificate to the key stores that the Java push applications use.

  • Page 50: Export The Blackberry Mds Connection Service Certificate To Make It Available To Push Applications

    Export the BlackBerry MDS Connection Service certificate to make it available to push applications You must export the certificate for the BlackBerry® MDS Connection Service so that you can import it to the key store of a server- side push application.

  • Page 51: Configuring A Blackberry Mds Connection Service To Trust Web Servers

    You can configure the BlackBerry® MDS Connection Service to permit BlackBerry devices to pull application data and updates from trusted or untrusted web servers. If you want to open trusted connections between web servers and the BlackBerry MDS Connection Service, you must import the certificate for the web server into the JRE™ certificates keystore file (JRE cacerts).

  • Page 52: Configure The Blackberry Mds Connection Service To Retrieve The Status Of Certificates For Web Servers

    Do not change the default LDAP port parameters unless there is a port conflict with another service on the same computer. If you change the port number or host server information, you must stop and restart the BlackBerry MDS Connection Service to reload this information.

  • Page 53: Add A Retrieved Certificate For A Web Server To The Key Store

    Add a retrieved certificate for a web server to the key store You can use the Java® keytool to add a certificate for a web server to the BlackBerry® MDS Connection Service key store. The certificate permits the BlackBerry MDS Connection Service to connect to the trusted web server.

  • Page 54: Allow Java Applications To Use Persistent Socket Connections With The Blackberry Mds Connection Service

    Specify the thread pool size of the BlackBerry MDS Connection Service You can specify the maximum number of threads that the BlackBerry® MDS Connection Service can process simultaneously. Before you begin: Verify that your system memory can support the thread pool size that you want to specify.

  • Page 55: Specify The Port Number That The Web Server Listens On For Push Application Requests

    Specify how often the BlackBerry MDS Connection Service polls for configuration information You can specify how often the BlackBerry® MDS Connection Service polls the BlackBerry Configuration Database for changes to the BlackBerry MDS Connection Service and BlackBerry Collaboration Service administrative settings. The default interval is 5 minutes.

  • Page 56: Assigning Blackberry Devices To Users

    Assigning BlackBerry devices to user accounts When you assign a BlackBerry® device to a user account, you associate the BlackBerry device with a defined IMAP service that is used to activate all BlackBerry device user accounts. To assign BlackBerry devices to user accounts and activate the BlackBerry...
  • Page 57 Neither you nor the users are required to connect the BlackBerry devices to a computer to complete the activation process. You can use wireless activation to activate a large number of BlackBerry devices over the wireless network. When users want to activate BlackBerry devices on the BlackBerry Enterprise Server over the wireless network, they must notify you.
  • Page 58 BlackBerry Enterprise Server activates a BlackBerry device using the activation password Send an activation password to a user In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server. On the Users tab, click a user account. Click Service Access.

  • Page 59: Managing Administrator Accounts

    As organizational changes occur, you might need to move an administrator to a different administrative role. In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Role Administration tab, click the role that the administrator is assigned to.

  • Page 60: Controlling The Blackberry Enterprise Solution

    BlackBerry devices of a specific manufacturer or model. You can allow a specific user to override the Enterprise Service Policy so that the user can still connect to the BlackBerry Enterprise Server even if that user's BlackBerry device or BlackBerry enabled device meets criteria that you exclude from the allowed list.

  • Page 61: Permit A User To Override The Enterprise Service Policy

    Controlling BlackBerry device behavior using IT policies You can use one or more IT policies to control the behavior of BlackBerry® devices and the BlackBerry® Desktop Software in your organization. The Default IT policy includes all standard IT policy rules on the BlackBerry® Enterprise Server. After new users in a BlackBerry Domain activate their BlackBerry devices on the BlackBerry Enterprise Server, the BlackBerry Enterprise Server automatically pushes the Default IT policy to their BlackBerry devices.

  • Page 62: Assign An It Policy To A Group Of Users

    • Specify a value for the IT policy rule. Click OK. Create an IT policy based on an existing IT policy In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Edit Properties. Click IT Policy.

  • Page 63: Assign An It Policy To A User Account

    BlackBerry device behavior and the BlackBerry Desktop Software. By default, the BlackBerry Enterprise Server is designed to resend the IT policy to the BlackBerry devices that you assigned to that IT policy within a short period of time after you update the IT policy.

  • Page 64: Deactivating Blackberry Devices Without Applied It Policies

    Enterprise Server, you can set the Disable Users With Unapplied IT Policy field to True. The Disable User Time Limit field specifies the amount of time (in hours) that a BlackBerry device can be active on a BlackBerry Enterprise Server without having an IT policy applied on that device.

  • Page 65: Changing The Default Behavior Of Blackberry Devices And The Blackberry Desktop Software

    BlackBerry device. Users can select the maximum value that you specify for the IT policy rule, regardless of whether it appears in the numeric range. If a lock icon is located beside a field on a BlackBerry device, this indicates that an IT policy controls the setting and a user cannot change it.

  • Page 66: Returning To The Default Behavior Of Blackberry Devices And The Blackberry Desktop Software

    Returning to the default behavior of BlackBerry devices and the BlackBerry Desktop Software To restore the default behavior of a feature on BlackBerry® devices or in the BlackBerry® Desktop Software, you can change the IT policy rule value to Default, if that option is available, or delete the value that you previously specified.
  • Page 67 16. In the Policy Item Settings section, provide a value for the IT policy rule in this IT policy. 17. Click OK. Change or delete IT policy rules for third-party applications In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Edit Properties. Click IT Policy.

  • Page 68: Managing User Accounts

    When you apply configuration properties to a group, or perform administrative tasks on a group, these settings apply to all user accounts in the group. In the BlackBerry® Manager, in the left pane, click User Groups. On the User Groups List tab, click a group.

  • Page 69: Delete A User Group

    Click Yes. Managing user accounts You can move user accounts from one user group to another or from one BlackBerry® Enterprise Server to another in the BlackBerry Domain. When you delete a user account, you can retain the user account information in the BlackBerry Enterprise Server. You can activate the user account again, or the user can continue to use the BlackBerry device as a BlackBerry®...

  • Page 70: Move A User Account From One Blackberry Enterprise Server To Another

    Managing user accounts Move a user account from one BlackBerry Enterprise Server to another In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server. On the Users tab, click a user account. In the lower pane, click Account.

  • Page 71: Protecting And Reassigning Blackberry Devices

    BlackBerry device. Protect a lost BlackBerry device If a user misplaces a BlackBerry® device or a BlackBerry device is stolen, you can protect the data on the BlackBerry device by locking the BlackBerry device or making it unavailable.

  • Page 72: Protect A Lost Blackberry Device That A User Might Recover

    Protect a lost BlackBerry device that a user might recover If a BlackBerry® device is lost but the user might recover it, you can protect the BlackBerry device by scheduling it to start deleting all user information and application data and become unavailable after a period of time that you specify. You can also specify whether the user can cancel the scheduled command if the user recovers the BlackBerry device.

  • Page 73: Preparing A Blackberry Device For Redistribution

    Reissuing BlackBerry devices to new users Preparing a BlackBerry device for redistribution Before you reissue a BlackBerry® device to a new user, delete application data from the BlackBerry device, and then replace the applications on the BlackBerry device. Choose a method to delete the previous user’s application data from the BlackBerry device and make the BlackBerry device unavailable to that user before assigning the BlackBerry device to a new user.

  • Page 74: Managing The Delivery Of Blackberry Java Applications, Blackberry Device Software, And Device Settings To Blackberry Devices

    You can remove a BlackBerry® Java Application, the collaboration client, and the BlackBerry® MDS Runtime from BlackBerry devices over the wireless network. The BlackBerry® Enterprise Server might take up to 4 hours to remove an application from a BlackBerry device.

  • Page 75: Managing Software Configurations

    Managing software configurations Delete a software configuration from a user account In the BlackBerry® Manager, click a BlackBerry® Enterprise Server. In the Users list, click the user account that you want to delete the software configuration from. Click Device Management.

  • Page 76: Managing Attachment Support

    BlackBerry Attachment Service uses. By default, the BlackBerry Attachment Service does not limit the file size of an attachment that is retrieved using a link. The BlackBerry Enterprise Server sends data to BlackBerry devices over the wireless network in packets that are no larger than 64 KB, and it can send an unlimited number of packets to BlackBerry devices.

  • Page 77: Blackberry Attachment Service Optimization Settings

    Enabled Caching minutes or until a new request exceeds the cache limit for that conversion process. If the cache limit is exceeded, the BlackBerry Attachment Service deletes the document with the oldest time stamp from the cache. To prevent multiple requests for the same attachment from using the first cached copy of the attachment DOM in a conversion process, you can set this drop-down list to Disabled.

  • Page 78: Change The Maximum File Size For Attachments That Users Can Receive

    Change the maximum dimensions for image attachments that users can view You can control the dimensions of image attachments that users can view on their BlackBerry® devices. By default, the BlackBerry Attachment Service sets a maximum width of 5000 pixels and a maximum height of 4000 pixels.

  • Page 79: Changing How The Blackberry Messaging Agent Reconciles Attachments To The Messaging Server

    Attachment Size field, type a number that is between 1 and 3072 KB. • To change the maximum file size for multiple attachments that BlackBerry devices can send at one time, in the Maximum Upload Total Attachment Size field, type a number that is between 1 and 5120 KB and that is greater than the value in the Maximum Upload Attachment Size field.

  • Page 80: Prevent Users From Sending Large Attachments

    Certain versions of the BlackBerry® Device Software enable users to download attachments in their native formats (for example, .txt for a text file) to their BlackBerry devices. Users can open and make changes to the downloaded files using an appropriate third-party application on their BlackBerry devices. Depending on the file format, a user might be able to open the file using the media application on the BlackBerry device.

  • Page 81: Add Support For Additional Attachment File Formats

    If your organization's messaging server connects to a document management system that renames file format extensions, you must add the extensions to the list of supported file formats. On the computer that hosts the BlackBerry® Attachment Service, on the taskbar, click Start > Programs > BlackBerry Enterprise Server > BlackBerry Server Configuration.

  • Page 82: Managing Blackberry Mds Runtime Applications And Blackberry Browser Applications

    Click Next. In the Group size for pushing field, type the number of BlackBerry devices that you want to send the upgrade request to simultaneously. In the Push interval (minute) field, type an interval after which the BlackBerry MDS Integration Service sends the upgrade request to BlackBerry devices.

  • Page 83: Remove A Trusted Certificate From The Blackberry Mds Integration Service

    Remove a trusted certificate from the BlackBerry MDS Integration Service If you do not want the BlackBerry® MDS Integration Service to authenticate BlackBerry MDS Runtime Applications that use a specific digital certificate, remove the digital certificate from the BlackBerry MDS Integration Service.

  • Page 84: Removing Blackberry Mds Runtime Applications And Blackberry Browser Applications

    After you finish: If you remove a BlackBerry MDS Runtime Application from the BlackBerry MDS Application Repository, the application still runs on the BlackBerry devices that it is installed on. If you do not want users to use an installed BlackBerry MDS Runtime Application, remove the application from the users’...

  • Page 85: Remove An Installed Blackberry Mds Runtime Application From A Specific Blackberry Device

    Configuring a new connection between a BlackBerry MDS Integration Service and a BlackBerry MDS Connection Service 10. In the Push interval (minute) field, type an interval for the BlackBerry MDS Integration Service to send the removal request to BlackBerry devices.

  • Page 86: Make A Blackberry Mds Connection Service Available To A Blackberry Mds Integration Service

    You can make a BlackBerry® MDS Connection Service available to any BlackBerry MDS Integration Service in the same BlackBerry Domain. Before you begin: The BlackBerry MDS Connection Service that you specify must have a fully qualified domain name or IP address. The BlackBerry MDS Connection Service cannot use localhost or 127.0.0.1.

  • Page 87: Managing How Users Access Enterprise Applications And Web Content

    Click OK. Users cannot access web content on their BlackBerry devices until you allow access to certain web servers using pull rules. After you finish: To allow users to access certain web servers, specify allowed web address patterns and assign them to a pull rule, and then assign the pull rule to a user or user group.

  • Page 88: Create A Pull Rule

    Create a pull rule In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Edit Properties. In the left pane, click Access Control.

  • Page 89: Assign A Pull Rule To A User Group

    Restricting user access to media content in the BlackBerry Browser You can use standard definitions for MIME media types so that you can restrict the media types that the BlackBerry® MDS Connection Service can send to the BlackBerry® Browser and other applications on BlackBerry devices.

  • Page 90: Prevent Users From Accessing Specific Media Types

    Prevent users from accessing specific media types You can configure the BlackBerry® MDS Connection Service to prevent users from accessing every format of a media type (for example, video), or a specific format of a media type (for example, .mp3), through the BlackBerry® Browser and other applications on the BlackBerry device.

  • Page 91: Restrict Push Applications From Sending Data To Blackberry Devices

    BlackBerry devices. To permit specific users to receive push requests on BlackBerry devices, you can create push rules and assign the rules to the users.

  • Page 92: Turn On Push Authorization

    The BlackBerry® MDS Connection Service can only apply push rules if you turn on push authorization for the BlackBerry MDS Connection Service. Before you begin: •...

  • Page 93: Assign Push Initiators To A Push Rule

    Create a push rule. • Assign push initiators to the push rule. In the BlackBerry® Manager, in the left pane, click a user group. On the Group Configuration tab, click Edit Group Template. In the left pane, click Access Control.

  • Page 94: Encrypt Push Requests That Push Applications Send To Blackberry Devices

    Encrypt push requests that push applications send to BlackBerry devices You can configure the BlackBerry® MDS Connection Service to use SSL or TLS to encrypt the push requests that server-side push applications send to BlackBerry devices. By default, the BlackBerry MDS Connection Service does not encrypt the push requests that server-side push applications send.

  • Page 95: Managing Push Application Requests

    In the left pane, click Connection Service Details. Double-click URL. Type the full web address or domain name and port number of the BlackBerry MDS Connection Service that is associated with the push initiator. In the Push Initiator drop-down list, click the push initiator that you want to associate with the BlackBerry MDS Integration Service.

  • Page 96: Store Push Application Requests In The Blackberry Configuration Database

    Type the maximum number of push requests that you want the BlackBerry Configuration Database to store. Double-click Maximum Push Message Age. Type the maximum length of time, in minutes, that you want the BlackBerry Configuration Database to store a push request before the BlackBerry® Enterprise Server deletes it from the BlackBerry Configuration Database.

  • Page 97: Delete Requests From The Push Request Queue Manually

    Configure the maximum number of queued connections that the BlackBerry MDS Connection Service can process The BlackBerry® MDS Connection Service queues push connections when the number of connections exceeds a limit that you specify. You can configure the maximum number of push connections that the BlackBerry MDS Connection Service can queue.

  • Page 98: Monitoring A Blackberry Domain

    The BlackBerry® Controller detects when activity stops and restarts the appropriate BlackBerry® Enterprise Server services, which enables the BlackBerry Enterprise Server to continue to run in the event of nonresponsive threads or inactive services. The BlackBerry Controller monitors the following BlackBerry Enterprise Server components: •...
  • Page 99 Administration Guide Changing how the BlackBerry Controller monitors the BlackBerry Enterprise Server components and restarts services Task Steps Change the maximum number of times Create a DWORD value that is named MaxAgentRestartsPerDay. that the BlackBerry Messaging Agent Double-click the new DWORD value.
  • Page 100 Administration Guide Changing how the BlackBerry Controller monitors the BlackBerry Enterprise Server components and restarts services Task Steps Create a DWORD value that is named RestartAgentOnHungBlackoutTo. In the Properties for the new DWORD value, in the Base section, select the Decimal option.

  • Page 101: Change How The Blackberry Controller Restarts The Blackberry Enterprise Server Services

    By default, the BlackBerry® Controller restarts the BlackBerry® Enterprise Server services if they stop responding. On the computer that hosts the BlackBerry Enterprise Server component that you want to change, open the Registry Editor. Perform one of the following actions: •...

  • Page 102: Monitoring The Blackberry Mds Integration Service Notification Messages

    BlackBerry® MDS Runtime Applications generate. An excessive number of messages from a specific BlackBerry MDS Runtime Application or messages of a specific type might indicate that a problem exists with a BlackBerry device, a BlackBerry MDS Runtime Application, or the web services.

  • Page 103: Monitor The Blackberry Mds Integration Service Notification Messages For A Blackberry Device

    In the BlackBerry Manager, in the left pane, click a BlackBerry MDS Integration Service. Click Monitor Messages. On the Monitor Messages tab, in the Device field, type the PIN of the BlackBerry device that you want to view notification messages for.

  • Page 104: Remove All Notification Messages For The Blackberry Mds Integration Service

    Monitor PIN messages You use the log files for PIN messages to monitor the time and frequency at which users send PIN messages from their BlackBerry® devices. By default, the logging of PIN messages is turned off. The log files are named using the format PINLog_<yyyymmdd> .

  • Page 105: Monitor Sms Text Messages

    You use the log files for SMS text messages to monitor the time and the frequency at which users send SMS text messages from their BlackBerry® devices. By default, the logging of SMS text messages is turned off. The log files are named using the format SMSLog_yyyymmdd.

  • Page 106: Turn Off Call Logging

    Turn off call logging You use the call log files to monitor the time and frequency at which users make calls from their BlackBerry® devices. By default, the logging of calls is turned on. The log files are named using the format PhoneCallLog_<yyyymmdd>.csv.

  • Page 107: Store All Of The Blackberry Enterprise Server Component Log Files In One Folder

    Store all of the BlackBerry Enterprise Server component log files in one folder You can store all of the BlackBerry® Enterprise Server component log files in one folder instead of organizing the folders by date. On the computer that hosts the BlackBerry Manager, on the taskbar, click Start > Programs > BlackBerry Enterprise Server >...

  • Page 108: Change The Logging Level For A Blackberry Enterprise Server Component

    • 2: Warning: This level logs warning messages to the log files. • 3: Information: This level logs daily activities to the log files. • 4: Debug: This level logs additional information to the log files that can help you troubleshoot issues in the BlackBerry Enterprise Server environment.

  • Page 109: Change The Identifier For A Blackberry Enterprise Server Component Log File

    BlackBerry Enterprise Server components. Change the identifier for a BlackBerry Enterprise Server component log file On the computer that hosts the BlackBerry® Manager, on the taskbar, click Start > Programs > BlackBerry Enterprise Server > BlackBerry Server Configuration.

  • Page 110: Changing How The Blackberry Mds Connection Service Creates A Log File

    • 2: Warning: This level logs warning messages to the log files. • 3: Information: This level logs daily activities to the log files. • 4: Debug: This level logs additional information to the log files that can help you troubleshoot the BlackBerry MDS Connection Service.

  • Page 111: Change The Interval At Which The Blackberry Mds Connection Service Writes Information To The Log File

    Change the port number that the BlackBerry MDS Connection Service connects to when sending UDP log file messages The SNMP agent for the BlackBerry® Enterprise Server receives UDP log file messages on the same port number that the BlackBerry MDS Integration Service connects to when sending UDP log messages.

  • Page 112: Change The Logging Level For The Tcp Log File

    Administration Guide Change the logging level for the TCP log file In the BlackBerry® Manager, in the left pane, click a BlackBerry MDS Connection Service. On the Connection Service tab, click Edit Properties. Double-click Logs. Click Destination. In the TCP section, click Log Level.

  • Page 113: Change Which Blackberry Mds Connection Service Activities Are Written To The Log File

    Change which BlackBerry MDS Connection Service activities are written to the log file In the BlackBerry® Manager, in the left pane, click a BlackBerry MDS Connection Service. On the Connection Service tab, click Edit Properties. In the left pane, click Logs.
  • Page 114 Administration Guide Change which BlackBerry MDS Connection Service activities are written to the log file Task Steps In the drop-down list, click True. Monitor CRLs that the BlackBerry device retrieves from the Click CRL logging enabled. CRL server. In the drop-down list, click True.

  • Page 115: Managing A Blackberry Domain

    Managing CAL keys CAL keys control how many user accounts can exist on a BlackBerry® Enterprise Server at the same time. When you exceed the number of licensed user accounts, the BlackBerry Manager informs you that you require more CAL keys.

  • Page 116: Add Or Delete A Cal Key

    Administration Guide Managing CAL keys Add or delete a CAL key In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. On the Global tab, click Account. Click License Management. Perform one of the following actions: • To add a CAL key, type the new information for the license key. Click Add License.

  • Page 117: Glossary

    BlackBerry MDS BlackBerry® Mobile Data System BlackBerry CAL A BlackBerry® Client Access License (BlackBerry CAL) limits how many users you can add to a BlackBerry® Enterprise Server. CMIME Compressed Multipurpose Internet Mail Extensions certificate revocation list...
  • Page 118 Administration Guide Glossary HTTP Hypertext Transfer Protocol HTTPS Hypertext Transfer Protocol over Secure Sockets Layer IPPP Internet Protocol Proxy Protocol local area network LDAP Lightweight Directory Access Protocol LTPA Lightweight Third-Party Authentication messaging server MIME Multipurpose Internet Mail Extensions NTLM NT LAN Manager OCSP Online Certificate Status Protocol...
  • Page 119 Administration Guide Glossary Simple Network Management Protocol Server Routing Protocol Secure Sockets Layer Transmission Control Protocol Transport Layer Security Triple DES Triple Data Encryption Standard User Datagram Protocol...

  • Page 120: Legal Notice

    Legal notice Legal notice ©2010 Research In Motion Limited. All rights reserved. BlackBerry®, RIM®, Research In Motion®, SureType®, SurePress™ and related trademarks, names, and logos are the property of Research In Motion Limited and are registered and/or used in the U.S.
  • Page 121 Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with RIM's products and services may require one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights.
  • Page 122 Administration Guide Legal notice Certain features outlined in this documentation require a minimum version of BlackBerry® Enterprise Server, BlackBerry® Desktop Software, and/or BlackBerry® Device Software. The terms of use of any RIM product or service are set out in a separate license or other agreement with RIM applicable thereto.

This manual is also suitable for:

Enterprise server for mds

Table of Contents