Permitting Push Applications To Make Trusted Connections To A Blackberry Mds Connection Service; Create A Key Store To Store Certificates For Use With Https Connections; Add A Certificate For The Blackberry Mds Connection Service - Blackberry PRD-10459-035 - Enterprise Server For MDS Administration Manual

Administration Guide
Permitting push applications to make trusted connections to a BlackBerry
MDS Connection Service
To permit push applications to open trusted connections to a BlackBerry® MDS Connection Service, you must create a key store
(the webserver.keystore file) on the computer that hosts the BlackBerry MDS Connection Service. This key store permits the
BlackBerry MDS Connection Service to accept HTTPS connections from push applications.
Push applications can use a BlackBerry MDS Connection Service certificate to open HTTPS connections to the BlackBerry MDS
Connection Service to push application data and application updates to the BlackBerry devices that are assigned to that BlackBerry
MDS Connection Service.
You can use the Java® keytool to create a self-signed certificate for the BlackBerry MDS Connection Service, or you can import
a signed certificate from a trusted public certification authority. You can use the Java keytool to export the BlackBerry MDS
Connection Service certificate from the key store, and import the certificate to the key stores that the Java push applications use.
For more information about using the Java keytool, visit java.sun.com/javase/6/docs/technotes/tools/windows/keytool.html.
For more information about the Apache Tomcat™ requirements, visit tomcat.apache.org/tomcat-5.5-doc/ssl-howto.html.

Create a key store to store certificates for use with HTTPS connections

You must create a key store to store the certificates that permit the BlackBerry® MDS Connection Service to accept HTTPS
connections from push applications.
1. On the computer that hosts the BlackBerry MDS Connection Service, on the taskbar, click Start > Programs > BlackBerry
Enterprise Server > BlackBerry Server Configuration.
2. On the Mobile Data Service tab, configure the key store information. Only one key store can exist. The file must be named
webserver.keystore and it must be located at <drive>:\Program Files\Research In Motion\BlackBerry Enterprise Server
\MDS\webserver.
3. Click Create Keystore File.
4. If prompted to overwrite a key store, click Yes.
5. Click OK.

Add a certificate for the BlackBerry MDS Connection Service

To permit server-side push applications to open trusted HTTPS connections to a BlackBerry® MDS Connection Service and push
application data and application updates to BlackBerry devices, you must add a certificate for the BlackBerry MDS Connection
Service to the webserver.keystore file.
1. On the computer that hosts the BlackBerry MDS Connection Service, navigate to <drive>:\Program Files\Java
\<JRE_version>\bin.
2. At the command prompt, perform one of the following tasks:

Permitting push applications to make trusted connections to a BlackBerry MDS Connection Service

47