Blackberry PRD-10459-016 - Enterprise Server For MS Exchange Administration Manual page 185

Administration Guide
• If you are running a 64-bit version of Windows Server 2008, the <drive>:\WINDOWS\SysWow64 folder
2. In the RSA Authentication Manager, create an Agent Host record for the BlackBerry Enterprise Server.
The RSA Authentication Manager generates an sdconf.rec file.
3. On the computer that hosts the BlackBerry MDS Connection Service, copy the sdconf.rec file that the RSA
Authentication Manager generates to one of the following folders:
• If you are running a 32-bit version of Windows Server 2008, the <drive>:\WINDOWS\system32 folder
• If you are running a 64-bit version of Windows Server 2008, the <drive>:\WINDOWS\SysWow64 folder
4. In the Windows Services, restart the BlackBerry MDS Connection Service.
Related information
Restarting BlackBerry Enterprise Server components,
Configure the BlackBerry MDS Connection Service to authenticate
devices to the RSA Authentication Manager
Before you begin:
• Configure the BlackBerry MDS Connection Service to authenticate to the content servers in your organization's
environment on behalf of BlackBerry devices.
• To specify the web addresses that require RSA authentication, configure URL patterns and access control rules that
restrict user access to specific web addresses or intranet addresses.
1. In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution
topology > BlackBerry Domain > Component view.
2. Click MDS Connection Service.
3. Click Edit component.
4. On the RSA tab, in the Protocol service information section, in the RSA® authentication support drop-down list,
select one of the following options:
• If you want users to use RSA authentication when they access every web address or intranet address, select Turn
on globally.
• If you want users to use RSA authentication when they access the intranet only, select Turn on for Intranet only.
• If you want users to use RSA authentication for web addresses or intranet addresses that you specify, select Turn
on for specific sites only.
5. In the RSA authentication timeout field, type a number, in minutes, to specify how long devices that the RSA
Authentication Manager authenticates can remain connected to your organization's network while the users are
active.
By default, the authenticated connection persists for 24 hours.
Configuring how users access enterprise applications and web content
392
185