Blackberry Version 5.0 Service Pack 4 User Manual

Loading...
Blackberry Version 5.0 Service Pack 4 User Manual

BlackBerry Enterprise Server for Microsoft Exchange

Version: 5.0

Service Pack: 4

Configuration Guide

Installation and

Published: 2014-01-14

SWD-20140114180405595

Contents

 

1

Overview: BlackBerry Enterprise Server.............................................................................................

7

2

Planning a BlackBerry Enterprise Server installation..........................................................................

8

 

Installing all BlackBerry Enterprise Server components on one computer..............................................................................

8

 

Installing the BlackBerry Administration Service...................................................................................................................

9

 

Installing the BlackBerry Attachment Service.......................................................................................................................

9

 

Installing the BlackBerry Collaboration Service ..................................................................................................................

10

 

Installing the BlackBerry MDS Connection Service..............................................................................................................

10

 

Installing the BlackBerry Router.........................................................................................................................................

11

3

Hardware requirements: BlackBerry Enterprise Server....................................................................

12

4

System requirements......................................................................................................................

14

 

System requirements: BlackBerry Enterprise Server...........................................................................................................

14

 

System requirements: BlackBerry Administration Service and BlackBerry Web Desktop Manager.......................................

15

 

System requirements: BlackBerry Enterprise Server databases...........................................................................................

16

 

System requirements: BlackBerry Attachment Service .......................................................................................................

18

 

System requirements: BlackBerry Collaboration Service.....................................................................................................

19

 

System requirements: BlackBerry MDS Connection Service................................................................................................

22

 

System requirements: BlackBerry Router ..........................................................................................................................

23

 

System requirements for your organization's environment..................................................................................................

23

 

System requirements: Computers for BlackBerry Web Desktop Manager and BlackBerry Administration Service users.......

24

 

System requirements: Messaging server.............................................................................................................................

26

 

System requirements: Firewall...........................................................................................................................................

26

 

System requirements: Instant messaging server.................................................................................................................

27

 

Supported features and environments................................................................................................................................

27

 

Unsupported environments................................................................................................................................................

28

5

Preinstallation tasks........................................................................................................................

30

 

Configuring a Microsoft Exchange 2010 messaging environment........................................................................................

30

 

Create a Windows account that has a Microsoft Exchange 2010 mailbox .....................................................................

30

 

Configure Microsoft Exchange 2010 permissions for the Windows account ..................................................................

31

 

Increase the maximum number of connections to the Address Book service in Microsoft Exchange 2010.....................

31

 

Turn off client throttling in Microsoft Exchange 2010....................................................................................................

32

 

Configure a management role and scope for Microsoft Exchange Web Services............................................................

32

 

Configure the BlackBerry Enterprise Server to run without public folders......................................................................

33

 

Permit meeting requests from outside of your organization when using Microsoft Exchange Web Services for

 

 

Microsoft Exchange 2010............................................................................................................................................

34

 

Configuring a Microsoft Exchange 2007 messaging environment........................................................................................

34

 

Create a Windows account that has a Microsoft Exchange 2007 mailbox .....................................................................

34

 

Configure Microsoft Exchange 2007 permissions for the Windows account ..................................................................

35

 

Permit users to send email messages in a Microsoft Exchange environment.................................................................

35

 

Permit meeting requests from outside of your organization when using Microsoft Exchange Web Services for

 

 

Microsoft Exchange 2007............................................................................................................................................

36

 

Configuring a Microsoft Exchange 2003 messaging environment........................................................................................

37

 

Create a Windows account that has a Microsoft Exchange 2003 mailbox .....................................................................

37

 

Configure Microsoft Exchange 2003 permissions for the Windows account...................................................................

37

 

Permit users to send email messages in a Microsoft Exchange environment.................................................................

38

 

Configure permissions for the Windows account.................................................................................................................

39

 

Prevent the Microsoft Exchange known issues for wireless calendar synchronization...........................................................

40

 

Verify if the Windows account can access a user account in Microsoft Exchange.................................................................

40

 

Configuring connections for the BlackBerry Enterprise Server database..............................................................................

41

 

Specifying permissions when you connect to the BlackBerry Configuration Database using Windows

 

 

authentication or Microsoft SQL Server authentication.................................................................................................

41

 

Create a BlackBerry Configuration Database................................................................................................................

43

 

Install the SNMP service for monitoring by a monitoring application....................................................................................

44

 

Creating a BlackBerry Administration Service pool that includes the BlackBerry Web Desktop Manager using DNS

 

 

round robin .......................................................................................................................................................................

45

 

Create the DNS record for a BlackBerry Administration Service instance.............................................................................

46

 

Preparing the computer that hosts the BlackBerry Collaboration Service for use with Microsoft Office Communications

 

 

Server 2007 R2..................................................................................................................................................................

47

 

Preparing the computer that hosts the BlackBerry Collaboration Service for use with Microsoft Lync Server 2010................

48

 

Persistent socket connections for the BlackBerry Collaboration Service .............................................................................

49

 

Applications that are installed with the BlackBerry Enterprise Server components...............................................................

49

6

Installing the BlackBerry Enterprise Server software........................................................................

51

 

Prerequisites: Installing the BlackBerry Enterprise Server software.....................................................................................

51

 

Install the BlackBerry Enterprise Server software................................................................................................................

52

 

Specifying a name for the BlackBerry Administration Service pool during the installation process.................................

54

 

Install a BlackBerry Enterprise Server component on a computer that is separate from the computer that hosts the

 

 

BlackBerry Enterprise Server..............................................................................................................................................

55

 

Install a standalone BlackBerry Router...............................................................................................................................

57

 

Test the connection from the BlackBerry Router to the BlackBerry Infrastructure.........................................................

57

7

Installing a standby BlackBerry Enterprise Server............................................................................

58

 

Install a standby BlackBerry Enterprise Server....................................................................................................................

59

8

Postinstallation tasks......................................................................................................................

61

 

Test the BlackBerry Enterprise Server installation...............................................................................................................

61

 

Install the BlackBerry database notification system ............................................................................................................

61

 

Best practice: Running the BlackBerry Enterprise Server....................................................................................................

62

 

Configuring support for Unicode languages........................................................................................................................

63

 

Configure support for Unicode languages....................................................................................................................

63

 

Change the character encoding that the BlackBerry Enterprise Server uses to send Unicode messages........................

64

 

Configure the BlackBerry Enterprise Server to use only UTF-8 to send Unicode messages............................................

65

 

Configure support for Unicode text in calendars on BlackBerry devices in a Microsoft Exchange environment...............

65

 

Configuring the BlackBerry Enterprise Server to use Microsoft Exchange Web Services.......................................................

66

 

Prerequisites: Configuring the BlackBerry Enterprise Server to use Microsoft Exchange Web Services..........................

67

 

Configure the BlackBerry Enterprise Server to use Microsoft Exchange Web Services...................................................

67

 

Manage the BlackBerry Enterprise Server performance in a Microsoft Exchange 2010 environment....................................

68

 

Configure a Hosted BlackBerry services environment for use with Microsoft Exchange 2010 SP1 Multi-Tenant

 

 

Deployment.......................................................................................................................................................................

69

 

Configure the BlackBerry Administration Service instances in a pool to communicate across network subnets ....................

69

 

Log in to the BlackBerry Administration Service for the first time.........................................................................................

70

 

There is a problem with this website's security certificate.............................................................................................

70

 

Configuring communication with distributed components...................................................................................................

71

 

Connecting to a BlackBerry Attachment Service..........................................................................................................

71

 

Connecting to a BlackBerry Router..............................................................................................................................

74

 

Configuring a computer for monitoring...............................................................................................................................

76

 

Configure the SNMP service for monitoring by a monitoring application........................................................................

76

 

Restrict database permissions for the BlackBerry Attachment Service................................................................................

77

 

Configuring minimum Microsoft SQL Server permissions for the Windows account..............................................................

78

 

Configure minimum Microsoft SQL Server permissions for the Windows account ..........................................................

78

 

Changing the BlackBerry Configuration Database...............................................................................................................

79

 

Provisioning the BlackBerry Collaboration Service as a trusted application..........................................................................

79

 

Manually provision the BlackBerry Collaboration Service as a trusted application.........................................................

79

 

Turn off automatic provisioning of the BlackBerry Collaboration Service as a trusted application...................................

80

9

Adding or removing BlackBerry Enterprise Server components........................................................

81

 

Add or remove a BlackBerry Enterprise Server component.................................................................................................

83

 

Remove BlackBerry Enterprise Server component information from the BlackBerry Configuration Database ......................

85

10

Removing the BlackBerry Enterprise Server software.......................................................................

86

 

Remove the BlackBerry Enterprise Server software.............................................................................................................

86

 

Delete registry keys............................................................................................................................................................

86

 

BlackBerry Enterprise Server registry keys...................................................................................................................

87

 

Removing the BlackBerry database notification system......................................................................................................

88

 

Remove the BlackBerry database notification system from a BlackBerry Configuration Database.................................

88

 

Remove the BlackBerry database notification system from all BlackBerry Configuration Database instances................

88

11

Troubleshooting the BlackBerry Enterprise Server installation process.............................................

90

 

Failed to write License Key to the Database........................................................................................................................

90

 

Previous version detected but no database available..........................................................................................................

90

 

A third-party tool did not install and the BlackBerry Enterprise Server setup application closed ...........................................

91

 

The setup application did not prompt you to change or confirm the MAPI profile.................................................................

91

 

You cannot determine the BlackBerry Attachment Connector that the BlackBerry Enterprise Server or the BlackBerry

 

 

MDS Connection Service uses............................................................................................................................................

92

 

Users experience unexpected behavior with message lists and calendars on BlackBerry devices........................................

93

 

Some BlackBerry Enterprise Server components do not start..............................................................................................

94

 

You cannot access the BlackBerry Administration Service..................................................................................................

95

 

You cannot create a user account in the BlackBerry Administration Service........................................................................

96

 

The BlackBerry Administration Service pool name is the same as the FQDN of the host computer.......................................

96

 

The text in the license agreement is not readable................................................................................................................

97

12

Related resources...........................................................................................................................

98

13

Glossary.........................................................................................................................................

99

14

Legal notice..................................................................................................................................

101

Installation and Configuration Guide

Overview: BlackBerry Enterprise Server

Overview: BlackBerry

 

1

Enterprise Server

 

 

The BlackBerry Enterprise Server is designed to be a secure, centralized link between an organization's wireless network, communications software, applications, and BlackBerry smartphones. The BlackBerry Enterprise Server integrates with your organization's existing infrastructure to provide smartphone users with mobile access to your organization's resources.

You can manage the BlackBerry Enterprise Server, smartphones, and user accounts using the BlackBerry Administration Service. You can access the BlackBerry Administration Service web application from any computer that can access the computer that hosts the BlackBerry Administration Service.

You can optionally install BlackBerry Management Studio in your organization's environment to provide a simplified administrative console for your organization's helpdesk administrators and an integrated view of the BlackBerry Enterprise Server and other MDM domains. For more information, visit http://www.blackberry.com/go/serverdocs to see the

BlackBerry Management Studio Feature and Technical Overview.

7

Installation and Configuration Guide

Planning a BlackBerry Enterprise Server installation

Planning a BlackBerry

 

2

Enterprise Server installation

 

 

You can install all BlackBerry Enterprise Server components on one computer, or you can install specific components on separate computers. You should consider any impact to system resources before you decide where to install the components.

You install all components on one computer if you do not plan to activate many BlackBerry devices, if you determine that the computer can manage the volume of traffic for the BlackBerry Enterprise Server components, and if it is acceptable that the computer has direct access to the Internet, without being located in the DMZ.

If you want to configure high availability, you must install an additional BlackBerry Enterprise Server on a computer that is separate from the computer that hosts the primary BlackBerry Enterprise Server. During the installation process, you specify that the duplicate BlackBerry Enterprise Server is the standby BlackBerry Enterprise Server.

For performance information, see the BlackBerry Enterprise Server Performance Benchmarking Guide. For more information about high availability, see the BlackBerry Enterprise Server Planning Guide.

Installing all BlackBerry Enterprise Server components on one computer

If you want to evaluate the BlackBerry Enterprise Server or complete a BlackBerry Enterprise Server installation for a small number of users, you can install all the BlackBerry Enterprise Server components on the same computer.

During the installation process you can choose to install the BlackBerry Collaboration Service and BlackBerry Web Desktop Manager with the BlackBerry Enterprise Server. All of the other BlackBerry Enterprise Server components are installed automatically when you install the BlackBerry Enterprise Server.

8

Installation and Configuration Guide

Planning a BlackBerry Enterprise Server installation

Installing the BlackBerry Administration

Service

The BlackBerry Administration Service permits you to manage a BlackBerry Enterprise Server domain through a webbased application. A BlackBerry Enterprise Server domain consists of one BlackBerry Configuration Database and all BlackBerry Enterprise Server instances and remote components that use the BlackBerry Configuration Database.

You can install the BlackBerry Administration Service with other BlackBerry Enterprise Server components or by itself on a separate computer. You can install the BlackBerry Administration Service on a separate computer to limit the impact that the BlackBerry Administration Service might have on system resources and to prevent administrators in your organization from accessing any part of the computer that hosts the BlackBerry Enterprise Server. If you install the BlackBerry Administration Service before you install a BlackBerry Enterprise Server, the installation process will complete successfully but it will not function properly until the BlackBerry Enterprise Server is installed.

When you install the BlackBerry Administration Service, you can install the BlackBerry Web Desktop Manager and select whether you want administrators to use Windows authentication or BlackBerry Administration Service authentication to log in to the BlackBerry Administration Service. You must verify that all administrators have access to the BlackBerry Administration Service web address (https://<computer_name>:<port>/webconsole/app).

Installing the BlackBerry Attachment

Service

The BlackBerry Attachment Service converts supported attachments into a format that users can view on their BlackBerry devices. By default, the BlackBerry Enterprise Server includes the BlackBerry Attachment Service.

The BlackBerry Attachment Service might use increased system resources when it processes numerous conversion requests simultaneously. If you want to increase the number of conversion requests that can occur concurrently without impacting message delivery, you can install a BlackBerry Attachment Service on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server.

You can connect multiple BlackBerry Enterprise Server instances and BlackBerry MDS Connection Service instances to a BlackBerry Attachment Service instance.

When you install the BlackBerry Attachment Service on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server, the installation process installs the BlackBerry Attachment Service and BlackBerry Controller. The BlackBerry Controller monitors the BlackBerry Attachment Service and restarts it if it stops responding.

9

Installation and Configuration Guide

Planning a BlackBerry Enterprise Server installation

Installing the BlackBerry Collaboration

Service

The BlackBerry Collaboration Service provides an encrypted connection between your organization's instant messaging server and the collaboration client on BlackBerry devices so that BlackBerry device users can start and manage instant messaging conversations on their devices.

If you want to maximize the number of sockets available so that the BlackBerry Collaboration Service can respond to an increased amount of requests from the collaboration client, you can install the BlackBerry Collaboration Service by itself on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server. (Microsoft Office Communications Server 2007 R2 and Microsoft Lync Server 2010 do not use persistent socket connections.)

If you install the BlackBerry Collaboration Service on a separate computer, the installation process installs the BlackBerry Collaboration Service and BlackBerry Controller. The BlackBerry Controller monitors the BlackBerry Collaboration Service and restarts it if it stops responding.

You can connect multiple BlackBerry Enterprise Server instances to a BlackBerry Collaboration Service instance.

A different type of BlackBerry Collaboration Service exists for each instant messaging environment. For example, a BlackBerry Collaboration Service exists for Microsoft Office Communications Server 2007, and a different BlackBerry Collaboration Service exists for IBM Sametime. You can install only one type of BlackBerry Collaboration Service for each BlackBerry Enterprise Server in your organization's environment. Users can use only one type of collaboration client on their devices.

Installing the BlackBerry MDS Connection

Service

The BlackBerry MDS Connection Service provides users with access to online content and applications on your organization's intranet or the Internet. By default, the BlackBerry Enterprise Server includes the BlackBerry MDS Connection Service.

The BlackBerry MDS Connection Service might use increased system resources when it processes content requests. If you want to minimize the impact this has on message delivery, you can install the BlackBerry MDS Connection Service by itself on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server.

You can connect multiple BlackBerry Enterprise Server instances to a BlackBerry MDS Connection Service instance.

When you install the BlackBerry MDS Connection Service on a separate computer, you must assign at least one BlackBerry Enterprise Server instance to it during the installation process. The BlackBerry MDS Connection Service uses the BlackBerry Enterprise Server information to connect to the BlackBerry Attachment Service.

10

Installation and Configuration Guide

Planning a BlackBerry Enterprise Server installation

When you install the BlackBerry MDS Connection Service on a separate computer, the installation process installs the BlackBerry MDS Connection Service and BlackBerry Controller. The BlackBerry Controller monitors the BlackBerry MDS Connection Service and restarts it if it stops responding.

Installing the BlackBerry Router

The BlackBerry Router connects to the wireless network and sends data to and from BlackBerry devices.

You can install a BlackBerry Router with other BlackBerry Enterprise Server components or by itself on a separate computer. You can install the BlackBerry Router on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server if you want to install the BlackBerry Router in the DMZ, or to install standby BlackBerry Router instances as failover components in case the primary BlackBerry Router is unavailable.

You can connect multiple BlackBerry Enterprise Server instances to a BlackBerry Router instance.

If you install the BlackBerry Router on a separate computer, the installation process installs the BlackBerry Router and BlackBerry Controller. The BlackBerry Controller monitors the BlackBerry Router and restarts it if it stops responding.

11

Installation and Configuration Guide

Hardware requirements: BlackBerry Enterprise Server

Hardware requirements:

 

3

BlackBerry Enterprise Server

 

 

The following are requirements for a BlackBerry Enterprise Server and the BlackBerry Enterprise Server components that you install on a single computer, and excludes the BlackBerry Collaboration Service. The requirements are for a BlackBerry Enterprise Server environment that includes users that receive 100 to 200 email messages each day.

You can improve the performance and reliability of the BlackBerry Enterprise Server by installing the BlackBerry Enterprise Server components on multiple computers. If your BlackBerry Enterprise Server environment supports up to 1000 users, install the BlackBerry Configuration Database on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server. If your BlackBerry Enterprise Server environment supports up to 2000 users, install the BlackBerry Configuration Database and the BlackBerry Administration Service on computers that are separate from the computer that hosts the BlackBerry Enterprise Server.

Item

Requirement

 

 

BlackBerry Enterprise Server that

• Single processor, 2.0 GHz Intel Xeon (two processors recommended)

supports up to 200 users

• 2 GB of memory

 

 

• 64-bit operating system: Two 64 GB drives (minimum), RAID 1

 

• 32-bit operating system: Two 36 GB drives (minimum), RAID 1

 

• 150 MB disk space for the BlackBerry Enterprise Server

 

• 400 MB disk space for the BlackBerry Administration Service

 

• Approximately 2 MB per user each day for log files (100 email messages per

 

user)

 

 

BlackBerry Enterprise Server that

• Two processors, 2.0 GHz Intel Xeon

supports up to 500 users

• 2 GB of memory

 

 

• 64-bit operating system: Two 64 GB drives (minimum), RAID 1

 

• 32-bit operating system: Two 36 GB drives (minimum), RAID 1

 

• 150 MB disk space for the BlackBerry Enterprise Server

 

• 400 MB disk space for the BlackBerry Administration Service

 

• Approximately 2 MB per user each day for log files (100 email messages per

 

user)

 

 

12

Installation and Configuration Guide

Item

BlackBerry Enterprise Server that supports up to 1000 users

BlackBerry Enterprise Server that supports up to 2000 users

Hardware requirements: BlackBerry Enterprise Server

Requirement

Two processors, 2.0 GHz Intel Xeon

3 GB of memory

64-bit operating system: Two 64 GB drives (minimum), RAID 1

32-bit operating system: Two 36 GB drives (minimum), RAID 1

150 MB disk space for the BlackBerry Enterprise Server

400 MB disk space for the BlackBerry Administration Service

Approximately 2 MB per user each day for log files (100 email messages per user)

Two processors, 2.8 GHz Intel Xeon or two processors, 1.86 GHz Intel Xeon 5100 Series (Dual Core)

4 GB of memory

64-bit operating system: Two 64 GB drives (minimum), RAID 1 or four 64 GB drives (minimum), RAID 1+0

32-bit operating system: Two 36 GB drives (minimum), RAID 1 or four 36 GB drives (minimum), RAID 1+0

150 MB disk space for the BlackBerry Enterprise Server

400 MB disk space for the BlackBerry Administration Service

Approximately 2 MB per user each day for log files (100 email messages per user)

13

Installation and Configuration Guide

System requirements

System requirements

 

4

 

 

For information about calculating hardware requirements, visit www.blackberry.com/go/serverdocs to see the BlackBerry Enterprise Server Capacity Calculator and BlackBerry Enterprise Server Performance Benchmarking Guide.

System requirements: BlackBerry

Enterprise Server

Item

Requirement

 

 

operating system

Any of the following operating systems:

 

• Windows Server 2003 SP2 (32-bit or 64-bit)

 

• Windows Server 2003 R2 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 R2

 

• Windows Server 2008 R2 SP1

 

• Windows Server 2012

 

 

Microsoft Exchange system tools

Any of the following system tools:

 

• Microsoft Exchange 2003 SP2 System Manager

 

• Microsoft Exchange Server MAPI Client and CDO 1.2.1

 

To support Microsoft Exchange Server 2010, you must install version

 

6.5.8211.0 or later of the Microsoft Exchange Server MAPI Client and CDO

 

1.2.1.

 

For more information about installing MAPI and CDO patches on your

 

organization's BlackBerry Enterprise Server, visit support.microsoft.com to read

 

article 917481 and visit www.blackberry.com/go/kbhelp to read article

 

KB15779.

 

 

Microsoft Exchange organization of the

The same Microsoft Exchange organization that the messaging server uses

system tools for the messaging server

 

 

 

14

Installation and Configuration Guide System requirements

Item

Requirement

 

 

CDO library

To support the latest version of Microsoft Exchange Server in your organization's

 

environment, the latest version of the CDO library that applies to the Microsoft

 

Exchange Server version

 

 

Unicode support for calendars

To support Microsoft Exchange Server 2003, the following Microsoft hotfixes:

 

• 913643 on the messaging server

 

• 923537 on the computer that hosts the BlackBerry Enterprise Server

 

 

static IP address for the computer

To install the BlackBerry Administration Service in a pool, a static IP address for

 

the computer that hosts the component

 

 

browser

Windows Internet Explorer 7.0 to 8.0 with language preferences configured to

 

display encoded web pages

 

 

media player

One of the following:

 

• if using Windows Server 2008, to support audio attachments, Windows

 

Media Format SDK (for more information, visit msdn.microsoft.com and

 

search Windows Media Format SDK)

 

• if using Windows Server 2003, to support audio attachments, Windows

 

Media Player 9 or later

 

 

network proximity

A high-speed, switched connection between the BlackBerry Enterprise Server

 

and messaging servers

 

 

File and Printer Sharing

If using Windows Server 2003, to permit the BlackBerry Controller to monitor

 

BlackBerry Enterprise Server components, install File and Printer Sharing

 

For more information, see the documentation for Windows Server

 

 

System requirements: BlackBerry Administration Service and BlackBerry Web Desktop Manager

The following system requirements apply to the computer that you install the BlackBerry Administration Service and BlackBerry Web Desktop Manager on.

15

Installation and Configuration Guide System requirements

Item

Requirement

 

 

operating system

Any of the following operating systems:

 

• Windows Server 2003 SP2 (32-bit or 64-bit)

 

• Windows Server 2003 R2 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 R2

 

• Windows Server 2008 R2 SP1

 

• Windows Server 2012

 

• Microsoft hotfix 955839 installed on the computer that hosts the BlackBerry

 

Administration Service and BlackBerry Web Desktop Manager

 

 

memory

A minimum 1.2 GB of memory

 

 

hardware load balancer

If you configure high availability for the BlackBerry Administration Service using

 

a hardware load balancer, you must implement session persistence for SSL

 

connections. For information on how to implement session persistence, contact

 

the vendor of your hardware load balancer.

 

 

outgoing data connection

For the BlackBerry Administration Service, an HTTPS connection using port

 

number 443

 

 

System requirements: BlackBerry Enterprise Server databases

Item

Requirement

 

 

database management system

Any of the following database management systems:

 

• Microsoft SQL Server 2005 SP3 (32-bit or 64-bit)

 

• Microsoft SQL Server 2005 SP4 (32-bit or 64-bit)

 

• Microsoft SQL Server 2005 Express SP3

 

• Microsoft SQL Server 2008 SP2 (32-bit or 64-bit)

 

• Microsoft SQL Server 2008 SP3 (32-bit or 64-bit)

 

 

16

Installation and Configuration Guide System requirements

Item

Requirement

 

 

 

• Microsoft SQL Server 2008 R2 (32-bit or 64-bit)

 

• Microsoft SQL Server 2008 R2 SP1 (32-bit or 64-bit)

 

• Microsoft SQL Server 2008 R2 SP2 (32-bit or 64-bit)

 

• Microsoft SQL Server 2008 Express SP3 (32-bit or 64-bit)

 

• Microsoft SQL Server 2008 R2 Express SP1 (32-bit or 64-bit)

 

• Microsoft SQL Server 2008 R2 Express SP2 (32-bit or 64-bit)

 

• Microsoft SQL Server 2012 (32-bit or 64-bit)

 

 

collation setting

To configure collation settings, the following conditions:

 

• database server collation configured to default case-insensitive

 

• BlackBerry Configuration Database collation configured to default case-

 

insensitive

 

• collation must be the same for the Microsoft SQL Server instance and the

 

database server that hosts the BlackBerry database notification system

 

(BlackBerry Configuration Database)

 

• default collations are suggested though non-default collations are supported

 

(for more information, visit www.blackberry.com/go/kbhelp to read articles

 

KB04785 and KB15534)

 

 

database connectivity

• TCP/IP network protocols turned on

 

• No count option turned off

 

 

nested triggers

Nested trigger support turned on. For more information, visit

 

msdn.microsoft.com to read article ms178101.

 

 

database mirroring

To support database mirroring for the BlackBerry Configuration Database, the

 

following conditions:

 

• Any of the following database management systems:

 

• Microsoft SQL Server 2005 SP3 Enterprise Edition or Standard Edition

 

(32-bit or 64-bit)

 

• Microsoft SQL Server 2005 SP4 Enterprise Edition or Standard Edition

 

(32-bit or 64-bit)

 

 

17

Installation and Configuration Guide System requirements

Item

Requirement

 

 

 

• Microsoft SQL Server 2008 SP1 Enterprise Edition or Standard Edition

 

(32-bit or 64-bit)

 

• Microsoft SQL Server 2008 SP2 Enterprise Edition or Standard Edition

 

(32-bit or 64-bit)

 

• Microsoft SQL Server 2008 R2 Enterprise Edition or Standard Edition

 

(32-bit or 64-bit)

 

• the mirror database must reside on a different computer from the principal

 

database

 

• the Microsoft SQL Server instances for both the principal and mirrored

 

databases must be the same version and edition

 

• only use static port number 1433

 

• do not use named instances

 

• verify that the SQL Server Browser service is running

 

• turn off the Named Pipes option in the Microsoft SQL Server Native Client on

 

the computers that host the BlackBerry Enterprise Server instances

 

 

database transactional replication

To support database transactional replication for the BlackBerry Configuration

 

Database, the following conditions:

 

• the database server must be Microsoft SQL Server 2005 SP3 or later

 

• the database server that hosts the replicated database must use the same

 

version and build as the database server that hosts the primary database

 

 

System requirements: BlackBerry Attachment Service

The following system requirements apply to the computer that you install the BlackBerry Attachment Service on.

Item

Requirement

 

 

operating system

Any of the following operating systems:

 

 

18

Installation and Configuration Guide System requirements

Item

Requirement

 

 

 

• Windows Server 2003 SP2 (32-bit or 64-bit)

 

• Windows Server 2003 R2 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 R2

 

• Windows Server 2008 R2 SP1

 

• Windows Server 2012

 

 

media player

One of the following:

 

• if using Windows Server 2008, to support audio attachments, Windows

 

Media Format SDK (for more information, visit msdn.microsoft.com and

 

search Windows Media Format SDK)

 

• if using Windows Server 2003, to support audio attachments, Windows

 

Media Player 9 or later

 

 

browser

Windows Internet Explorer 7.0 to 8.0 with language preferences configured to

 

display encoded web pages

 

 

System requirements: BlackBerry Collaboration Service

The following system requirements apply to the computer that you install the BlackBerry Collaboration Service on.

Item

Requirement

 

 

operating system

Unless otherwise stated, any of the following operating systems:

 

• Windows Server 2003 SP2 (32-bit or 64-bit)

 

• Windows Server 2003 R2 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 R2

 

• Windows Server 2008 R2 SP1

 

 

19

Installation and Configuration Guide System requirements

Item Requirement

Windows Server 2012

IBM Sametime

Novell GroupWise Messenger

Microsoft Office Live Communications Server 2005 or Microsoft Office Communications Server 2007

Microsoft Office Communications

Server 2007 R2

IP address of the computer that hosts the BlackBerry Collaboration Service added to the CommunityConnectivity document on the IBM Sametime server

SSL authentication turned on for the Novell GroupWise Messenger agents on the Novell GroupWise Messenger server

The latest Microsoft hotfixes installed

Any of the following operating systems:

Windows Server 2003 R2 SP2 (64-bit)

Windows Server 2008 SP2 (64-bit)

Windows Server 2008 R2

Windows Server 2008 R2 SP1

Windows Server 2012

The latest Microsoft hotfixes installed

The BlackBerry Collaboration Service installed in the same Microsoft Active Directory domain as Microsoft Office Communications Server 2007 R2

The Windows account that runs the BlackBerry Collaboration Service added to one of the following groups:

RTCUniversalServerAdmins group, to automatically provision the BlackBerry Collaboration Service as a trusted service in Microsoft Active Directory (for more information, visit msdn.microsoft.com to read about required Microsoft Active Directory permissions)

RTCComponentUniversalServices group, if you use another account with the required permissions (RTCUniversalServerAdmins) to manually provision the BlackBerry Collaboration Service as a trusted service in Microsoft Active Directory (for more information, see "Manually provision the BlackBerry Collaboration Service as a trusted application")

Microsoft .NET Framework 3.5 SP1

Microsoft Visual C++ 2008 Redistributable Package (vcredist_x64.exe)

Microsoft SQL Server Native Client (sqlncli_x64.msi)

20

Installation and Configuration Guide

Item

Microsoft Lync Server 2010

System requirements

Requirement

Microsoft Unified Communications Managed API 2.0 Core Redist 64-bit (ucmaredist.msi)

Microsoft Office Communications Server 2007 R2, Core Components (ocscore.msi)

The required certificate installed in the Personal Certificate folder for the local computer account

For detailed instructions about the Microsoft install packages and installing the required certificate, see "Preparing the computer that hosts the BlackBerry Collaboration Service for use with Microsoft Office Communications Server 2007 R2".

Any of the following operating systems:

Windows Server 2003 R2 SP2 (64-bit)

Windows Server 2008 SP2 (64-bit)

Windows Server 2008 R2

Windows Server 2008 R2 SP1

Windows Server 2012

The latest Microsoft hotfixes installed

The BlackBerry Collaboration Service installed in the same Microsoft Active Directory domain as Microsoft Lync Server 2010

The Windows account that runs the BlackBerry Collaboration Service added to one of the following groups:

RTCUniversalServerAdmins group, to automatically provision the BlackBerry Collaboration Service as a trusted service in Microsoft Active Directory (for more information, visit msdn.microsoft.com to read about required Microsoft Active Directory permissions)

RTCComponentUniversalServices group, if you use another account with the required permissions (RTCUniversalServerAdmins) to manually provision the BlackBerry Collaboration Service as a trusted service in Microsoft Active Directory (for more information, see "Manually provision the BlackBerry Collaboration Service as a trusted application")

Microsoft .NET Framework 3.5 SP1

Microsoft Visual C++ 2008 Redistributable Package (vcredist_x64.exe)

21

Installation and Configuration Guide System requirements

Item Requirement

Microsoft SQL Server Native Client (sqlncli_x64.msi)

Microsoft Unified Communications Managed API 2.0 Core Redist 64-bit (to download ucmaredist.msi, visit the Volume Licensing Service Center at www.microsoft.com)

Microsoft Office Communications Server 2007 R2, Core Components (to download ocscore.msi, visit the Volume Licensing Service Center at www.microsoft.com)

The required certificate installed in the Personal Certificate folder for the local computer account

For detailed instructions about the Microsoft install packages and installing the required certificate, see "Preparing the computer that hosts the BlackBerry Collaboration Service for use with Microsoft Lync Server 2010".

System requirements: BlackBerry MDS Connection Service

The following system requirements apply to the computer that you install the BlackBerry MDS Connection Service on.

Item

Requirement

 

 

operating system

Any of the following operating systems:

 

• Windows Server 2003 SP2 (32-bit or 64-bit)

 

• Windows Server 2003 R2 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 SP2 (32-bit or 64-bit)

 

• Windows Server 2008 R2

 

• Windows Server 2008 R2 SP1

 

• Windows Server 2012

 

 

RSA Authentication Agent

To support enhanced network authentication (optional), RSA Authentication

 

Agent 6.1 for Windows Server 2003 or RSA Authentication Agent 7.0.1 for

 

Windows Server 2008.

 

 

memory

One of the following:

 

 

22

Installation and Configuration Guide System requirements

Item Requirement

if you install a central push server and less than 1000 user accounts, a minimum of 1024 MB

if you install a central push server and more than 1000 user accounts, a minimum of 3 GB

if you do not install a central push server, a minimum of 512 MB

System requirements: BlackBerry Router

To install the BlackBerry Router on a computer that is separate from the computer that hosts the BlackBerry Enterprise Server, any of the following operating systems:

Windows Server 2003 SP2 (32-bit or 64-bit)

Windows Server 2003 R2 SP2 (32-bit or 64-bit)

Windows Server 2008 SP2 (32-bit or 64-bit)

Windows Server 2008 R2

Windows Server 2008 R2 SP1

Windows Server 2012

System requirements for your organization's environment

The following system requirements apply when you configure single sign-on authentication for the BlackBerry Administration Service and BlackBerry Web Desktop Manager or configure the BlackBerry MDS Connection Service to support Integrated Windows authentication.

Item

Requirement

 

 

network services

Microsoft Active Directory running at Windows Server 2003 domain functional level or

 

higher

 

 

23

Installation and Configuration Guide System requirements

Item

Requirement

 

 

application server

For the BlackBerry MDS Connection Service to support Integrated Windows

 

authentication, Microsoft IIS 6.0 or 7.0 using Integrated Windows authentication

 

 

file server

For the BlackBerry MDS Connection Service to support Integrated Windows

 

authentication, Windows Server 2003 file services or Windows Server 2008 file

 

services

 

 

System requirements: Computers for BlackBerry Web Desktop Manager and BlackBerry Administration Service users

Item

browser

browser settings for Windows Internet Explorer

Requirement

Windows Internet Explorer 7.0 to 8.0

Mozilla Firefox 3.6+

Google Chrome 4.0+

Safari 4 for Mac

Windows Internet Explorer 7 or later provides optimal support for BlackBerry Web Desktop Manager features and BlackBerry Administration Service features. Depending on the browser that you use, the BlackBerry Web Desktop Manager and BlackBerry Administration Service might not recognize BlackBerry devices and the browser might prevent you from activating devices that are connected to the computer, backing up and restoring device data, or adding or updating device applications.

To support browser access, you must configure the following settings:

language preferences configured to display encoded web pages

Microsoft hotfix 955839 installed on the users' computers to make sure the correct time zones are displayed

the following settings turned on to support Microsoft ActiveX:

24

• Automatic prompting for Microsoft ActiveX controls
• Download signed Microsoft ActiveX controls
• Run Microsoft ActiveX controls and plug-ins
• Script Microsoft ActiveX controls marked safe for scripting
• support for JavaScript
• cookies turned on
• support for TLS or SSL
• the SSL certificate installed to permit trusted connections to the BlackBerry Administration Service
• if using Windows Vista, the BlackBerry Administration Service web address added as a trusted web site and Enable protected mode cleared
• if you configure single sign-on authentication for the BlackBerry Administration Service
• the BlackBerry Web Desktop Manager and BlackBerry Administration Service web sites assigned to the local intranet zone
• Enable Integrated Windows Authentication selected
• if you do not configure single sign-on authentication for the BlackBerry Administration Service
• the BlackBerry Web Desktop Manager and BlackBerry Administration Service web sites assigned to the local intranet or trusted sites security zone
browser settings for Firefox, Safari, and To support browser access, you must configure the following settings: Google Chrome • support for JavaScript
• cookies turned on
• support for TLS or SSL
• to permit trusted connections to the BlackBerry Administration Service, the SSL certificate installed
Single sign-on authentication for the BlackBerry Administration Service is not supported by Google Chrome.
Requirement

Installation and Configuration Guide

System requirements

Item

25

Installation and Configuration Guide

System requirements

System requirements: Messaging server

Any of the following messaging servers that are located in close proximity to where you want to install the primary BlackBerry Enterprise Server:

Microsoft Exchange 2010 SP1 Multi-Tenant Deployment is supported with the following conditions:

Microsoft Exchange Server 2010 SP1 Update Rollup 3

To manage calendars, enable Microsoft Exchange Web Services

Configure the BlackBerry Enterprise Server to run without public folders

Microsoft Exchange Server 2010 SP1

Microsoft Exchange Server 2010 and Microsoft Exchange Server 2010 Update Rollup 1 (Microsoft Exchange Server MAPI Client and CDO 1.2.1 must be version 6.5.8211.0 or later to support Microsoft Exchange Server 2010)

Microsoft Exchange Server 2007 SP2 or SP3

Microsoft Exchange Server 2003 SP2

Any of the following Microsoft Exchange mixed environments:

Microsoft Exchange Server 2003 and 2007

Microsoft Exchange Server 2007 SP2 and 2010

Microsoft Exchange Server 2007 SP2 and 2010 SP1

Microsoft Exchange Server 2007 SP3 and 2010

Microsoft Exchange Server 2007 SP3 and 2010 SP1

System requirements: Firewall

To install the BlackBerry Enterprise Server, configure a firewall or proxy firewall with the following conditions:

Exclusive use of port 3101 to open and maintain an outbound, bidirectional TCP/IP connection to an external server

Support for resolving Internet addresses that use DNS

For proxy firewalls, transparency of the proxy server

26

Installation and Configuration Guide

System requirements

System requirements: Instant messaging server

To install the BlackBerry Enterprise Server, any of the following instant messaging servers:

IBM Sametime 7.0 Community Server

IBM Sametime 7.5 Community Server

IBM Sametime 8.0 Community Server

IBM Sametime 8.0.1 Community Server

IBM Sametime 8.0.2 Community Server

IBM Sametime 8.5 Community Server

Microsoft Office Live Communications Server 2005 SP1 Standard or Enterprise

Microsoft Office Communications Server 2007 Standard or Enterprise

Microsoft Office Communications Server 2007 R2

Microsoft Lync Server 2010

Novell GroupWise Messenger 2.0 or later

Supported features and environments

Item

BlackBerry Enterprise Server

 

 

Virtual environment

For information, please visit www.blackberry.com to read KB 29661.

 

 

Enhanced network

All BlackBerry Enterprise Server components support RSA Authentication Agent 6.1 for

authentication

Windows Server 2003 and RSA Authentication Agent 7.0.1 for Windows Server 2008.

 

 

IP

BlackBerry Enterprise Server components support only IPv4 for TCP/IP connections.

 

 

SNMP monitoring

The BlackBerry Enterprise Server components support the SNMP service.

 

 

Remote access

The BlackBerry Enterprise Server components support remote access by administrators who

 

use Remote Desktop Connection.

 

 

27

Installation and Configuration Guide

System requirements

Unsupported environments

Item

Description

 

 

DMZ

The BlackBerry Enterprise Server and BlackBerry Enterprise Server

 

components, with the exception of the BlackBerry Router, do not support

 

installation in a DMZ.

 

 

messaging server

The BlackBerry Enterprise Server for Microsoft Exchange (and all BlackBerry

 

Enterprise Server components) does not support installation on the computer

 

that hosts the messaging server.

 

 

email application

The BlackBerry Enterprise Server and BlackBerry Enterprise Server components

 

do not support installation on computers that host email applications such as

 

Microsoft Outlook. Email applications use data files that can cause conflicts with

 

the BlackBerry Enterprise Server components. As a result, the BlackBerry

 

Enterprise Server components might not function as expected.

 

 

instant messaging server

Any of the following environments:

 

• If you configure the BlackBerry Enterprise Server for high availability, the

 

primary BlackBerry Enterprise Server instance and standby BlackBerry

 

Enterprise Server instance do not support more than one type of instant

 

messaging server in a BlackBerry Enterprise Server pair. For example, if you

 

install the BlackBerry Collaboration Service for use with Microsoft Office

 

Communications Server 2007 on the primary instance, you must also install

 

the BlackBerry Collaboration Service for use with Microsoft Office

 

Communications Server 2007 on the standby instance.

 

• A BlackBerry Enterprise Server or BlackBerry Enterprise Server pair that

 

connects to multiple instances of the BlackBerry Collaboration Service does

 

not support more than one type of instant messaging server. You must use

 

the same type of instant messaging server for each local or remote

 

BlackBerry Collaboration Service that you connect to a BlackBerry

 

Enterprise Server or BlackBerry Enterprise Server pair.

 

 

BlackBerry Collaboration Service

If you install the BlackBerry Collaboration Service for use with Microsoft Lync

 

Server 2010, the BlackBerry Collaboration Service does not support using

 

ocscore.msi or ucmaredist.msi from the Microsoft Lync Server 2010 installation

 

files on the computer that you install the BlackBerry Collaboration Service on.

 

You must use ocscore.msi and ucmaredist.msi from Microsoft Office

 

 

28

Installation and Configuration Guide System requirements

Item

Description

 

 

 

Communications Server 2007 R2. For more information, visit the Volume

 

Licensing Service Center at www.microsoft.com.

 

 

BlackBerry Attachment Service

You must install the software update for KB22953 on Windows Server 2008 if

 

you want the BlackBerry Attachment Service to support .mp3 audio files on

 

BlackBerry devices and all audio formats on BlackBerry 7100 Series devices

 

that support CDMA networks. To download the software update for KB22953,

 

visit www.blackberry.com/support/downloads/.

 

 

Remote Desktop Services or Terminal

The BlackBerry Enterprise Server and BlackBerry Enterprise Server components

Services

do not support installation on a computer that you installed Remote Desktop

 

Services or Terminal Services on.

 

 

29

Installation and Configuration Guide

Preinstallation tasks

Preinstallation tasks

 

5

 

 

Configuring a Microsoft Exchange 2010 messaging environment

Create a Windows account that has a Microsoft Exchange 2010 mailbox

You must create a Windows account with a Microsoft Exchange 2010 mailbox so that the Windows account can authenticate with the Microsoft Exchange Server.

Before you begin: If you want free/busy lookups to work in Microsoft Outlook 2003 and earlier, you must configure Microsoft Exchange 2010 to support Microsoft Outlook 2003 and earlier by creating a public folder database. For more information about supporting Microsoft Outlook 2003 and earlier, visit http://support.microsoft.com to read article 555851 and visit http://technet.microsoft.com to read articles 123694, 124270, 397221, and 691120.

1.On the computer that hosts Microsoft Exchange, log in using an administrator account that has the permission to create accounts.

2.Open the Microsoft Exchange Management Console.

3.Create an account and mailbox that you name BESAdmin.

4.To permit the BlackBerry Enterprise Server to check if a BlackBerry device user has permission to access a public folder, assign the Owner permission for all public folders to the administrator account.

After you finish:

To verify that you created the Windows account, log in to a computer using the Windows account.

Verify that the Windows account is not a member of the Domain Administrators group in Microsoft Active Directory.

Verify that BlackBerry device users have Read permissions and Visible permissions to public folders.

To permit BlackBerry device users to check the availability of meeting participants using BlackBerry Device Software 4.5 or later, configure the Schedule+ Free/Busy information for the system public folder. For more information, visit http://technet.microsoft.com to read articles 629523 and 691129.

30

Installation and Configuration Guide

Preinstallation tasks

Configure Microsoft Exchange 2010 permissions for the Windows account

Before you begin:

Verify the domain name in Microsoft Active Directory. When you set the permissions, you must match the domain name in Microsoft Active Directory.

1.On a computer that hosts the Microsoft Exchange Management Shell, open the Microsoft Exchange Management Shell.

2.Type Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight - ExtendedRights Receive-As, ms-Exch-Store-Admin, ms-Exch-Store-Visible.

3.Type Add-RoleGroupMember "View-Only Organization Management" -Member "BESAdmin".

4.Do one of the following:

To set the permissions at the organizational unit level, type the following command:

Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -User "BESAdmin" -Identity "OU=<organizational_unit>,DC=<domain_1>,DC=<domain_2>,DC=<domain_3>"

For example, if the organizational unit is Texas and the domain name is example.organization.net, type Texas for <organizational_unit>, example for <domain_1>, organization for <domain_2>, and net for <domain_3>.

To set the permissions at the common name level, type the following command:

Add-ADPermission -InheritedObjectType User -InheritanceType Descendents -ExtendedRights Send-As -User "BESAdmin" -Identity "CN=<common_name>,DC=<domain_1>,DC=<domain_2>,DC=<domain_3>"

For example, if the common name is Users and the domain name is example.organization.net, type Users for <common_name>, example for <domain_1>, organization for <domain_2>, and net for <domain_3>.

In each command, <domain_1>, <domain_2>, and <domain_3> form the internal Microsoft Active Directory domain (if internal and external domain names are different). You can contact your Microsoft Active Directory administrator for information about distinguished names.

After you finish: If you create a mailbox database for Microsoft Exchange, repeat step 2.

Increase the maximum number of connections to the Address Book service in Microsoft Exchange 2010

By default, Microsoft Exchange 2010 limits the maximum number of connections from the BlackBerry Enterprise Server to the Address Book service to 50. To permit the BlackBerry Enterprise Server to run, you must increase the number of permitted connections to a large value (for example, 100,000).

31

+ 72 hidden pages