Install or update an SSL certificate for the Communication Module

You can install an SSL certificate to replace the default self-signed certificate that is installed automatically when you install BlackBerry Enterprise Service 10. If you replace the default certificate, the new certificate might need to be updated again in the future. You must update the SSL certificate at least 14 days before the certificate expiry date. If you update the SSL certificate after that time, devices do not reactivate automatically and users must activate the devices manually.
Before you begin: If you do not already have an SSL certificate, see, Requesting an SSL certificate for the Communication Module.
  1. On a computer that hosts an instance of the BlackBerry Enterprise Service 10 core components, right-click the BES10 Configuration Tool and select Run as administrator.
  2. On the Communication Module tab, select the location for the SSL certificate, and type the password.
  3. Click OK.
  4. Restart Microsoft IIS on the computer.
  5. Repeat steps 1 to 4 for each instance of the BlackBerry Enterprise Service 10 core components.
After you finish:
  • Ensure that you have the SSL certificate's root CA certificate and any intermediate CA certificates in the certificate store on each computer that hosts an instance of the BlackBerry Enterprise Service 10 core components.
  • When users open the BES12 Client on their devices, the devices reactivate and the SSL certificate is updated.