Configuring BlackBerry Enterprise Service 10 for the first time
The following table describes, at a high level, the mandatory configuration tasks that you must complete after you install BlackBerry Enterprise Service 10, and the optional configuration tasks you can complete to meet your organization's needs.
This is not a complete list of all of the configuration tasks that are covered in this guide. Review all sections of the guide to identify additional tasks that might be appropriate for your organization’s environment.
|
Task |
Mandatory or Optional |
Description |
Resource |
|---|---|---|---|
|
Obtain and activate licenses |
Mandatory |
To manage user accounts and devices, you must obtain and activate the appropriate licenses. |
BlackBerry Enterprise Service 10 Licensing Guide |
|
Import a new SSL certificate into the web keystores |
Optional |
To meet your organization’s security requirements, you can import a new SSL certificate that the administration consoles and other components use to authenticate with browsers. |
|
|
Verify that the required external and internal ports are open |
Mandatory |
You must verify that the appropriate ports are available for components to connect to external resources, each other, and to devices. |
|
|
Connect to the BlackBerry Infrastructure through a TCP proxy server |
Optional |
To meet your organization’s security standards and firewall rules, you can configure the BlackBerry Secure Connect Service to connect to the BlackBerry Infrastructure by routing data through a TCP proxy server. |
|
|
Connect BlackBerry Enterprise Service 10 to the company directory |
Mandatory |
You must connect BlackBerry Enterprise Service 10 to the company directory so that BlackBerry Enterprise Service 10 can access user data. |
Connecting BlackBerry Enterprise Service 10 to a company directory |
|
Configure single sign-on for the administration consoles |
Optional |
You can configure single sign-on authentication so that you do not have to log in to the administration consoles manually. |
Configuring single sign-on for the BlackBerry Enterprise Service 10 consoles |
|
Configure high availability for the core components |
Optional |
To enhance the stability and reliability of your environment, you can install and configure a standby instance of the core components that serves as a back-up to the primary instance. |
Configuring high availability for BlackBerry Enterprise Service 10 |
|
Configure high availability for the BlackBerry Enterprise Service 10 databases |
Optional |
To retain database service and data integrity if issues occur with the BlackBerry Enterprise Service 10 databases, you can install and configure mirror databases that serve as a back-up to your principal databases. |
Configuring high availability for BlackBerry Enterprise Service 10 databases |
|
Configure support for Microsoft ActiveSync gatekeeping |
Optional |
If you configured Microsoft Exchange to block devices from using Microsoft ActiveSync unless the devices are added to an allowed list, you must configure BlackBerry Enterprise Service 10 to support this feature. |
Using gatekeeping to control which devices can access Microsoft ActiveSync |
|
Configure the BlackBerry Administration Service to use a proxy server |
Optional |
To meet your organization’s security requirements, you can configure the BlackBerry Administration Service to route data through a proxy server. |
Configuring the BlackBerry Administration Service to use a proxy server |
|
Create a shared network folder for distributing apps to devices |
Optional |
If you want to use BlackBerry Enterprise Service 10 to distribute apps to devices, you must specify a shared network folder that the BlackBerry Administration Service can use to store and distribute apps. |
Creating a shared network folder for distributing apps to devices |
|
Monitor BlackBerry Enterprise Service 10 components |
Optional |
You can use third-party SNMP tools to monitor the activity of certain BlackBerry Enterprise Service 10 components. |
|
|
Configure SMTP server settings |
Optional |
When you activate users, if you want BlackBerry Enterprise Service 10 to send activation emails to users, you must specify the SMTP server settings that the BlackBerry Device Service and the Universal Device Service can use. |
Connect to an SMTP server to send email notifications to users |
|
Enable the work space |
Optional |
To support the work space for iOS and Android devices, you must configure an SSL connection between BlackBerry Enterprise Service 10 and the Microsoft Exchange Server, and configure the BlackBerry Work Connect Notification Service. |
Enabling the Secure Work Space for iOS devices and Android devices |
|
Install APNs certificates |
Optional |
If you want to manage and send data to iOS devices, you must obtain a signed CSR from BlackBerry, then you must obtain an APNs certificate from Apple and install it in your BlackBerry Enterprise Service 10 domain. |
|
|
Install a new SSL certificate for the Communication Module |
Optional |
To satisfy your organization’s security requirements, you can install a new SSL certificate that the Communication Module uses during the activation process. |
|
|
Configure BlackBerry Management Studio to connect to additional domains |
Optional |
If your organization's environment includes additional BlackBerry Enterprise Service 10 domains, BlackBerry Enterprise Server 5.0 SP3 or later, or BlackBerry Enterprise Server Express 5.0 SP3 or later, you can configure BlackBerry Management Studio to connect to those domains. |