BlackBerry Enterprise Server has several advantages for mobile Exchange Server users, including high availability,
the ability to create groups and the ability to manage applications and policies. Once you’ve identified the prerequisites for deploying BES on Exchange Server 2010, follow this step-by-step guide to install and verify the latest version of the server -- BES 5.0.2. Then, check out the author’s key tips on how to test your setup.
First, ensure that you have the following before starting the install process:
- BlackBerry client access license (CAL) key
- SRP host in BlackBerry Enterprise Server version 5.0 and later; the format of the SRP host is different from earlier versions
- SRP identifier
- SRP key
- Computer name and port number of the instant messaging server -- use the virtual server name and port number where the AJAX service is installed, if applicable
- Computer name and port number of the proxy server, if applicable
To install BES 5.0.2:
- Log on using the BESAdmin account.
Locate the BES 5.0.2 installation files and double-click on Setup.exe (Figure 1).
Select the language you want to use and click OK (Figure 2).
Confirm that the Account and Domain are correct and click Continue Installation, as shown in Figure 3.
- Populate the following fields: User name, Organization and Country/Region. Read the license agreement; accept the terms and click Next.
Select Create a BlackBerry Configuration Database and click Next (Figure 4). You only need to make this selection for the first Blackberry Enterprise Server in the organization; additional servers can use an existing configuration database.
- Leave the default components as they are listed and click Next. In this tip, we will install only default components. Additional components can be installed later.
- Read the Reinstallation checklist and confirm status of each item, then click Next.
If you have a SQL Server installed on another server, select the second radio button (Figure 5). If you do not have another SQL Server, you need to allow setup to install Microsoft SQL Server 2005 Express Edition SP3 on the BES computer. In these steps, we’re going to install a local instance of SQL Server 2005 Express.
- Click Next.
- Type the password for the BESAdmin account.
Type the name of the server that you want the BlackBerry Administration Service to display (Figure 6)
- Click Next.
Read the summary information and confirm that it’s correct, then click Install, as shown in Figure 7.
- Click Yes to allow the installation to restart the computer.
- Log on as BESAdmin again.
- Verify that the database location (Local or Remote) is correct.
- Type the name of the configuration database (BESMgmt is the default).
- If your SQL Server is configured for a static port, be sure to enter the correct port number, typically 1433. This example uses the Dynamic port.
Select the Database Authentication type -- Windows authentication or SQL Server authentication. We will leave the default of Windows Authentication (Figure 8).
- Click Next, then Yes to create a new database and then click OK to confirm.
- Provide your CAL key.
- Type the address of the BlackBerry Infrastructure in the host name field.
- Type the port number of the BlackBerry Infrastructure (default is 3101) and click Verify.
- Type the SRP identifier in SRP Identifier field.
Type the SRP key in the SRP authentication key field and click Verify (Figure 9).
- Click Next, then type the name of the Exchange Server in the Microsoft Exchange Server dialog box.
- Type BESAdmin in the mailbox field.
- Click Check Name, Apply and then OK.
- Type an FQDN for the pool name. This will be used for the MDS Integration Service pool. The default will be the FQDN of your BES server.
- Verify that the port numbers are accurate.
- Type a new password for the SSL certificate, confirm the password and then click Next.
Type the password for the BESAdmin account and click Next (Figure 10).
- Select the advanced administration settings that you want to use, type your username and password and then click Next.
Click the Start Services button (Figure 11).
- Click Next.
HINT: Add the Web addresses to your browser favorites; these links will be helpful after you complete the installation.
- Click Finish and then click Save to export the console addresses to the ConsoleAddresses.txt file.
Test and verify your BES 5.0.2 installation
Once you’ve installed the BlackBerry Enterprise Server, you should test the service to ensure it is running correctly and without interruption. The first step is to create a BlackBerry-enabled user via the BlackBerry Administration Service (Figure 12) using the following steps:
- Open the BlackBerry Administration Service (Start -> All Programs -> BlackBerry Enterprise Server -> BlackBerry Administration Service) or use the URL provided during setup.
- On the homepage, select Create a user
- Type the name of the user in the messaging server display name field and click Search.
- Check the box next to the name of the account and click Continue.
- Select the appropriate BES instance.
- As an option, you can select a group to add the user to and click Add.
- Choose an option for the Activation Password. If you are not sure which option to choose, you can create a user with activation password.
- Type and confirm your activation password.
HINT: Do not use any special characters for the activation password. Some devices do not support special characters. At a minimum, the device must support BlackBerry Device Software version 4.0 or higher.
- Set a password expiration for the activation password.
- Click Create a user.
If either the BAS-AS and or BAS-NCC services (BlackBerry Administration Services) stops and restarts or runs very slowly after installation, you may have an incompatible security hotfix installed on Windows Server 2008 or Windows Server 2008 R2. Read BlackBerry KB23927 for a workaround.
Next, activate a device for your BlackBerry-enabled user. If the device was previously used by someone else, you may need to remove the last user’s data from the device. To do this from the BAS Web console:
- Connect the device to the computer from which you’re accessing the BAS console.
- Expand Attached Devices
- Select Manage current device
- Verify that the device’s PIN is displayed.
- Select Remove user data from current device.
Select Yes – Remove user data, as shown in Figure 13.
Users can also wipe data from a device, but you’ll need to refer to documentation for that particular device. Once data has been removed, the device will restart. After the restart, continue by activating the device for the new user.
There are a variety of ways to activate a device, including wireless activation and via the BAS Web console. Wireless activation, in which users perform the steps themselves, is probably the most desirable method. A user’s phone will need to be connected to the provider’s network to successfully activate.
If they don’t have a connection to the provider network, they can use the BlackBerry Desktop Manager. This tool is available for Mac and PCs users; it’s extremely helpful for patching and updating the device OS and software. Under Device Options in the Desktop Manager tool, you can navigate to the Enterprise Email tab, which lets you configure and activate the device for Exchange Server 2010 (Figure 14).
This is not the same tool as the BlackBerry Web Desktop Manager; it’s not possible to use the Web Desktop Manager to perform an activation process. It is possible, however, to create a new activation password using the manager. The latest version of the BlackBerry Web Desktop Manager also allows users to change their passwords without having to call help desk.
If you are an administrator and you need to activate a device for a user, use the BlackBerry Administration Service (BAS) Web console and the following steps.
- Connect the device to the computer running the BAS Web console.
- Expand Attached Devices.
- Select manage current device.
- Verify the device’s PIN.
- Select Assign the current device to a user.
- In the Search for users dialog box, type the name of the user in the Display Name field and click Search.
- Select the radio button next to the correct user.
- Click Associate user.
- Review the device PIN and user information.
Select Yes - Assign the device, as shown in Figure 15.
If the installation is successful, you will see a message on the screen stating: The device that is connected to your computer has been activated. At the same time, the device will begin to synchronize. Once the initial synchronization is complete, the device will display: Activation is Complete. Your device is now ready to send and receive email.
ABOUT THE AUTHOR:
Richard Luckett is president of SYSTMS of NY, Inc., a Microsoft Gold Partner providing professional services, managed services and training solutions. He is an MCSE, MCITP and MCTS with security and messaging specializations, and an MCT with nine years of Exchange training experience. Richard is an Exchange MVP award recipient, co-author of Administering Exchange 2000 Server and Exchange Server 2007: The Complete Reference, course director and author of seven Microsoft Exchange courses, and resident email security expert for SearchExchange.com Contact him at Richard.Luckett@systmsny.net.