- BlackBerry Enterprise Service 10 version 10.2
BlackBerry Enterprise Service 10 version 10.2 introduces the ability to install the software in an environment with no connectivity out to the Internet or the BlackBerry Infrastructure.
This feature is sometimes referred to as a Dark Site installation.
Dark Site installations of the BlackBerry Enterprise Service 10 version 10.2 software is meant to function with no connectivity to the Internet and no connectivity to BlackBerry's Infrastructure.
Instead, devices must rely on direct connectivity via Enterprise WiFi or Enterprise VPN connections.
Dark Site installations of BlackBerry Enterprise Service 10 version 10.2 will only support the management of BlackBerry smartphones.
Managing iOS and Android devices via the Universal Device Service component will not be available.
Note: There are several differences to be aware of when BlackBerry Enterprise Service 10 version 10.2 software is installed:
- During the installation process there is no longer a prompt to enter an SRP/Authentication key, as this information is not necessary for a Dark Site installation.
- The BlackBerry MDS Connection Service will be installed, but it will be stopped and disabled under Windows Services. This service is not necessary for a Dark Site installation.
- The BlackBerry Universal Device Service CORE and COMM services will not be installed. These services are not available in a Dark Site installation.
- Some items will be hidden within the BlackBerry Administration Service:
- Device Activation Setting to turn on Activate via SRP and Activate via Discovery Service.
- SRP information will not be displayed.
- BlackBerry MDS Connection Service will not be listed.
Steps to install the software:
- Copy the BES installation files on the machine that do not have Internet Connectivity
- From Command prompt, go the folder where BES installation files are copied and run the setup using /nosrpmode command: <drive>:\<BES Installation files>\Setup.exe /nosrpmode (Note: this will install BDS and Management Studio only - UDS is not included in Dark Site installation).
- Continue with the installation; Installer will not ask for SRP Information in Dark Site mode and will not prompt and install UDS part.
OTA Enrollment will not be available in a Dark Site installation because the BlackBerry smartphone will have no way of communicating with BlackBerry Enterprise Service 10.
The only supported method to enroll devices is through the BAS via USB connection.
See the Advanced Administration Guide - BlackBerry Device Service version 10.2 page 99 for instructions on enrolling devices through this method.
Device Connectivity into the Organization:
In order for BlackBerry smartphones to connect into the organization's infrastructure in a Dark Site environment, the devices will need direct connectivity via either Enterprise WiFi or Enterprise VPN profiles.
Even if there is a public facing ActiveSync URL available, MDM management and secure workspace email will not function unless the user has Enterprise WiFi and/or Enterprise VPN profiles pushed via BlackBerry Enterprise Service 10.
See the Advanced Administration Guide - BlackBerry Device Service version 10.2 page 26 for more information on managing profiles.
DeviceCharacteristics.xml and Vendor.xml are downloaded from BlackBerry.com to get the latest information regarding devices and vendors. In server with not internet access, these must be hosted internally. Follow the steps below to host the files internally on one of the BAS webservers and configure the BlackBerry Administration Service to retrieve the file locally.
- Download the latest DeviceCharacteristics.XML from BlackBerry https://www.blackberry.com/Desktop/Download/XML/600/DeviceCharacteristics.xml, and the Vendor.xml https://www.blackberry.com/Desktop/Download/XML/Vendor.xml.
- Copy the XML files into one of the BAS nodes under the following: <DRIVE>:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Service 10\BAS\server\default\deploy\999basClientWebAdminConsole.war
- Use the trait tool to update traitId 36 to http://<FQDN>:<HTTP_PORT>/webconsole/DeviceCharacteristics.xml, where FQDN is the FQDN of the BAS Node where the file was copied and HTTPS_PORT is the HTTPS PORT configured the BAS default is 38443.
- Use the trait tool to update traitId 37 to http://<FQDN>:<HTTP_PORT>/webconsole/Vendor.xml, where FQDN is the fully qualified domain name of the BAS Node where the file was copied and HTTP_PORT is the HTTP_PORT configured for BAS, the default is 38180.
- Restart the BAS – AS Service and BAS - NCC services.
- Periodically check for updates of these files from BlackBerry, and repeat step 1 and 2 above.
Known issues for BlackBerry Enterprise Service 10 version 10.2 installed in dark site mode
DT 8410844 - BES instance name is editable when re-run installer after uninstall with a BES in No SRP Mode.
Workaround: BES instance name should be greyed out following a re-install of the software. It is recommended preserve the BES instance name when re-installing.
DT 8252314 - A Warning stating Unable to connect to Core Module may appear whilst uninstall the BlackBerry Enterprise Service 10 in No SRP Mode.
Workaround: Ignore the warning message and proceed with the uninstall as normal
DT 8193970 - “Trial Expired” msg is displayed for 30 minutes or so then disappears when Trial license is replaced with Subscription License in BES in No SRP Mode.
Workaround: Ignore the warning related to the license and wait 30 minutes for License information to update after trial expires.
By downloading, accessing or otherwise using the Knowledge Base documents you agree:
(b) not to copy, distribute, disclose or reproduce, in full or in part any of the documents without the express written consent of RIM.
Visit the BlackBerry Technical Solution Center at www.blackberry.com/btsc.