Blackberry SWD-20120924140022907 manual Administration Guide

Administration Guide Configuring how users access enterprise applications and web content

Configuring the BlackBerry MDS Connection Service to authenticate devices to the RSA Authentication Manager

You can configure the BlackBerry MDS Connection Service to require that BlackBerry device users pass RSA authentication when they access the Internet or intranet from BlackBerry devices. You can configure the BlackBerry MDS Connection Service to require that users use RSA authentication in one of the following scenarios:

•when users access every web site and intranet site from devices

•when users access intranet sites from devices

•when users access web addresses or intranet addresses that you specify

If you configure the BlackBerry MDS Connection Service to require that users use RSA authentication to access web addresses or intranet addresses that you specify, you can choose to apply this option to specific user accounts or to all user accounts that are associated with a BlackBerry Enterprise Server instance.

After the RSA Authentication Manager authenticates the devices, if you configured proxy authentication, the devices prompt users to authenticate to the proxy server.

Prerequisites: Configuring the BlackBerry MDS Connection Service to support RSA authentication when the BlackBerry MDS Connection Service runs on Windows Server 2008

•If required, remove the RSA Authentication Agent from the computer that hosts the BlackBerry MDS Connection Service.

•If required, in the RSA Authentication Manager, delete the node secret data for the computer that hosts the BlackBerry MDS Connection Service.

•If required, delete the node secret data that is located on the computer that hosts the BlackBerry MDS Connection Service.

•Retrieve the RSA Authentication API version 5.0.3.2 from RSA.

Configure the BlackBerry MDS Connection Service to support RSA authentication when the BlackBerry MDS Connection Service runs on Windows Server 2008

1.On the computer that hosts the BlackBerry MDS Connection Service, copy the aceclnt.dll file and sdmsg.dll file from the RSA Authentication API to one of the following folders:

• If you are running a 32-bit version of Windows Server 2008, the <drive>:\WINDOWS\system32 folder

184