Create a key store to store certificates for use withHTTPS connections
You must create a key store to store the certificates that permit the BlackBerry MDS Connection Service to accept HTTPS
connections from push applications.
1. On the computer that hosts the BlackBerry MDS Connection Service, on the taskbar, click Start > Programs >
BlackBerry Enterprise Server > BlackBerry Server Configuration.
2. On the Mobile Data Service tab, configure the key store information. Only one key store can exist. The file must be
named webserver.keystore and it must be located at <drive>:\Program Files\Research In Motion\BlackBerry
Enterprise Server\MDS\webserver .
3. Click Create Keystore File.
4. If prompted to overwrite a key store, click Yes.
5. Click OK.
Add a certificate for the BlackBerry MDS Connection
Service
To permit server-side push applications to open trusted HTTPS connections to a BlackBerry MDS Connection Service and
push application data and application updates to BlackBerry devices, you must add a certificate for the BlackBerry MDS
Connection Service to the webserver.keystore file.
1. On the computer that hosts the BlackBerry MDS Connection Service, navigate to <drive>:\Program Files\Java
\<JRE_version>\bin .
2. At the command prompt, perform one of the following tasks:
Task Steps
Create a self-signed certificate for
the BlackBerry MDS Connection
Service and add it to the key store.
1. Type keytool -genkey -alias tomcat -keyalg RSA -keystore
webserver.keystore.
2. Type the required information.
3. To confirm the information that you typed, type Yes.
Add a publicly signed certificate to
the key store. 1. Type keytool -import -trustcacerts -alias tomcat -file

<trustedserver.cer>

-keystore webserver.keystore.
2. Type the key store password.
Administration Guide Configuring how users access enterprise applications and web content
189