Administration Guide

Configuring how users access enterprise applications and web content

Create a key store to store certificates for use with HTTPS connections

You must create a key store to store the certificates that permit the BlackBerry MDS Connection Service to accept HTTPS connections from push applications.

1.On the computer that hosts the BlackBerry MDS Connection Service, on the taskbar, click Start > Programs > BlackBerry Enterprise Server > BlackBerry Server Configuration.

2.On the Mobile Data Service tab, configure the key store information. Only one key store can exist. The file must be named webserver.keystore and it must be located at <drive>:\Program Files\Research In Motion\BlackBerry Enterprise Server\MDS\webserver .

3.Click Create Keystore File.

4.If prompted to overwrite a key store, click Yes.

5.Click OK.

Add a certificate for the BlackBerry MDS Connection Service

To permit server-side push applications to open trusted HTTPS connections to a BlackBerry MDS Connection Service and push application data and application updates to BlackBerry devices, you must add a certificate for the BlackBerry MDS Connection Service to the webserver.keystore file.

1.On the computer that hosts the BlackBerry MDS Connection Service, navigate to <drive>:\Program Files\Java \<JRE_version>\bin .

2.At the command prompt, perform one of the following tasks:

Task

Steps

 

 

 

Create a self-signed certificate for

1.

Type keytool -genkey -alias tomcat -keyalg RSA -keystore

the BlackBerry MDS Connection

 

webserver.keystore.

Service and add it to the key store.

2.

Type the required information.

 

3.

To confirm the information that you typed, type Yes.

 

 

 

Add a publicly signed certificate to

1.

Type keytool -import -trustcacerts -alias tomcat -file <trustedserver.cer>

the key store.

 

-keystore webserver.keystore.

 

2.

Type the key store password.

 

 

 

189

Page 189
Image 189
Blackberry SWD-20120924140022907 manual Add a certificate for the BlackBerry MDS Connection Service