Custom Microsoft Certificate Authority Certificate Template
Distinguished Name Components
Key Algorithm
Key Length
Microsoft Certificate Authority Certificate Template
RSA Certificate Authority Certificate ID
RSA Jurisdiction ID
A certificate enrollment process does not delete the existing certificate from the device key store or notify the certification
authority that the certificate is no longer in use. The BlackBerry Enterprise Server deletes the existing certificate from the
BlackBerry Configuration Database when the certificate enrollment process starts for a new certificate.
Also, if a certificate is expired or revoked, you or a BlackBerry device user can update the certificates on the device using
the certificate synchronization tool in the BlackBerry Desktop Software or by copying an updated certificate from a media
card or smart card.
For more information about deleting or revoking certificates, see the user guide for the device.
Change the polling interval, logging, andpool size for the BlackBerry MDSConnection Service connection to thecertificate authority
You can turn on logging or change the polling interval and pool size for the BlackBerry MDS Connection Service connection
to the certificate authority, as required by your organization's environment.
1. On the computer that hosts the BlackBerry MDS Connection Service, navigate to <drive>:\Program Files\Research In
Motion\BlackBerry Enterprise Server\MDS\Servers\instance\config .
2. In a text editor, open the rimpublic.properties file.
3. In the rimpublic.properties file, type the appropriate properties and values.
4. Save and close the rimpublic.properties file.
5. In the Windows Services, restart the BlackBerry MDS Connection Service service.
Related information
Restarting BlackBerry Enterprise Server components, 392
Administration Guide Configuring BlackBerry devices to enroll certificates over the wireless network
222