Administration Guide

Configuring BlackBerry devices to enroll certificates over the wireless network

Custom Microsoft Certificate Authority Certificate Template

Distinguished Name Components

Key Algorithm

Key Length

Microsoft Certificate Authority Certificate Template

RSA Certificate Authority Certificate ID

RSA Jurisdiction ID

A certificate enrollment process does not delete the existing certificate from the device key store or notify the certification authority that the certificate is no longer in use. The BlackBerry Enterprise Server deletes the existing certificate from the BlackBerry Configuration Database when the certificate enrollment process starts for a new certificate.

Also, if a certificate is expired or revoked, you or a BlackBerry device user can update the certificates on the device using the certificate synchronization tool in the BlackBerry Desktop Software or by copying an updated certificate from a media card or smart card.

For more information about deleting or revoking certificates, see the user guide for the device.

Change the polling interval, logging, and pool size for the BlackBerry MDS Connection Service connection to the certificate authority

You can turn on logging or change the polling interval and pool size for the BlackBerry MDS Connection Service connection to the certificate authority, as required by your organization's environment.

1.On the computer that hosts the BlackBerry MDS Connection Service, navigate to <drive>:\Program Files\Research In Motion\BlackBerry Enterprise Server\MDS\Servers\instance\config .

2.In a text editor, open the rimpublic.properties file.

3.In the rimpublic.properties file, type the appropriate properties and values.

4.Save and close the rimpublic.properties file.

5.In the Windows Services, restart the BlackBerry MDS Connection Service service.

Related information

Restarting BlackBerry Enterprise Server components, 392

222

Page 222
Image 222
Blackberry SWD-20120924140022907 manual Related information, 222