Architecture and Data Flow Overview. BlackBerry Enterprise Service Version: Quick Reference

Size: px
Start display at page:

Download "Architecture and Data Flow Overview. BlackBerry Enterprise Service 10 721-08877-123 Version: 10.2. Quick Reference"

Transcription

1 Architecture and Data Flow Overview BlackBerry Enterprise Service Version: Quick Reference

2 Published: SWD

3 Contents Key components of BlackBerry Enterprise Service Key components used to manage BlackBerry 10 devices and BlackBerry PlayBook tablets... 6 Key components used to manage ios devices and Android devices...9 BlackBerry Enterprise Service 10 and the BlackBerry Infrastructure authentication...13 Data flow: Authenticating the BlackBerry Device Service with the BlackBerry Infrastructure...13 Data flow: Authenticating the Universal Device Service with the BlackBerry Infrastructure...13 BlackBerry device data flows...15 Data flow: Activating a BlackBerry device Data flow: Receiving and organizer data on a BlackBerry device Data flow: Sending policy and profile updates to BlackBerry devices Data flow: Sending app updates to BlackBerry devices ios and Android device data flows Data flow: Activating an ios device Data flow: Activating an Android device Data flow: Receiving and organizer data on ios and Android devices...30 Data flow: Receiving and organizer data on ios and Android devices with a work space Troubleshooting app, policy, and profile updates for ios and Android devices About the BES10 Client and the ios MDM Daemon...33 Data flow: App, policy, and profile updates that use the BES10 Client on ios and Android devices Data flow: App, policy, and profile updates that use the MDM Daemon on ios devices Glossary...37 Legal notice... 39

4 Key components of BlackBerry Enterprise Service 10 Key components of BlackBerry Enterprise Service

5 Key components of BlackBerry Enterprise Service 10 BlackBerry Management Studio The BlackBerry Management Studio is a web application that you can use to do the following: Administer licenses for the BlackBerry Enterprise Service 10 domain Administer ios, Android, BlackBerry 10, and BlackBerry 7.1 or earlier devices, and BlackBerry PlayBook tablets in your organization Allow users to activate devices Assign user accounts to groups based on common criteria, such as user location, organizational group, or device model, and manage the user accounts Assign IT policies to user accounts and groups to customize and control what actions users can perform on their devices View various reports related to the BlackBerry Enterprise Service 10 domain Access the BlackBerry Device Service console and the Universal Device Service console to perform advanced administration tasks The following are the key ports that the BlackBerry Management Studio uses. BlackBerry Management Studio Connection type Default port number Where to configure Inbound and outbound connection between browsers and the BlackBerry Management Studio HTTPS 7443 BES10 Configuration Tool BlackBerry Infrastructure The BlackBerry Infrastructure validates SRP and licensing information for BlackBerry Enterprise Service 10. In addition, the BlackBerry Infrastructure provides a secure connection between your organization and BlackBerry devices, work space enabled Android devices, and work space enabled ios devices. The BlackBerry Infrastructure also provides a secure communication channel for activation and management traffic for all devices. The following are the key ports that the BlackBerry Infrastructure uses. BlackBerry Infrastructure Connection type Default port number Where to configure Registration of activation information and request a signed CSR from BlackBerry when you configure the APNs certificate BlackBerry Enterprise Service 10 outbound initiated, bidirectional TCP traffic HTTPS 443 TCP 3101 BES10 Configuration Tool (for the BlackBerry Router) or the BlackBerry Device Service console (for the

6 Key components of BlackBerry Enterprise Service 10 BlackBerry Infrastructure Connection type Default port number Where to configure BlackBerry Dispatcher) For more information about the range of IP addresses for the BlackBerry Infrastructure, visit to read article KB Key components used to manage BlackBerry 10 devices and BlackBerry PlayBook tablets BlackBerry Device Service console The BlackBerry Device Service console, also known as the BlackBerry Administration Service, is used to manage BlackBerry devices and configure BlackBerry Enterprise Service 10 components. You can manage user accounts and assign groups, administrative roles, software configurations, profiles, and IT policies to user accounts. The BlackBerry Device Service console connects to the BlackBerry Configuration Database and to Microsoft Active Directory. User information updated in Microsoft Active Directory can be synchronized manually with the BlackBerry Device Service console. For example, if a user changes their name, you can immediately update their name in both Microsoft Active Directory and the BlackBerry Device Service console. The following are the key ports that the BlackBerry Device Service console uses. BlackBerry Device Service console Connection type Default port number Where to configure Outbound connections to the BlackBerry Infrastructure to register activation information for BlackBerry devices HTTPS 443 Inbound and outbound connections to the BlackBerry Configuration Database TCP 1433 (for static port) BES10 Configuration Tool Inbound and outbound connection between browsers and the BlackBerry Device Service console HTTPS HTTP BES10 Configuration Tool Enterprise Management Web Service The Enterprise Management Web Service is a set of web services that communicates commands, configuration information, IT policies, VPN profiles, Wi-Fi profiles, SCP profiles, and profiles between the BlackBerry Administration Service and the Enterprise Management Agent on BlackBerry devices

7 Key components of BlackBerry Enterprise Service 10 The following are the key ports that the Enterprise Management Web Service uses. Enterprise Management Web Service Connection type Default port number Where to configure Inbound and outbound connections to the BlackBerry Configuration Database TCP 1433 (for static port) BES10 Configuration Tool Inbound connections from BlackBerry devices for activation (used if you are not activating devices through the BlackBerry Infrastructure) HTTP HTTPS BlackBerry Device Service console BlackBerry MDS Connection Service The BlackBerry MDS Connection Service provides a secure connection between the Enterprise Management Agent on BlackBerry devices and the Enterprise Management Web Service in BlackBerry Enterprise Service 10. The connection is used when the device is not connected to your organization's Wi-Fi network or VPN. The BlackBerry MDS Connection Service is also responsible for providing enterprise push functionality. The following are the key ports that the BlackBerry MDS Connection Service uses. BlackBerry MDS Connection Service Connection type Default port number Where to configure Inbound and outbound connections to the BlackBerry Configuration Database TCP 1433 (for static port) BES10 Configuration Tool Inbound and outbound connection to the BlackBerry Dispatcher TCP 3201 Inbound connection from server-side push applications to BlackBerry MDS Connection Service using web servers (used if you do not set up a proxy server) HTTP HTTPS BlackBerry Device Service console BlackBerry Dispatcher The BlackBerry Dispatcher maintains an SRP connection with the BlackBerry Infrastructure over the Internet. The BlackBerry Dispatcher also routes traffic between BlackBerry devices and the BlackBerry MDS Connection Service service when users are not connected to a work Wi-Fi access point or using a VPN connection. The following are the key ports that the BlackBerry Dispatcher uses. BlackBerry Dispatcher Connection type Default port number Where to configure Inbound and outbound connections to the BlackBerry Configuration Database TCP 1433 (for static port) BES10 Configuration Tool Inbound and outbound connection to the BlackBerry Router or the BlackBerry Infrastructure TCP 3101 BES10 Configuration Tool (for the BlackBerry Router) or the

8 Key components of BlackBerry Enterprise Service 10 BlackBerry Dispatcher Connection type Default port number Where to configure BlackBerry Device Service console (for the BlackBerry Dispatcher) Inbound and outbound connections from the BlackBerry MDS Connection Service TCP 3201 BlackBerry Router The BlackBerry Router connects to the BlackBerry Infrastructure which sends data to BlackBerry devices over mobile networks or the Internet. If BlackBerry Enterprise Service 10 is installed on a computer that hosts BlackBerry Enterprise Server 5.0 SP4, the BlackBerry Router associated with it is only used by the BlackBerry Enterprise Server. If you install the BlackBerry Router in the DMZ, you can configure the BlackBerry Router to work with BlackBerry Enterprise Service 10 and the BlackBerry Enterprise Server. The following are the key ports that the BlackBerry Router uses. BlackBerry Router Connection type Default port number Where to configure Inbound and outbound connections to the BlackBerry Dispatcher and the BlackBerry Infrastructure TCP 3101 BES10 Configuration Tool (for the BlackBerry Router) or the BlackBerry Device Service console (for the BlackBerry Dispatcher) BlackBerry Configuration Database The BlackBerry Configuration Database is a relational database that contains user account information and configuration information that are used to manage BlackBerry 10 devices and BlackBerry PlayBook tablets. Note: The Management Database and the BlackBerry Configuration Database must be installed on the same database server. If they are not, issues can arise with functionality, including issues with single sign-on functionality and the reporting services. The following are the key ports that the BlackBerry Configuration Database uses

9 Key components of BlackBerry Enterprise Service 10 BlackBerry Configuration Database Connection type Default port number Where to configure Inbound and outbound connections to the BlackBerry Administration Service, BlackBerry Dispatcher, BlackBerry MDS Connection Service, and Enterprise Management Web Service TCP 1433 (for static port) BES10 Configuration Tool Key components used to manage ios devices and Android devices Universal Device Service console The Universal Device Service console, also known as the Administration Console, provides a web-based interface that you can use to manage user accounts, IT policies, profiles, apps, and ios devices and Android devices. The following are the key ports that the Universal Device Service console uses. Universal Device Service console Connection type Default port number Where to configure Outbound connection from the Administration Console to the BlackBerry Infrastructure to request a signed CSR from Research In Motion when you configure the APNs certificate HTTPS 443 Outbound connections to the Management Database TCP 1433 (for static port) BES10 Configuration Tool Inbound and outbound connection between browsers and the Universal Device Service console HTTPS HTTP Core Module The Core Module is a device-agnostic module that is installed behind the organization s firewall. The Core Module performs the following functions: Manages all the configuration data used to manage ios devices and Android devices (for example, user configuration, group configuration, device configuration, policy enforcement checks, and so on) and stores it in the Management Database. The Core Module is the only component that accesses the Management Database. The Core Module connects to the following external components: Microsoft Active Directory, using LDAP, to retrieve user account information that BlackBerry Enterprise Service 10 needs to search for and create user accounts. APNs to inform ios devices to contact the Communication Module when the configuration assigned to the device is updated (for example, a new or updated IT policy or VPN profile is applied to it). mail server, using SMTP, to send activation s and policy enforcement breach s. Database server, using ADO.NET, to make database connections and execute queries or commands

10 Key components of BlackBerry Enterprise Service 10 SCEP server, using HTTP, to obtain a challenge code the device can use for certificate enrollment. The following are the key ports that the Core Module uses. Core Module Connection type Default port number Where to configure Outbound connections from the Core Module to the Apple Root Certification Authority to check the certificate revocation list (used if you do not set up an APNs proxy server) HTTP HTTPS Inbound and outbound connections to the Communication Module, Scheduler, and BlackBerry Web Services Inbound and outbound connections to the BlackBerry Secure Connect Service HTTPS 9081 HTTPS Communication Module The Communication Module is a gateway between ios devices and Android devices and BlackBerry Enterprise Service 10. It is responsible for conversion of the proprietary protocols supported on the devices to and from the device-agnostic format used by the Core Module. The Communication Module should be accessible from any internal Wi-Fi networks used by ios devices and Android devices. The following are the key ports that the Communication Module uses. Communication Module Connection type Default port number Where to configure Inbound and outbound connections to the Core Module HTTPS 9081 Inbound and outbound connections to the BlackBerry Secure Connect Service HTTPS BlackBerry Secure Connect Service The BlackBerry Secure Connect Service is a web service responsible for providing connectivity to ios devices and Android devices from behind the firewall. The BlackBerry Secure Connect Service eliminates the need for your organization to open multiple inbound ports for BlackBerry Enterprise Service 10 and enables all of the ios device and Android device activation and management communications to be channeled through a single access port. There is a single BlackBerry Secure Connect Service instance controlling all management traffic for ios devices and Android devices. Similar to the Core Module and Scheduler, which can only have one instance in control at a time, the first BlackBerry Secure Connect Service installed subscribes to the BlackBerry Infrastructure to provide connectivity for device management traffic. The following are the key ports that the BlackBerry Secure Connect Service uses. BlackBerry Secure Connect Service Connection type Default port number Where to configure BlackBerry Infrastructure TCP

11 Key components of BlackBerry Enterprise Service 10 BlackBerry Secure Connect Service Connection type Default port number Where to configure Inbound and outbound connections to the Communication Module HTTPS Inbound and outbound connections to the Core Module HTTPS APNs The APNs is a service for ios devices provided by Apple that BlackBerry Enterprise Service 10 uses to inform ios devices to contact the Communication Module for configuration updates (such as Wi-Fi profile, VPN profile, or Microsoft ActiveSync profile updates) and to provide information for your organization s device inventory. The following are the key ports that the APNs uses. APNs Connection type Default port number Where to configure Outbound connections from ios devices that use a work Wi-Fi network to APNs TCP 5223 Outbound connections to the Core Module HTTPS 9081 Management Database The Management Database is a relational database that contains user account information and configuration information (such as connection details) that BlackBerry Enterprise Service 10 components use to manage ios devices and Android devices. Note: The Management Database and the BlackBerry Configuration Database must be installed on the same database server. If they are not, issues can arise with functionality, including such as issues with single sign-on functionality and the reporting services. The following are the key ports that the Management Database uses. Management Database Connection type Default port number Where to configure Inbound and outbound connections to the Universal Device Service console TCP 1433 (for static port) BES10 Configuration Tool BlackBerry Work Connect Notification Service The BlackBerry Work Connect Notification Service is a web service responsible for providing new or changed and organizer notifications to ios devices that are using Secure Work Space. ios devices are restricted from running applications in the background, with specific exceptions such as the default mail application. This means Secure Work Space applications cannot receive new data such as message notifications unless the application is open or unless the notification comes from the APNs. The BlackBerry Work Connect Notification Service receives notifications of new data from third-party applications such as mail servers, web servers, or other content servers, and sends a notification through the BlackBerry Infrastructure to the APNs. The APNs can then notify the Work Connect application on the device of the new data

12 Key components of BlackBerry Enterprise Service 10 The following are the key ports that the BlackBerry Work Connect Notification Service uses. BlackBerry Work Connect Notification Service Connection type Default port number Where to configure Outbound connections to the BlackBerry Infrastructure HTTPS 443 Inbound connections from Microsoft Exchange Web Services for notifications HTTP 8088 During installation only TCP proxy The TCP proxy is an optional, customer provided, component that is used to meet installation specific networking requirements. The TCP proxy acts as an intermediary for requests that allows the BlackBerry Secure Connect Service to route TCP traffic from port 3101 to the BlackBerry Infrastructure, providing connectivity to ios devices and Android devices. The following are the key ports that the TCP proxy uses. TCP proxy Connection type Default port number Where to configure Inbound and outbound connections to the BlackBerry Infrastructure TCP

13 BlackBerry Enterprise Service 10 and the BlackBerry Infrastructure authentication BlackBerry Enterprise Service 10 and the BlackBerry Infrastructure authentication For more information on security for BlackBerry Enterprise Service 10, visit to read BlackBerry Device Service Security Technical Overview and Secure Work Space for ios and Android Security Note. Data flow: Authenticating the BlackBerry Device Service with the BlackBerry Infrastructure 1. The BlackBerry Device Service sends a data packet that contains its unique SRP identifier to the BlackBerry Infrastructure to claim the SRP identifier. 2. The BlackBerry Infrastructure sends a random challenge string to the BlackBerry Device Service. 3. The BlackBerry Device Service sends a challenge string to the BlackBerry Infrastructure. 4. The BlackBerry Infrastructure hashes the challenge string it received from the BlackBerry Device Service with the SRP authentication key using HMAC with the SHA-1 algorithm. The BlackBerry Infrastructure sends the resulting 20-byte value to the BlackBerry Device Service as a challenge response. 5. The BlackBerry Device Service hashes the challenge string it received from the BlackBerry Infrastructure with the SRP authentication key, and sends the result as a challenge response to the BlackBerry Infrastructure. 6. The BlackBerry Infrastructure performs one of the following actions: Accepts the challenge response and sends a confirmation to the BlackBerry Device Service to complete the authentication process and configure an authenticated SRP connection Rejects the challenge response If the BlackBerry Infrastructure rejects the challenge response, the authentication process is not successful. The BlackBerry Infrastructure and BlackBerry Device Service close the SRP connection. If the BlackBerry Device Service uses the same SRP authentication key and SRP identifier to connect to (and then disconnect from) the BlackBerry Infrastructure five times in one minute, the BlackBerry Infrastructure deactivates the SRP identifier to help prevent an attacker from using the SRP identifier to create conditions for a DoS attack. Data flow: Authenticating the Universal Device Service with the BlackBerry Infrastructure 1. The Universal Device Service connects to the BlackBerry Infrastructure and initiates a TLS connection. 2. The BlackBerry Infrastructure sends an authentication certificate to the Universal Device Service

14 BlackBerry Enterprise Service 10 and the BlackBerry Infrastructure authentication 3. The Universal Device Service verifies that the authentication certificate is signed by a trusted authority and verifies the name of the server in the BlackBerry Infrastructure to establish the TLS connection. 4. The Universal Device Service sends a data packet that contains its unique SRP identifier and SRP authentication key to the BlackBerry Infrastructure. 5. The BlackBerry Infrastructure authenticates the SRP identifier and SRP authentication key. The BlackBerry Infrastructure now only allows traffic for this instance of the Universal Device Service, uniquely identified by its SRP identifier, to flow over the connection

15 BlackBerry device data flows BlackBerry device data flows Data flow: Activating a BlackBerry device Adding and registering the user 1. In BlackBerry Management Studio, or the BlackBerry Device Service console, the administrator creates a local or a directory user account. Note: If creating a local user account, the account must be created in the BlackBerry Device Service console. 2. The administrator creates an activation password for the user account. The BlackBerry Administration Service stores the activation password in the BlackBerry Configuration Database. 3. The BlackBerry Administration Service sends the address or username information to the BlackBerry Infrastructure to register the user account. 4. The BlackBerry Infrastructure notifies the BlackBerry Administration Service whether the account registration is successful or not. 5. If the option to the activation information to the user is selected, the BlackBerry Administration Service sends the activation information to the user's address. If the option is not selected, the administrator must communicate the information to the user directly. The activation information includes the account information ( address or domain\username), account activation password, and server information (SRP ID of the BlackBerry Device Service) that the user needs to type on the BlackBerry device. Note: If BlackBerry Enterprise Service 10 is set to register activation information, the user is registered with the BlackBerry Infrastructure, whether the device they are activating is a BlackBerry 10 device or a BlackBerry PlayBook tablet

16 BlackBerry device data flows Establishing the connection When activating a device using a wireless connection through the BlackBerry Infrastructure Note: This is the most common data path and it occurs when you use the mobile network or an external Wi-Fi network. 1. The user types the activation information on the BlackBerry device. If the user is activating a BlackBerry PlayBook tablet, then they must use the advanced setup option and enter the SRP ID as well as the username and account activation password. If the user is activating a BlackBerry 10 device, they must specify the SRP ID of the BlackBerry Device Service only if the registration to the BlackBerry Infrastructure was not successful. When activating a device using a direct connection to the Enterprise Management Web Service Note: This data path is used only if communication over the BlackBerry Infrastructure is not allowed. In this scenario, the device requires a direct connection to the organization using a work Wi-Fi or VPN connection. 1. The user types the activation information on the BlackBerry device. The user must specify the FQDN of the BlackBerry Device Service. 2. If the device is connected to the work Wi-Fi network or using a VPN connection, the Enterprise Management Agent on the device uses the connections information to establish a direct connection to the Enterprise Management Web Service using ports 8081 and 8444, by default (shown on the green path on the diagram). 2. The Enterprise Management Agent on the device sends the account information to the BlackBerry Infrastructure. 3. The BlackBerry Infrastructure looks up the account information and sends an acknowledgment to the Enterprise Management Agent providing the

17 BlackBerry device data flows When activating a device using a wireless connection through the BlackBerry Infrastructure When activating a device using a direct connection to the Enterprise Management Web Service connection information for BlackBerry Enterprise Service The Enterprise Management Agent uses the connection information to establish a connection to BlackBerry Enterprise Service 10 through the BlackBerry Infrastructure. 5. If there is a BlackBerry Router installed, the BlackBerry Router receives the activation request on port 3101 and forwards it to the BlackBerry Dispatcher. If there is no BlackBerry Router installed, the BlackBerry Dispatcher receives the activation request. 6. The BlackBerry Dispatcher forwards the request to the BlackBerry MDS Connection Service through port The BlackBerry MDS Connection Service returns the Enterprise Management Web Service host and port information to the Enterprise Management Agent through the BlackBerry Dispatcher. 8. The Enterprise Management Agent uses this information to establish a secure connection through the BlackBerry Infrastructure to the Enterprise Management Web Service. Completing the activation

18 BlackBerry device data flows 1. The Enterprise Management Agent on the device sends a message requesting activation details to the Enterprise Management Web Service. 2. The Enterprise Management Agent receives the activation details from the Enterprise Management Web Service. If the activation is a "Work and personal - Regulated" or a "Work space only" activation type, the device displays a notification requesting user acceptance to proceed with the activation. 3. The Enterprise Management Agent sends a message back to the Enterprise Management Web Service to confirm the Enterprise Management Agent has completed the activation and created the work space. 4. The Enterprise Management Web Service and the Enterprise Management Agent configure IT policies, software configurations, and more, on the device. Data flow: Receiving and organizer data on a BlackBerry device When users send and receive and organizer data on a BlackBerry device, there are two communication paths that can be used: Connectivity through the BlackBerry Infrastructure to the mail server that is running Microsoft ActiveSync to provide security for devices that are not connected to the organization's internal network or do not have a VPN connection Direct connection from the device to the mail server that is running Microsoft ActiveSync, through the VPN or over the work Wi-Fi network 1. The device issues an HTTPS request to the mail server and requests that the mail server notifies the device if any items change in the folders that are configured to synchronize

19 BlackBerry device data flows 2. The device stands by. You can adjust the synchronization time, depending on your mail server. 3. The mail server checks for any new or changed items and notifies the device when items change or new items come into the user's mailbox. The notification contains the name of the folder that has the new or changed item. Changed items include marking an as read, moving an into a sub folder, or updating organizer data New items include receiving a new or creating a new organizer data entry 4. The device issues a synchronization request for the folder. 5. The mail server synchronizes the changed files with the device. 6. When the synchronization is complete, the device issues another request to restart the process. 7. If there are no new or changed items during this interval, the mail server sends an "HTTP 200 OK" message to the device. 8. The device issues a new PING request

20 BlackBerry device data flows Data flow: Sending policy and profile updates to BlackBerry devices You can configure IT administration commands, app information, IT policies, profiles, SCEP profiles, Wi-Fi profiles, and VPN profiles for devices using the BlackBerry Device Service console. This configuration information is sent to the Enterprise Management Agent on the device over a secure, preauthenticated connection through the Enterprise Management Web Service. 1. You complete one of the following actions in the BlackBerry Device Service console: Select an IT administration command Remove a device from a user account Assign or change an IT policy Assign or change a VPN profile or Wi-Fi profile Assign or change Microsoft ActiveSync configuration settings Assign or change configuration settings Assign or change root certificates Assign or change proxy profiles Assign or change SCEP profiles 2. If data conflicts exist, the BlackBerry Device Service console uses predefined reconciliation rules to resolve the conflicts. Updates are applied in the BlackBerry Enterprise Service 10 and the BlackBerry Device Service console identifies objects that must be shared with the device. 3. The Enterprise Management Web Service notifies the Enterprise Management Agent on the device that there is an update

21 BlackBerry device data flows Note: The Enterprise Management Web Service can only notify the Enterprise Management Agent on the device that there is an update over the IPPP pathway through the BlackBerry Infrastructure. 4. The Enterprise Management Agent polls the Enterprise Management Web Service for the update. 5. The Enterprise Management Web Service sends the configuration updates to the Enterprise Management Agent. 6. The Enterprise Management Agent retrieves the configuration updates and applies the new or updated configuration on the work space of the device

22 BlackBerry device data flows Data flow: Sending app updates to BlackBerry devices You use software configurations to specify apps that are required or optional for the work space of the devices. Required apps are installed in the work space after the device receives them. Optional apps can be downloaded and installed in the work space. Apps that are not listed as required or optional can only be installed in the personal space. 1. You complete one of the following actions in the BlackBerry Device Service console: Create a software configuration and assign it to a user account or a group the user account belongs to Update a software configuration that is already assigned to the user account Update app information 2. If data conflicts exist, the BlackBerry Device Service console uses predefined reconciliation rules to resolve the conflicts. Updates are applied in BlackBerry Enterprise Service 10 and the BlackBerry Device Service console identifies objects that must be shared with the device. 3. The Enterprise Management Web Service notifies the Enterprise Management Agent on the device that there is an update. 4. The Enterprise Management Agent on the device polls the Enterprise Management Web Service for updates. 5. The Enterprise Management Web Service sends the update to the Enterprise Management Agent. 6. If a required app was added or updated, the Enterprise Management Agent accesses the URL that is specified in the app information to download and install the required app to the work space. 7. If the list of optional apps changed, the Work tab in the BlackBerry World storefront on BlackBerry PlayBook tablets, or the BlackBerry World for Work app for BlackBerry 10 devices, displays the updated list and the user can download and install the optional apps

23 ios and Android device data flows ios and Android device data flows Data flow: Activating an ios device Adding the user 1. In BlackBerry Management Studio, or the Universal Device Service console, the administrator creates a local or a directory user account, and does one of the following: If the account is a local account, the administrator specifies an activation password (the local account password cannot be used for device activation). If the account is a directory account, the administrator can choose whether to specify an activation password or use the login information for the account instead. The administrator can select the option to send an activation to the user, assign group membership, and specify other device activation settings such as activation expiry date and time, maximum number of activations per device, device platform and device version. Optionally, the administrator assigns an activation type profile to the account. Note: If the option to send an activation to the user is selected, the administrator can customize the message to reflect company specific details. 2. The Core Module performs one of the following actions: If the account is a local account, the Core Module generates a hash of the user account password and stores it along with the account information in the Management Database

24 ios and Android device data flows If the account is a directory account, the Core Module accesses Microsoft Active Directory, using LDAP, to retrieve the user account information and keeps a copy of the user account information in the Management Database. The Scheduler and Management Database periodically retrieve this information and keep it current. 3. If the option to send an activation was selected, the Core Module generates the activation and sends it to the user using the SMTP settings configured by the administrator. The message describes how to obtain the BES10 Client from the App Store and additional information the user needs to enter on the client, such as the domain name and SRP ID, the username, and the activation password for the user account if one was specified. Starting the activation process 1. The user installs the BES10 Client on the ios device. After launching the BES10 client, the user is prompted to enter the URL provided by the administrator (which consists of the BlackBerry Infrastructure URL followed by the SRP ID of the customer, for example <cc>.bbsecure.com/s , where <cc> is the country code), and accept the BlackBerry Enterprise Service 10 certificate. This prompt includes information about the SSL certificate, including the Common Name, fingerprint, and whether the certificate is trusted or untrusted. Once the user accepts the certificate, they enter the username specified in the activation and their password, and clicks Activate My Device. If the user clicks Decline, they are returned to the previous activation screen and the activation process stops. If the user clicks Accept, the certificate is installed on the device and the activation process continues. 2. The client sends an activation request over a secured channel, to the BlackBerry Infrastructure, which sends it to the server name specified by the user. The activation request includes the username, password, device operating system, and unique device identifier. 3. The BlackBerry Secure Connect Service receives the activation request from the BlackBerry Infrastructure and sends it to the Communication Module. 4. The Communication Module receives the activation request and queries the Core Module to validate the activation request. 5. The Core Module checks if the activation request is valid and performs one of the following actions:

25 ios and Android device data flows If the activation request does not meet the criteria defined in the activation settings (for example, the username is not valid, the password has expired, or the device type or version is not allowed for the user account), the Core Module responds with an error message. If the activation request meets all the activation criteria, the Core Module creates a device instance, associates it with the specified user account in the Management Database, sets the activation status for the device as unknown, and responds with a successful authentication to the Communication Module. 6. The Communication Module performs one of the following actions: If the response from the Core Module is an error, the Communication Module sends the error message to the BlackBerry Secure Connect Service to send to the BlackBerry Infrastructure. The BlackBerry Infrastructure passes the error message to the device and the activation stops. If the response from the Core Module is a successful authentication, the Communication Module generates a unique identifier for the device. This identifier is used to verify the authenticity of the device in every subsequent communication. The Communication Module sends a response to the BlackBerry Secure Connect Service that includes the identifier, the MDM profile of the device (these are the specific permissions that the BES10 Client can request to manage on the device such as Wi-Fi, VPN, Microsoft ActiveSync profile configuration, IT policy configuration, activation type and so on), a command to provide device information and configuration, and a link to the BlackBerry Secure Connect Service to initiate the MDM Daemon enrollment process. The BlackBerry Secure Connect Service sends this information to the BlackBerry Infrastructure, which sends it to the device. Installing the certificate and completing the activation 1. After receiving a successful response, the client displays a message to inform the user that a certificate must be installed to complete the activation. The user clicks OK and is redirected to the BlackBerry Secure Connect Service link for the MDM Daemon enrollment. 2. The BlackBerry Secure Connect Service connects to the Communication Module for the MDM Daemon enrollment

26 ios and Android device data flows 3. A certificate is provided by the Communication Module and the user is presented with the option to install it. The user clicks Install Now and Done. 4. The client communicates with the BlackBerry Secure Connect Service to notify the successful installation of the MDM profile and certificate. 5. The BlackBerry Secure Connect Service informs the Communication Module of the successful installation of the MDM profile and certificate. 6. The Communication Module informs the Core Module of this success. 7. After successfully confirming the MDM enrollment of the device, the Core Module sets the device activation status to active on the Management Database. 8. The client continually checks with the Communication Module through the BlackBerry Secure Connect Service to verify the activation status. When the activation is set to active, the device requests all IT policy and configuration information from, and sends device information to, BlackBerry Enterprise Service The BlackBerry Secure Connect Service receives the device information and sends it to the Communication Module. 10. The Communication Module receives the information, converts it to a device-agnostic format and forwards it to the Core Module. 11. The Core Module stores the device information in the Management Database and sends the IT policy and configuration information back to the device. If the activation type for the device is "Work and personal - user privacy" or "Work and personal - full control", after the activation is completed, the user is prompted to create a work space password. Additionally, the user may be prompted to install some or all of the following apps: Work Connect Work Browser Documents To Go Note: If the device is activated with the "Work and personal - user privacy" activation type, the users are not prompted to install the work space apps and must go to a website provided by their administrator to download the apps

27 ios and Android device data flows Data flow: Activating an Android device Adding the user 1. In BlackBerry Management Studio, or the Universal Device Service console, the administrator creates a local or a directory user account, and does one of the following: If the account is a local account, the administrator specifies an activation password (the local account password cannot be used for device activation). If the account is a directory account, the administrator can choose whether to specify an activation password or use the login information for the account instead. The administrator can select the option to send an activation to the user, assign group membership, and specify other device activation settings such as activation expiry date and time, maximum number of activations per device, device platform and device version. Optionally, the administrator assigns an activation type profile to the account. Note: If the option to send an activation to the user is chosen, the administrator can customize the message to reflect company specific details. 2. The Core Module performs one of the following actions: If the account is a local account, the Core Module generates a hash of the user account password and stores it along with the account information in the Management Database. If the account is a directory account, the Core Module accesses Microsoft Active Directory, using LDAP, to retrieve the user account information and keeps a copy of the user account information in the Management

28 ios and Android device data flows Database. The Scheduler and Management Database periodically retrieve this information and keep it up to date. 3. If the option to send an activation was selected, the Core Module sends the activation using the SMTP settings configured by the administrator. The message describes how to obtain the BES10 Client from Google Play and additional information the user needs to type in the client, such as the company server name, the username, and the activation password for the user account if one was specified. Starting the activation process 1. The user installs the BES10 Client on the Android device. After launching the BES10 Client, the user is prompted to enter the URL provided by the administrator (which consists of the BlackBerry Infrastructure URL followed by the SRP ID of the customer, for example <cc>.bbsecure.com/s , where <cc> is the country code), and accept the BlackBerry Enterprise Service 10 certificate. This prompt includes information about the SSL certificate, including the Common Name, fingerprint, and whether the certificate is trusted or untrusted. Once the user accepts the certificate, they enter the username specified in the activation and their password, and clicks Activate My Device. If the user clicks Decline, they are returned to the previous activation screen and the activation process stops. If the user clicks Accept, the certificate is installed on the device and the activation process continues. 2. The client sends an activation request over a secured channel, to the BlackBerry Infrastructure, which sends it to the server name specified by the user. The activation request includes the username, password, device operating system, and unique device identifier. 3. The BlackBerry Secure Connect Service receives the activation request from the BlackBerry Infrastructure and sends it to the Communication Module. 4. The Communication Module receives the activation request and queries the Core Module to validate the activation request. 5. The Core Module checks if the activation request is valid and performs one of the following actions:

29 ios and Android device data flows If the activation request does not meet the criteria defined in the activation settings, for example, the username is not valid, the password has expired, or the device type or version is not allowed for the user account, the Core Module responds with an error message. If the activation request meets all the activation criteria, the Core Module creates a device instance, associates it to the specified user account in the Management Database, sets the activation status for the device as unknown, and responds with a successful authentication to the Communication Module. 6. The Communication Module performs one of the following actions: If the response from the Core Module is an error, the Communication Module sends the error message to the BlackBerry Secure Connect Service to send to the BlackBerry Infrastructure. The BlackBerry Infrastructure sends the error message and the activation stops. If the response from the Core Module is a successful authentication, the Communication Module generates a unique identifier for the device. This identifier is used to verify the authenticity of the device in every subsequent communication. The Communication Module sends a response to the BlackBerry Secure Connect Service that includes the identifier, the MDM profile of the device (these are the specific permissions that the BES10 Client requests to manage on the device such as, Wi-Fi, VPN, IT policy configuration, and so on), and a command to provide device information and configuration. The BlackBerry Secure Connect Service sends this information through the BlackBerry Infrastructure to the device. Completing the activation 1. After receiving a successful response, the BES10 Client requests all IT policy and configuration information and sends the device information and software information through the BlackBerry Infrastructure to the BlackBerry Secure Connect Service, which sends this information to the Communication Module. 2. The Communication Module receives the information, converts it to a device-agnostic format and sends it to the Core Module

30 ios and Android device data flows 3. The Core Module stores the device information in the Management Database and sends the IT policy and configuration information back to the device. If the activation type for the device is "Work and personal - user privacy" or "Work and personal - full control", after the activation is completed, the user is prompted to create a work space password. Additionally, the user may be prompted to install some or all of the following apps: Secure Work Space Work Space Manager Documents To Go Data flow: Receiving and organizer data on ios and Android devices 1. The device issues an HTTPS request to the mail server and requests that the mail server notify the device if any items change in the folders that are configured to synchronize. 2. The device stands by. You can adjust the synchronization time, depending on your mail server. 3. The mail server checks for any new or changed items and notifies the device when items change or new items come into the user's mailbox. The notification contains the name of the folder that has the new or changed item. Changed items include marking an as read, moving an into a sub folder, or updating organizer data New items include receiving a new or creating a new organizer data entry 4. The device issues a synchronization request for the folder. 5. The mail server synchronizes the changed files with the device

31 ios and Android device data flows 6. When the synchronization is complete, the device issues another request to restart the process. 7. If there are no new or changed items during this interval, the mail server sends a "HTTP 200 OK" message to the device. 8. The device issues a new PING request. Data flow: Receiving and organizer data on ios and Android devices with a work space 1. At defined intervals, the mail server checks for any new or changed items and notifies the ios device or Android device, through BlackBerry Enterprise Service 10, when there are new or changed items. If the device is an ios device: The BlackBerry Work Connect Notification Service receives the notification and passes it to the BlackBerry Secure Connect Service for forwarding If the device is an Android device: The notification is received by the BlackBerry Secure Connect Service for forwarding 2. BlackBerry Secure Connect Service notifies the BlackBerry Infrastructure that there are new or changed items in the user's mailbox over port The BlackBerry Infrastructure passes a notification to the device that there are new or changed items in the user's mailbox. If the device is an ios device:

32 ios and Android device data flows The BlackBerry Infrastructure contacts the APNs over port 2195 to notify the user that there is an item waiting to be synchronized. The APNs notifies the device that there is a new or changed item waiting to be synchronized. When the app receives the notification, it displays an icon that indicates that there are new updates available for the user. If the device is an Android device: The BlackBerry Infrastructure contacts the device to notify the user that there is an item waiting to be synchronized. When the app receives the notification, it displays an icon that indicates that there are new updates available for the user. 4. The device contacts the BlackBerry Infrastructure to request the new or changed items. 5. The BlackBerry Infrastructure contacts the BlackBerry Secure Connect Service and requests the new or changed items. 6. The BlackBerry Secure Connect Service contacts the mail server and requests the new or changed items be sent to the device. 7. The mail server sends the items to the device, through the BlackBerry Secure Connect Service and the BlackBerry Infrastructure. 8. The device sends confirmation back to the mail server, through the BlackBerry Secure Connect Service and the BlackBerry Infrastructure, that the updates have been received. 9. When the synchronization of all items is complete, the mail server sends an "HTTP 200 OK" message to the device. 10. The device waits for the next notification from BlackBerry Enterprise Service 10 that there are new or changed items to synchronize. Troubleshooting app, policy, and profile updates for ios and Android devices App, policy, and profile updates for ios and Android devices can be triggered in any of the following ways: Using the Universal Device Service console, the administrator performs any of the following actions: Lock device Unlock device Delete only work data Delete all device data Specify device password and lock (Android devices only) Update an IT policy Update VPN profile Update Wi-Fi profile Update Microsoft ActiveSync profile Update CA certificate profile Update SCEP profile (ios devices only) Update shared certificate profile

BlackBerry Enterprise Service 10. Secure Work Space for ios and Android Version: 10.1.1. Security Note

BlackBerry Enterprise Service 10. Secure Work Space for ios and Android Version: 10.1.1. Security Note BlackBerry Enterprise Service 10 Secure Work Space for ios and Android Version: 10.1.1 Security Note Published: 2013-06-21 SWD-20130621110651069 Contents 1 About this guide...4 2 What is BlackBerry Enterprise

More information

Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123. Instructor Manual

Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123. Instructor Manual Troubleshooting BlackBerry Enterprise Service 10 version 10.1.1 726-08745-123 Instructor Manual Published: 2013-07-02 SWD-20130702091645092 Contents Advance preparation...7 Required materials...7 Topics

More information

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide

BlackBerry Enterprise Service 10. Version: 10.2. Configuration Guide BlackBerry Enterprise Service 10 Version: 10.2 Configuration Guide Published: 2015-02-27 SWD-20150227164548686 Contents 1 Introduction...7 About this guide...8 What is BlackBerry Enterprise Service 10?...9

More information

Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0

Security Guide. BlackBerry Enterprise Service 12. for ios, Android, and Windows Phone. Version 12.0 Security Guide BlackBerry Enterprise Service 12 for ios, Android, and Windows Phone Version 12.0 Published: 2015-02-06 SWD-20150206130210406 Contents About this guide... 6 What is BES12?... 7 Key features

More information

Configuration Guide BES12. Version 12.2

Configuration Guide BES12. Version 12.2 Configuration Guide BES12 Version 12.2 Published: 2015-07-07 SWD-20150630131852557 Contents About this guide... 8 Getting started... 9 Administrator permissions you need to configure BES12... 9 Obtaining

More information

Administration Guide. BlackBerry Enterprise Service 12. Version 12.0

Administration Guide. BlackBerry Enterprise Service 12. Version 12.0 Administration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2015-01-16 SWD-20150116150104141 Contents Introduction... 9 About this guide...10 What is BES12?...11 Key features of BES12...

More information

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0

Configuration Guide. BlackBerry Enterprise Service 12. Version 12.0 Configuration Guide BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-12-19 SWD-20141219132902639 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12...

More information

Configuration Guide BES12. Version 12.1

Configuration Guide BES12. Version 12.1 Configuration Guide BES12 Version 12.1 Published: 2015-04-22 SWD-20150422113638568 Contents Introduction... 7 About this guide...7 What is BES12?...7 Key features of BES12... 8 Product documentation...

More information

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide

BlackBerry Enterprise Service 10. Universal Device Service Version: 10.2. Administration Guide BlackBerry Enterprise Service 10 Universal Service Version: 10.2 Administration Guide Published: 2015-02-24 SWD-20150223125016631 Contents 1 Introduction...9 About this guide...10 What is BlackBerry

More information

Configuration Guide BES12. Version 12.3

Configuration Guide BES12. Version 12.3 Configuration Guide BES12 Version 12.3 Published: 2016-01-19 SWD-20160119132230232 Contents About this guide... 7 Getting started... 8 Configuring BES12 for the first time...8 Configuration tasks for managing

More information

Configuration Guide. BES12 Cloud

Configuration Guide. BES12 Cloud Configuration Guide BES12 Cloud Published: 2016-04-08 SWD-20160408113328879 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need

More information

Advanced Administration

Advanced Administration BlackBerry Enterprise Service 10 BlackBerry Device Service Version: 10.2 Advanced Administration Guide Published: 2014-09-10 SWD-20140909133530796 Contents 1 Introduction...11 About this guide...12 What

More information

Reference Guide. What's New in BES12 Cloud

Reference Guide. What's New in BES12 Cloud Reference Guide What's New in BES12 Cloud 711-60712-123 Published: 2016-06-20 SWD-20160620151902701 Contents What's new in BES12 Cloud...5 Supported features by device type... 5 Compatibility and requirements...11

More information

Security Technical. Overview. BlackBerry Enterprise Service 10. BlackBerry Device Service Solution Version: 10.2

Security Technical. Overview. BlackBerry Enterprise Service 10. BlackBerry Device Service Solution Version: 10.2 BlackBerry Enterprise Service 10 BlackBerry Device Service Solution Version: 10.2 Security Technical Overview Published: 2014-09-10 SWD-20140908123239883 Contents 1 About BlackBerry Device Service solution

More information

BES10 Cloud architecture and data flows

BES10 Cloud architecture and data flows BES10 Cloud architecture and data flows Architecture: BES10 Cloud solution Component APNs BlackBerry Cloud Connector BES10 Cloud BlackBerry Infrastructure Company directory Devices GCM Other third-party

More information

BlackBerry Enterprise Service 10. Version: 10.2. Installation Guide

BlackBerry Enterprise Service 10. Version: 10.2. Installation Guide BlackBerry Enterprise Service 10 Version: 10.2 Installation Guide Published: 2015-08-17 SWD-20150817115607897 Contents 1 About this guide...5 2 What is BlackBerry Enterprise Service 10?... 6 Key features

More information

Administration Guide BES12. Version 12.3

Administration Guide BES12. Version 12.3 Administration Guide BES12 Version 12.3 Published: 2015-10-30 SWD-20151028105551254 Contents Introduction... 11 About this guide...12 How to use this guide... 13 Steps to administer BES12... 13 Examples

More information

Managing BlackBerry Enterprise Service 10 version 10.2

Managing BlackBerry Enterprise Service 10 version 10.2 Managing BlackBerry Enterprise Service 10 version 10.2 Course details Course code 726-08882-123 Approximate duration Labs 3 days Labs are included in this course Course overview This course explains how

More information

Preparing for GO!Enterprise MDM On-Demand Service

Preparing for GO!Enterprise MDM On-Demand Service Preparing for GO!Enterprise MDM On-Demand Service This guide provides information on...... An overview of GO!Enterprise MDM... Preparing your environment for GO!Enterprise MDM On-Demand... Firewall rules

More information

Licensing Guide BES12. Version 12.1

Licensing Guide BES12. Version 12.1 Licensing Guide BES12 Version 12.1 Published: 2015-04-02 SWD-20150402115554403 Contents Introduction... 5 About this guide...5 What is BES12?...5 Key features of BES12... 5 About licensing...7 Steps to

More information

Getting Started Guide

Getting Started Guide BlackBerry Web Services For Microsoft.NET developers Version: 10.2 Getting Started Guide Published: 2013-12-02 SWD-20131202165812789 Contents 1 Overview: BlackBerry Enterprise Service 10... 5 2 Overview:

More information

Sophos Mobile Control Installation guide. Product version: 3.5

Sophos Mobile Control Installation guide. Product version: 3.5 Sophos Mobile Control Installation guide Product version: 3.5 Document date: July 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...10 4 External

More information

Configuration Guide BES12. Version 12.4

Configuration Guide BES12. Version 12.4 Configuration Guide BES12 Version 12.4 Published: 2016-04-13 SWD-20160413171027740 Contents About this guide... 8 Getting started... 9 Configuring BES12 for the first time...9 Configuration tasks for managing

More information

Configuration Guide. BES12 Cloud

Configuration Guide. BES12 Cloud Configuration Guide BES12 Cloud Published: 2016-07-20 SWD-20160718120737425 Contents About this guide... 6 Getting started... 7 Configuring BES12 for the first time...7 Administrator permissions you need

More information

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 2. Feature and Technical Overview

BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 2. Feature and Technical Overview BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 2 Feature and Technical Overview Published: 2010-06-16 SWDT305802-1108946-0615123042-001 Contents 1 Overview: BlackBerry Enterprise

More information

Sophos Mobile Control Installation guide. Product version: 3

Sophos Mobile Control Installation guide. Product version: 3 Sophos Mobile Control Installation guide Product version: 3 Document date: January 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...4 3 Set up Sophos Mobile Control...16 4 External

More information

Sophos Mobile Control SaaS startup guide. Product version: 6

Sophos Mobile Control SaaS startup guide. Product version: 6 Sophos Mobile Control SaaS startup guide Product version: 6 Document date: January 2016 Contents 1 About this guide...4 2 About Sophos Mobile Control...5 3 What are the key steps?...7 4 Change your password...8

More information

ManageEngine Desktop Central. Mobile Device Management User Guide

ManageEngine Desktop Central. Mobile Device Management User Guide ManageEngine Desktop Central Mobile Device Management User Guide Contents 1 Mobile Device Management... 2 1.1 Supported Devices... 2 1.2 What Management Operations you can Perform?... 2 2 Setting Up MDM...

More information

Administration Guide. BlackBerry Resource Kit for BlackBerry Enterprise Service 10. Version 10.2

Administration Guide. BlackBerry Resource Kit for BlackBerry Enterprise Service 10. Version 10.2 Administration Guide BlackBerry Resource Kit for BlackBerry Enterprise Service 10 Version 10.2 Published: 2015-11-12 SWD-20151112124107981 Contents Overview: BlackBerry Enterprise Service 10... 8 Overview:

More information

Feature and Technical

Feature and Technical BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 4 Feature and Technical Overview Published: 2013-11-07 SWD-20131107160132924 Contents 1 Document revision history...6 2 What's

More information

Sophos Mobile Control Installation guide

Sophos Mobile Control Installation guide Sophos Mobile Control Installation guide Product version: 2.5 Document date: July 2012 Contents 1 Introduction... 3 2 The Sophos Mobile Control server... 4 3 Set up Sophos Mobile Control... 13 4 Running

More information

Installation and Configuration Guide

Installation and Configuration Guide Installation and Configuration Guide BlackBerry Resource Kit for BlackBerry Enterprise Service 10 Version 10.2 Published: 2015-11-12 SWD-20151112124827386 Contents Overview: BlackBerry Enterprise Service

More information

BlackBerry Enterprise Service 10 version 10.2 preinstallation and preupgrade checklist

BlackBerry Enterprise Service 10 version 10.2 preinstallation and preupgrade checklist BlackBerry Enterprise Service version.2 preinstallation and preupgrade checklist Verify that the following requirements are met before you install or upgrade to BlackBerry Enterprise Service version.2.

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

CA Mobile Device Management 2014 Q1 Getting Started

CA Mobile Device Management 2014 Q1 Getting Started CA Mobile Device Management 2014 Q1 Getting Started This Documentation, which includes embedded help systems and electronically distributed materials, (hereinafter referred to as the Documentation ) is

More information

Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com

Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Manual Copyright 2013, 3CX Ltd. http://www.3cx.com E-mail: info@3cx.com Information in this document is subject to change without notice. Companies names and data used in examples herein are fictitious

More information

BYOD Guidance: BlackBerry Secure Work Space

BYOD Guidance: BlackBerry Secure Work Space GOV.UK Guidance BYOD Guidance: BlackBerry Secure Work Space Published 17 February 2015 Contents 1. About this guidance 2. Summary of key risks 3. Secure Work Space components 4. Technical assessment 5.

More information

Kaspersky Lab Mobile Device Management Deployment Guide

Kaspersky Lab Mobile Device Management Deployment Guide Kaspersky Lab Mobile Device Management Deployment Guide Introduction With the release of Kaspersky Security Center 10.0 a new functionality has been implemented which allows centralized management of mobile

More information

MaaS360 Cloud Extender

MaaS360 Cloud Extender MaaS360 Cloud Extender Installation Guide Copyright 2013 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software described

More information

Sophos Mobile Control Installation guide. Product version: 3.6

Sophos Mobile Control Installation guide. Product version: 3.6 Sophos Mobile Control Installation guide Product version: 3.6 Document date: November 2013 Contents 1 Introduction...3 2 The Sophos Mobile Control server...5 3 Set up Sophos Mobile Control...11 4 External

More information

MaaS360 On-Premises Cloud Extender

MaaS360 On-Premises Cloud Extender MaaS360 On-Premises Cloud Extender Installation Guide Copyright 2014 Fiberlink Communications Corporation. All rights reserved. Information in this document is subject to change without notice. The software

More information

Upgrade Guide BES12. Version 12.1

Upgrade Guide BES12. Version 12.1 Upgrade Guide BES12 Version 12.1 Published: 2015-02-25 SWD-20150413111718083 Contents Supported upgrade environments...4 Upgrading from BES12 version 12.0 to BES12 version 12.1...5 Preupgrade tasks...5

More information

Advanced Configuration Steps

Advanced Configuration Steps Advanced Configuration Steps After you have downloaded a trial, you can perform the following from the Setup menu in the MaaS360 portal: Configure additional services Configure device enrollment settings

More information

Mobile Device Management Version 8. Last updated: 17-10-14

Mobile Device Management Version 8. Last updated: 17-10-14 Mobile Device Management Version 8 Last updated: 17-10-14 Copyright 2013, 2X Ltd. http://www.2x.com E mail: info@2x.com Information in this document is subject to change without notice. Companies names

More information

APPLE PUSH NOTIFICATION IN EMC DOCUMENTUM MOBILE APPLICATION

APPLE PUSH NOTIFICATION IN EMC DOCUMENTUM MOBILE APPLICATION White Paper R APPLE PUSH NOTIFICATION IN EMC R DOCUMENTUM MOBILE APPLICATION Abstract This white paper explains the Integration of Apple push notification service in EMC Documentum Mobile application.

More information

Sophos Mobile Control Startup guide. Product version: 3.5

Sophos Mobile Control Startup guide. Product version: 3.5 Sophos Mobile Control Startup guide Product version: 3.5 Document date: July 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos Mobile

More information

Mobility Manager 9.5. Users Guide

Mobility Manager 9.5. Users Guide Mobility Manager 9.5 Users Guide LANDESK MOBILITY MANAGER Copyright 2002-2013, LANDesk Software, Inc. and its affiliates. All rights reserved. LANDesk and its logos are registered trademarks or trademarks

More information

Sophos Mobile Control Technical guide

Sophos Mobile Control Technical guide Sophos Mobile Control Technical guide Product version: 2 Document date: December 2011 Contents 1. About Sophos Mobile Control... 3 2. Integration... 4 3. Architecture... 6 4. Workflow... 12 5. Directory

More information

Sophos Mobile Control Startup guide. Product version: 3

Sophos Mobile Control Startup guide. Product version: 3 Sophos Mobile Control Startup guide Product version: 3 Document date: January 2013 Contents 1 About this guide...3 2 What are the key steps?...5 3 Log in as a super administrator...6 4 Activate Sophos

More information

http://docs.trendmicro.com

http://docs.trendmicro.com Trend Micro Incorporated reserves the right to make changes to this document and to the products described herein without notice. Before installing and using the product, please review the readme files,

More information

Product Manual. MDM On Premise Installation Version 8.1. Last Updated: 06/07/15

Product Manual. MDM On Premise Installation Version 8.1. Last Updated: 06/07/15 Product Manual MDM On Premise Installation Version 8.1 Last Updated: 06/07/15 Parallels IP Holdings GmbH Vordergasse 59 8200 Schaffhausen Switzerland Tel: + 41 52 632 0411 Fax: + 41 52 672 2010 www.parallels.com

More information

NEFSIS DEDICATED SERVER

NEFSIS DEDICATED SERVER NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.2.0.XXX (DRAFT Document) Requirements and Implementation Guide (Rev5-113009) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis

More information

Installation and Administration Guide

Installation and Administration Guide Installation and Administration Guide BlackBerry Enterprise Transporter for BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-11-06 SWD-20141106165936643 Contents What is BES12?... 6 Key features

More information

Installation and Administration Guide

Installation and Administration Guide Installation and Administration Guide BlackBerry Collaboration Service Version 12.1 Published: 2015-02-25 SWD-20150225135812271 Contents About this guide... 5 Planning a BlackBerry Collaboration Service

More information

BlackBerry Enterprise Server for IBM Lotus Domino Version: 4.1 Service Pack: 7. Installation Guide

BlackBerry Enterprise Server for IBM Lotus Domino Version: 4.1 Service Pack: 7. Installation Guide BlackBerry Enterprise Server for IBM Lotus Domino Version: 4.1 Service Pack: 7 Installation Guide SWD-906306-1018091231-001 Contents 1 Planning a BlackBerry Enterprise Server installation... 4 Installing

More information

QuickStart Guide for Mobile Device Management

QuickStart Guide for Mobile Device Management QuickStart Guide for Mobile Device Management Version 8.5 Inventory Configuration Security Management Distribution JAMF Software, LLC 2012 JAMF Software, LLC. All rights reserved. JAMF Software has made

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android 1 Table of Contents GO!Enterprise MDM

More information

Prerequisites Guide for ios

Prerequisites Guide for ios Prerequisites Guide for ios Prerequisites Guide for ios This document includes the following topics: Overview Apple Developer Membership Requirement Prerequisites for Mobile Device Management Prerequisites

More information

Sophos Mobile Control Super administrator guide. Product version: 3

Sophos Mobile Control Super administrator guide. Product version: 3 Sophos Mobile Control Super administrator guide Product version: 3 Document date: January 2013 Contents 1 About Sophos Mobile Control...3 2 Super administrator accounts...4 3 The super administrator customer...5

More information

McAfee Enterprise Mobility Management 11.0 Software

McAfee Enterprise Mobility Management 11.0 Software Product Guide McAfee Enterprise Mobility Management 11.0 Software For use with epolicy Orchestrator 4.6.5-5.0 Software COPYRIGHT Copyright 2013 McAfee, Inc. Do not copy without permission. TRADEMARK ATTRIBUTIONS

More information

CounterACT Plugin Configuration Guide for ForeScout Mobile Integration Module MaaS360 Version 1.0.1. ForeScout Mobile

CounterACT Plugin Configuration Guide for ForeScout Mobile Integration Module MaaS360 Version 1.0.1. ForeScout Mobile CounterACT Plugin Configuration Guide for ForeScout Mobile Integration Module Version 1.0.1 ForeScout Mobile Table of Contents About the Integration... 3 ForeScout MDM... 3 Additional Documentation...

More information

Sophos Mobile Control Installation prerequisites form

Sophos Mobile Control Installation prerequisites form Sophos Mobile Control Installation prerequisites form Product version: 3 Document date: January 2013 Contents 1 About this document... 3 2 System environment... 4 3 Communication between devices and push

More information

Vodafone Secure Device Manager Administration User Guide

Vodafone Secure Device Manager Administration User Guide Vodafone Secure Device Manager Administration User Guide Vodafone New Zealand Limited. Correct as of September 2014. Do business better Contents Introduction 3 Help 4 How to find help in the Vodafone Secure

More information

Zenprise Device Manager 6.1.5

Zenprise Device Manager 6.1.5 Zenprise Device Manager 6.1.5 CLIENT GUIDE Rev 6.1.50 Introduction 2 ZENPRISE DEVICE MANAGER 6.1 CLIENT GUIDE 2011 Zenprise, Inc. All rights reserved. This manual, as well as the software described in

More information

Sophos Mobile Control as a Service Startup guide. Product version: 3.5

Sophos Mobile Control as a Service Startup guide. Product version: 3.5 Sophos Mobile Control as a Service Startup guide Product version: 3.5 Document date: August 2013 Contents 1 About this guide...3 2 What are the key steps?...4 3 First login...5 4 Change your administrator

More information

QuickStart Guide for Mobile Device Management. Version 8.6

QuickStart Guide for Mobile Device Management. Version 8.6 QuickStart Guide for Mobile Device Management Version 8.6 JAMF Software, LLC 2012 JAMF Software, LLC. All rights reserved. JAMF Software has made all efforts to ensure that this guide is accurate. JAMF

More information

Sophos Mobile Control Administrator guide. Product version: 3

Sophos Mobile Control Administrator guide. Product version: 3 Sophos Mobile Control Administrator guide Product version: 3 Document date: January 2013 Contents 1 About Sophos Mobile Control...4 2 About the Sophos Mobile Control web console...7 3 Key steps for managing

More information

BlackBerry Enterprise Server Express for Microsoft Exchange. Version: 5.0 Service Pack: 4. Upgrade Guide

BlackBerry Enterprise Server Express for Microsoft Exchange. Version: 5.0 Service Pack: 4. Upgrade Guide BlackBerry Enterprise Server Express for Microsoft Exchange Version: 5.0 Service Pack: 4 Upgrade Guide Published: 2013-02-21 SWD-20130221113643226 Contents 1 Overview: BlackBerry Enterprise Server Express...

More information

Installing Samsung SDS CellWe EMM cloud connectors and administrator consoles

Installing Samsung SDS CellWe EMM cloud connectors and administrator consoles Appendix 1 Installing Samsung SDS CellWe EMM cloud connectors and administrator consoles This section explains how you use the Cloud Management Suite installation wizard for the following purposes: To

More information

Basic Exchange Setup Guide

Basic Exchange Setup Guide Basic Exchange Setup Guide The following document and screenshots are provided for a single Microsoft Exchange Small Business Server 2003 or Exchange Server 2007 setup. These instructions are not provided

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios Devices GO!Enterprise MDM for ios Devices, Version 3.x GO!Enterprise MDM for ios Devices 1 Table of Contents GO!Enterprise

More information

REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER

REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER NEFSIS TRAINING SERIES Nefsis Dedicated Server version 5.1.0.XXX Requirements and Implementation Guide (Rev 4-10209) REQUIREMENTS AND INSTALLATION OF THE NEFSIS DEDICATED SERVER Nefsis Training Series

More information

Sophos Mobile Control Installation prerequisites form

Sophos Mobile Control Installation prerequisites form Sophos Mobile Control Installation prerequisites form Product version: 3.5 Document date: July 2013 Contents 1 About this document... 3 2 System environment... 3 3 Communication between devices and push

More information

Vocera Messaging Platform Administration Guide. Version 4.8

Vocera Messaging Platform Administration Guide. Version 4.8 Vocera Messaging Platform Administration Guide Version 4.8 Copyright 2002-2013 Vocera Communications, Inc. All rights reserved. Protected by US Patent Numbers D486,806; D486,807; 6,892,083; 6,901,255;

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for Android with TouchDown GO!Enterprise MDM for Android, Version 3.x GO!Enterprise MDM for Android with TouchDown 1 Table

More information

Integrating Cisco ISE with GO!Enterprise MDM Quick Start

Integrating Cisco ISE with GO!Enterprise MDM Quick Start Integrating Cisco ISE with GO!Enterprise MDM Quick Start GO!Enterprise MDM Version 3.x Overview 1 Table of Contents Overview 3 Getting GO!Enterprise MDM Ready for ISE 5 Grant ISE Access to the GO!Enterprise

More information

BlackBerry Universal Device Service. Demo Access. AUTHOR: System4u

BlackBerry Universal Device Service. Demo Access. AUTHOR: System4u Demo Access AUTHOR: System4u BlackBerry Universal Device Service Revisions Date Version Description Author June 26 th 2012 1.0 Roman Přikryl September 25 th 2012 1.5 Revision Roman Přikryl October 5 th

More information

CUSTOMER SAP Afaria Overview

CUSTOMER SAP Afaria Overview SAP Afaria 7 SP15 Document Version: 1.0 2016-06-13 CUSTOMER Content 1 Afaria Overview....3 1.1 About Afaria....3 1.2 Afaria Access and Support....4 1.3 Finding Information....5 2 Afaria Architecture....7

More information

Feature and Technical

Feature and Technical BlackBerry Mobile Voice System for SIP Gateways and the Avaya Aura Session Manager Version: 5.3 Feature and Technical Overview Published: 2013-06-19 SWD-20130619135120555 Contents 1 Overview...4 2 Features...5

More information

qliqdirect Active Directory Guide

qliqdirect Active Directory Guide qliqdirect Active Directory Guide qliqdirect is a Windows Service with Active Directory Interface. qliqdirect resides in your network/server and communicates with qliqsoft cloud servers securely. qliqdirect

More information

introducing The BlackBerry Collaboration Service

introducing The BlackBerry Collaboration Service Introducing the Collaboration Service 10.2 for the Enterprise IM app 3.1 introducing The Collaboration Service Sender Instant Messaging Server Collaboration Service 10 device Recipient V. 1.0 June 2013

More information

Kaseya Server Instal ation User Guide June 6, 2008

Kaseya Server Instal ation User Guide June 6, 2008 Kaseya Server Installation User Guide June 6, 2008 About Kaseya Kaseya is a global provider of IT automation software for IT Solution Providers and Public and Private Sector IT organizations. Kaseya's

More information

Administering Jive Mobile Apps

Administering Jive Mobile Apps Administering Jive Mobile Apps Contents 2 Contents Administering Jive Mobile Apps...3 Configuring Jive for Android and ios... 3 Native Apps and Push Notifications...4 Custom App Wrapping for ios... 5 Native

More information

WHITE PAPER Citrix Secure Gateway Startup Guide

WHITE PAPER Citrix Secure Gateway Startup Guide WHITE PAPER Citrix Secure Gateway Startup Guide www.citrix.com Contents Introduction... 2 What you will need... 2 Preparing the environment for Secure Gateway... 2 Installing a CA using Windows Server

More information

BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7. Upgrade Guide

BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7. Upgrade Guide BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7 Upgrade Guide Published: 2009-10-18 SWD-905156-1018090704-001 Contents 1 Choosing a BlackBerry Enterprise Server upgrade

More information

Sophos Mobile Control Installation guide. Product version: 5.1

Sophos Mobile Control Installation guide. Product version: 5.1 Sophos Mobile Control Installation guide Product version: 5.1 Document date: July 2015 Contents 1 Introduction...3 1.1 Sophos Mobile Control licenses...3 2 Integration...5 2.1 Ports and protocols...10

More information

Security Guide. BlackBerry Enterprise Service 12. for BlackBerry. Version 12.0

Security Guide. BlackBerry Enterprise Service 12. for BlackBerry. Version 12.0 Security Guide BlackBerry Enterprise Service 12 for BlackBerry Version 12.0 Published: 2014-11-12 SWD-20141106140037727 Contents Introduction... 7 About this guide...8 What is BES12?...9 Key features of

More information

What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise

What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise What's New in BlackBerry Enterprise Server 5.0 SP4 for Novell GroupWise Upgrade paths Enhancements to the setup application Administrators can upgrade to BlackBerry Enterprise Server 5.0 SP4 for Novell

More information

Frequently Asked Questions Enterprise Mobile Manager

Frequently Asked Questions Enterprise Mobile Manager Frequently Asked Questions Enterprise Mobile Manager FAQ: Enterprise Mobile Manager Contents Unable to connect the device to EMM Server... 4 Symptoms... 4 Resolution... 4 Unable to import AD into EMM Server

More information

1. What are the System Requirements for using the MaaS360 for Exchange ActiveSync solution?

1. What are the System Requirements for using the MaaS360 for Exchange ActiveSync solution? MaaS360 FAQs This guide is meant to help answer some of the initial frequently asked questions businesses ask as they try to figure out the who, what, when, why and how of managing their smartphone devices,

More information

BlackBerry Enterprise Server for Microsoft Exchange. Version: 5.0 Service Pack: 4. Upgrade Guide

BlackBerry Enterprise Server for Microsoft Exchange. Version: 5.0 Service Pack: 4. Upgrade Guide BlackBerry Enterprise Server for Microsoft Exchange Version: 5.0 Service Pack: 4 Upgrade Guide Published: 2014-01-16 SWD-20140116175501016 Contents 1 Overview: BlackBerry Enterprise Server...7 2 Planning

More information

BlackBerry Desktop Software User Guide

BlackBerry Desktop Software User Guide BlackBerry Desktop Software User Guide Version: 2.4 SWD-1905381-0426093716-001 Contents Basics... 3 About the BlackBerry Desktop Software... 3 Set up your smartphone with the BlackBerry Desktop Software...

More information

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown

GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown GO!Enterprise MDM Device Application User Guide Installation and Configuration for ios with TouchDown GO!Enterprise MDM for ios Devices, Version 3.x GO!Enterprise MDM for ios with TouchDown 1 Table of

More information

Introduction to the EIS Guide

Introduction to the EIS Guide Introduction to the EIS Guide The AirWatch Enterprise Integration Service (EIS) provides organizations the ability to securely integrate with back-end enterprise systems from either the AirWatch SaaS environment

More information

Click Studios. Passwordstate. Installation Instructions

Click Studios. Passwordstate. Installation Instructions Passwordstate Installation Instructions This document and the information controlled therein is the property of Click Studios. It must not be reproduced in whole/part, or otherwise disclosed, without prior

More information

DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014

DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014 DESLock+ Basic Setup Guide Version 1.20, rev: June 9th 2014 Contents Overview... 2 System requirements:... 2 Before installing... 3 Download and installation... 3 Configure DESLock+ Enterprise Server...

More information

RoomWizard Synchronization Software Manual Installation Instructions

RoomWizard Synchronization Software Manual Installation Instructions 2 RoomWizard Synchronization Software Manual Installation Instructions Table of Contents Exchange Server Configuration... 4 RoomWizard Synchronization Software Installation and Configuration... 5 System

More information

Enterprise Mobility Management Migration Migrating from Legacy EMM to an epo Managed EMM Environment. Paul Luetje Enterprise Solutions Architect

Enterprise Mobility Management Migration Migrating from Legacy EMM to an epo Managed EMM Environment. Paul Luetje Enterprise Solutions Architect Enterprise Mobility Management Migration Migrating from Legacy EMM to an epo Managed EMM Environment Paul Luetje Enterprise Solutions Architect Table of Contents Welcome... 3 Purpose of this document...

More information

BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7. Installation Guide

BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7. Installation Guide BlackBerry Enterprise Server for Microsoft Exchange Version: 4.1 Service Pack: 7 Installation Guide Published: 2009-10-18 SWD-906136-1018091037-001 Contents 1 Planning a BlackBerry Enterprise Server installation...

More information

QMX ios MDM Pre-Requisites and Installation Guide

QMX ios MDM Pre-Requisites and Installation Guide QMX ios MDM Pre-Requisites and Installation Guide QMX System Requirements The following requirements apply to the system that QMX will be installed on. This system will host the QMX MDM Service. These

More information