Maintenance Release. Notes. BlackBerry Enterprise Service 10. Version: 10.2 Maintenance Release: 5

Transcription

1 BlackBerry Enterprise Service 10 Version: 10.2 Maintenance Release: 5 Maintenance Release Notes

2 Published: SWD

3 Contents 1 What's new in BlackBerry Enterprise Service 10 version Supported upgrade environments... 7 Upgrading work space apps Fixed issues Known issues Provide feedback Legal notice...19

4 What's new in BlackBerry Enterprise Service 10 version What's new in BlackBerry Enterprise Service 10 version Item SSL support Description BlackBerry Enterprise Service 10 version does not support SSLv3 and earlier releases. IT policy rules The following IT policy rules are new for BlackBerry 10: Use BlackBerry Assistant When Locked: Specify if a user can use the BlackBerry Assistant when a BlackBerry device is locked. Setting this rule to Disallow prevents the BlackBerry Assistant from working when the device is locked. This rule applies when the device uses a password and is paired with a Bluetooth device. Applies to BlackBerry 10 OS Restrict Exchange ActiveSync and SCEP Enrollment to TLS 1.2: Specify whether a BlackBerry device can use only TLS 1.2 to connect to mail servers using Exchange ActiveSync or to connect to CAs for SCEP certificate enrolment. If the value is No, the Exchange ActiveSync and CA connections use TLS 1.0 or SSL 3.0. If the value is Yes, the Exchange ActiveSync and CA connections use TLS 1.2 only. Applies to BlackBerry 10 OS later than Allow SSL Version 3.0 in the Work Browser: Specify whether the work browser can use SSL version 3.0. If you set this rule to Disallow, the work browser cannot use SSL version 3.0 to connect to a website. Applies to BlackBerry 10 OS later than

5 What's new in BlackBerry Enterprise Service 10 version Item Description Allow Untrusted Connections to the Messaging Server: Specify whether a device can make an untrusted connection to your organization s messaging server. If you set this rule to Allow, the device may prompt the user to accept a connection when the certificate is not trusted. If you set this rule to Disallow, the device does not prompt the user when the certificate is not trusted and the connection to the messaging server fails. Applies to BlackBerry 10 OS later than Address for User Requested Work Apps: Specify the address that a user can send links to when they find apps in BlackBerry World that they would like to install in the work space using BlackBerry World for Work. When you specify an address, the Request for Work option becomes available for apps in BlackBerry World. When a user selects the Request for Work option, the device generates an message with a link to the app from the user s work account to the address that you specify in this rule. Applies to BlackBerry 10 OS later than Allow Non-FQDN Domains as Trusted Domains For Single Sign-On Authentication: Specify whether a BlackBerry device can treat the non- FQDN domains in your organization s network as trusted domains and use single sign-on authentication when a user tries to access them. When you set this rule to Allow, you must specify which authentication methods are allowed for this rule using the Allow Single Sign-On Authentication Using Kerberos for Non-FQDN Domains rule, the Allow Single Sign-On Authentication Using NTLM for Non-FQDN Domains rule, or both. Applies to BlackBerry 10 OS later than Allow Single Sign-On Authentication Using Kerberos for Non-FQDN Domains: Specify whether a BlackBerry device can use Kerberos for single sign-on authentication when a user tries to access a non-fqdn domain in your organization s network. This rule takes effect only if the Set Non-FQDN Domains as Trusted Domains For Single Sign-On Authentication rule is set to Allow. Applies to BlackBerry 10 OS later than Allow Single Sign-On Authentication Using NTLM for Non-FQDN Domains: Specify whether a BlackBerry device can use NTLM for single sign-on authentication when a user tries to access a non-fqdn domain in your organization s network. This rule takes effect only if the Set Non- 5

6 What's new in BlackBerry Enterprise Service 10 version Item Description FQDN Domains as Trusted Domains For Single Sign-On Authentication rule is set to Allow. Applies to BlackBerry 10 OS later than Allow BBM Channels: Specify whether BBM Channels is available on a BlackBerry device. If you set this rule to Disallow, a user cannot use BBM Channels. This rule takes effect only if the BBM rule is set to Allow. For more information, visit to read KB Allow Bluetooth Low Energy: Specify if the BlackBerry device can use Bluetooth Low Energy connections. If you set this policy to disable the BT LE functionality is not available. This rule applies only to the following activation types: Work space only Work and personal - Regulated Applies to BlackBerry 10 OS and later Allow Bluetooth Page Scan: Specify if a device can use Bluetooth page scan mode to search for devices that are trying to connect to it. If you do not select this rule, the device never uses page scan for incoming connections, but still permits outgoing connections to paired devices. Work space only Work and personal - Regulated Applies to BlackBerry 10 OS and later 6

7 Supported upgrade environments Supported upgrade environments 2 You can use the setup application to upgrade BlackBerry Enterprise Service 10 version 10.2, , , or Upgrading work space apps To support new features and additional operating systems, BlackBerry posts new versions of the following work space apps in the App Store and Google Play: Device type Apps ios Work Connect Work Browser Documents To Go Work Security ID Android Work Space Manager Secure Work Space Documents To Go Work Security ID Notify users that they should upgrade the work space apps when prompted. If users upgrade their device operating system and do not upgrade to the latest version of the work space apps, the work space may not function as expected. For more information about the supported device operating systems, visit docs.blackberry.com/bes10 to see the BlackBerry Enterprise Service 10 Compatibility Matrix. For more information about enabling and managing the work space, visit docs.blackberry.com/bes10 to read the BlackBerry Enterprise Service 10 Configuration Guide and the Universal Device Service Advanced Administration Guide. 7

8 Fixed issues Fixed issues 3 BlackBerry Device Service When you made a change to the Attribute Mapping username and clicked Save, if you returned to the Attribute Mapping page the username change was not saved. (JI ) Work space apps for ios and Android For some ios devices, the calendar did not show meeting reminders. (DT , JI ) The work space IT policy rule, "Disable work space and after N days delete data" did not work as expected. (DT , JI ) In certain circumstances, browsing in a secure browser on Samsung Galaxy Tab 10.1 devices was slower than expected. (DT , JI ) The date and time in calendar meeting invitations were links. Only the date should have been a link. (DT , JI ) For some Android devices, the Media app stopped responding whenever a user opened a video file that was saved to the device from an message. (DT , JI ) For a Samsung Galaxy Tab 10.1 device running Android 4.0.4, if you changed the browser's default webpage, the change was not saved. (DT , JI ) For ios devices, if you created a secure app in the Universal Device Service, the following error appeared when a developer tried to sign the app: "codesign_allocate: file not in an order that can be processed (code signing DRs info out of place): object file format unrecognized, invalid, or unsuitable". (DT , JI ) 8

9 Known issues Known issues 4 Installation If you install BlackBerry Enterprise Service 10 on a new server in an existing BlackBerry domain while the BES10 Core is unavailable, the Universal Device Service SRP ID changes to the SRP ID of the new server and any devices that were enrolled using the original SRP ID do not work. (JI ) Workaround: Re-enroll the devices. If you try to install a standby instance of BlackBerry Enterprise Service 10 when the SRP information is not provided in the database, you are not prompted to enter the required information, and the installation does not complete. (DT ) Workaround Make sure that the SRP ID and SRP port setting information is populated in the database. If you upload a custom Communication Module certificate in the BES10 Configuration Tool, and add an extra Communication Module instance, or uninstall and reinstall a Communication Module, you must upload the custom certificate again on each computer running the Communication Module. For more information, visit to read article KB (DT ) During the installation process, if you specify custom port numbers for the Administration settings (for example, HTTPS, HTTP, HA JNDI, and Local JNDI settings) using the BES10 Configuration Tool when setting up a BlackBerry Administration Service pool, you cannot log in to the BlackBerry Administration Service. (DT ) Workaround Run the setup application again. If you install a second instance of BlackBerry Enterprise Service 10 and the SRP host is not available, the installation does not complete successfully. (DT , JI ) Workaround: If you are using a router for your SRP host, verify that is it running, or use the default settings and set up the router after you install both instances. If you install BlackBerry Enterprise Service 10 on the same computer as BlackBerry Enterprise Server 5.0 SP4, when you try to uninstall BlackBerry Enterprise Service 10, the setup application deletes the BlackBerry Device Communication components. In some circumstances, this affects the activation of devices managed by the BlackBerry Enterprise Server. (DT ) 9

10 Known issues The setup application configures the file path for the AppMonitoring Service to C:\Program Files (x86)\research In Motion \BlackBerry Enterprise Service 10\Logs\AppMonitoringService instead of C:\Program Files (x86)\research In Motion \BlackBerry Enterprise Service 10\Logs\Scheduler\AppMonitoringService. (DT ) If you try to install BlackBerry Enterprise Service 10 in a folder that includes Unicode or Chinese characters, the installation does not complete. (DT ) During installation, if you type more than 64 characters in the Organization field, the installation does not complete successfully. (DT ) Workaround: Do not use an organization name with more than 64 characters. If you install a new SSL certificate in the web keystore, the alias for the certificate must be httpssl. (DT ) Workaround: Recreate the certificate with the appropriate alias. If the service account that you use to install BlackBerry Enterprise Service 10 has a password that contains spaces, the Universal Device Service does not install. (DT ) Upgrade After upgrading, if all existing users reactivate their devices using the BlackBerry Secure Connect Service, you can remove the Communication Module from the computer that is located in the DMZ. If you remove the Communication Module before all users reactivate their devices, any devices that were not reactivated become unmanaged. If you rerun the installation or upgrade process, the Microsoft SQL Server port setting (shown in the Database Information dialog box) has a value of zero (0) rather than the default port number of (DT ) Workaround: Make sure that the Microsoft SQL Server is running, change the port setting to 1433, and then connect again. During the upgrade process, a warning message might appear indicating that you have a low amount of available disk space, even though there is enough space available. (DT ) Licensing In previous releases, the BlackBerry Account Center website was used to obtain activation IDs and view license information for your domain. myaccount replaces the BlackBerry Account Center. If you had a BlackBerry Account Center account, you can use the account credentials to log in to myaccount. References to the BlackBerry Account Center remain in the documentation. The licensing status displays a warning (yellow) icon instead of an error (red) icon when the BlackBerry Licensing Service is not available. (DT ) If another application on the computer is using the BlackBerry Licensing Service port connection, when you click Test connection on the Licensing settings tab, BlackBerry Management Studio displays "Successful" even though the connection was not successful. (DT ) 10

11 Known issues When you install the Universal Device Service using a permanent license, if you try to add a temporary license in the Universal Device Service console, a misleading error message displays that states that the license that you are trying to add is not valid. (DT ) BES10 Configuration Tool When you try to complete certain tasks using the BES10 Configuration Tool, an error message is displayed if you used a different account than the one you used to install BlackBerry Enterprise Service 10. (DT ) Workaround: Use the same account that you installed BlackBerry Enterprise Service 10 with. If you installed a standalone BlackBerry Router with the BlackBerry Device Service version 6.2, when you upgrade the BlackBerry Router to BlackBerry Enterprise Service 10, the BES10 Configuration Tool is not installed with the BlackBerry Router. (DT ) Workaround: If the BES10 Configuration Tool is missing, you can manually update the registry keys in the following location: HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Research In Motion\BlackBerry Enterprise Service\Router. If you use the BES10 Configuration Tool to change the password for the Core Module, you must also change the password on each computer that hosts another instance of the core components, and on each computer that hosts the Administration Consoles. When you try to change the password on the computer that hosts the standby instance of the core components, the BES10 Configuration Tool does not accept the old password in the Current password field. (DT ) Workaround: When you change the Core Module password on the standby instance, type the new password in the Current password, New password, and Confirm new password fields. The BES10 Configuration Tool accepts and updates the password. If you open the BES10 Configuration Tool and change the keystore password on the Keystore settings panel, when you click OK, the fields on the panel might disappear. (DT ) Workaround: After you change the password, click Apply and then click OK, or click OK twice. BlackBerry Device Service In the BlackBerry Device Service console, the description for the Use BBM Protected IT Policy rule does not include the following information: BBM is required for work space only devices; a version of BBM that is later than is required for BlackBerry Balance and regulated BlackBerry Balance devices. If you create a VPN profile and enter a space before the password or after the password, you can push the profile to a device but the profile does not work. (JI ) In the BlackBerry Administration Service, when you check the profile for a user, the value in the Domain field is not the user s actual domain name. (JI ) Workaround: In the profile, manually update the Domain field. 11

12 Known issues When you create an administrator account using LDAP authentication, the username field accepts a UID but not a Distinguished Name (DN). (DT ) When you configure the BlackBerry Device Service to connect to an LDAP directory, it is not clear from the UI that the DISPLAY_NAME and _ADDRESS fields in the Attribute Mapping must contain a value. (DT ) In a clustered environment, only the BlackBerry Administration Service node that was used to create the connection to a company directory, can detect the company directory. (DT ) When you create an IBM Notes Traveler profile, you can enter a maximum of 257 characters in the SyncML server field. (DT ) In Certificate retrieval settings, if you edit an existing OCSP or LDAP name and change any of the letters to an uppercase letter and do not make any other changes, you cannot save the updated name. (DT ) If you have many users, the BlackBerry Enterprise Service 10 User Administration Tool -stats -b parameters may not provide results before the server time limit is reached. (DT ) Workaround: Use the g subparameter to obtain stats for groups of users instead of trying to obtain stats for all users in one report. After you remove the BlackBerry Collaboration Service and delete the component information manually using the BlackBerry Administration Service, the BlackBerry Collaboration Service is still visible in the component view. (DT ) In the BlackBerry Administration Service, under BlackBerry Solution topology > BlackBerry Domain, the following information displays on the page: You can change BlackBerry Domain information, send messages to BlackBerry Domain users, review the IT policies used in the BlackBerry Domain, and more. The BlackBerry Domain consists of a single BlackBerry Configuration Database and all the BlackBerry Domain instances that use it. However, you can send messages to BlackBerry Domain users only after they have activated devices. (DT ) If you install the BlackBerry Administration Service on three computers in a clustered environment, when you start the BlackBerry Administration Service instances one at a time, the third instance is slow to start. (DT ) If you are using Internet Explorer 8 in Standard mode, you cannot navigate between tabs in the BlackBerry Administration Service. (DT ) If you set up SNMP monitoring, changes to some statistics are not reported. (DT , DT ) If you are using Google Chrome or Mozilla Firefox to view the BlackBerry Administration Service, on the Users page, when you click Reset search results configuration, the results on the screen might overlap, making the information difficult to read. (DT ) To delete an application from BlackBerry World for Work using the BlackBerry Administration Service, you must first update the software configuration, then wait for the BlackBerry Administration Service to complete three job tasks (Profile 12

13 Known issues and IT policy, Application Removing, and Profile and IT policy) before you can delete the application using Manage applications. (DT ) When you select Synchronize user for a user account that has not been changed in your organization's Microsoft Active Directory, the BlackBerry Administration Service displays a message that the user has been successfully synchronized, even though no changes were made to the user account. (DT ) BlackBerry Management Studio In some circumstances, the role permissions for an administrator account are not synchronized correctly between the BlackBerry Administration Service and BlackBerry Management Studio. (DT ) Workaround: Remove the role from the administrator account, save, and apply the role again. When creating a user account in BlackBerry Management Studio for a user in your company directory, the information in the Username and Domain fields is incorrect. (DT ) Workaround: Manually update the fields with the correct information. In BlackBerry Management Studio, if you try to set a device password using an invalid password (fewer than four characters or sequential), the following error message appears: An error has occurred and the requested action could not be performed. The user should receive an error message describing the password requirements. (DT ) In Licensing settings, the polling interval appears to revert to the default setting when you change the Licensing infrastructure connection without saving. (DT ) Workaround: Refresh the page. If a user without the Security Administrator role logs in to BlackBerry Management Studio and clicks the "Test connection" button on the Switch server window, the following error message appears: An error has occurred and the requested action cannot be performed. The user should receive an error message that they do not have the permissions required for this task. (DT ) If there s more than one Microsoft Active Directory user with the same display name but a different address, you cannot add a device for one of those users. (DT ) Workaround: Create the additional users using BlackBerry Management Studio or the BlackBerry Device Service. In BlackBerry Management Studio, on the User details page, the values in the Storage and Available storage fields for ios devices and Android devices are the total system memory and available system memory for the mobile operating system on the device. (DT ) If the session expires while you are logged in, BlackBerry Management Studio may display an error instead of a message about the session expiring. (DT ) 13

14 Known issues Universal Device Service ios apps created with SDK version 6 are no longer supported in the work space. If you try to secure an ios app that is created with ios SDK version 6, the error message displayed in the Universal Device Service is not detailed. (JI ) If you use the same profile name for a Work Space HTTP Proxy profile and for a Global HTTP Proxy profile, an error message displays. (JI ) Workaround: Use different names for the profiles. When you update an app, and on the Confirm Application Upload screen you select the Secured application check box, after you click Submit, the Secured application check box is cleared. (JI ) When you remove a user that has an ActiveSync profile, the user's device is not removed from the Allowed Devices list. (JI ) In the Available Settings section of the Universal Device Service console, the number of users that are associated with the default Work Space IT policy always displays as zero. (JI ) In the Universal Device Service console, after an administrator updates the "Maximum grace period for device lock" IT Policy and sets the policy to disabled, the policy is not enforced on the device. For more information, refer to Apple issue ID: (JI ) In the Universal Device Service console, after an administrator sets the "Allow Touch ID to unlock device" IT Policy to disabled and assigns it to a user, the policy is not enforced on the device. For more information, refer to Apple issue ID: (JI ) In the Universal Device Service console in the SMTP Server page, when an administrator clicks Received to confirm the SMTP setting, the Authentication type changes to 'None.' (JI ) In the Universal Device Service console, if you are viewing a user's settings and you deactivate the user's device, if you then click Communication Logs, an error appears. (JI ) Workaround: Refresh the page. If an administrator creates an IT Policy that has multiple password constraints (such as require uppercase letters and require special characters), when a user enters a password that fulfills the constraints, the password is still not accepted. (JI ) Workaround: Do not set an IT Policy that requires multiple password constraint. In the Universal Device Service console, when you add users they are automatically assigned the Default IT policy and the Default Work Space IT policy, however the Work Space menu shows that 0 users are assigned to the Default Work Space IT policy. (JI ) 14

15 Known issues In some circumstances, when you use the BES10 Configuration Tool to specify a large certificate chain for the Communication Module SSL certificate and activate a Secure Work Space device, the BlackBerry Secure Connect Service logs include SSL exceptions. (JI ) Workaround: Specify a Communication Module SSL certificate where its.pfx file contains only one certificate. When configuring the connection to an LDAP directory, there is no option in the UI to select SSL authentication with anonymous authorization. (DT ) Workaround: Using MMC, import the CA certificate to the computer that hosts the Universal Device Service. In the Universal Device Service console, in Company Directory > Corporate LDAP Directory, confirm that the LDAP port setting is 636, and clear the Authorization required option. You can set the "Enable auto-lock" IT policy rule to a time period that is longer than the maximum allowed auto-lock time on certain ios devices. (DT ) In some circumstances, when you replace an existing secure app in an Application Definition, the current app is not replaced. Instead, both versions are installed and the newly uploaded one is marked as not secure. (DT ) When connecting to an LDAP directory, the Object class field on the Company Directory page accepts a single keyword only and not the expected aggregate format. For example, instead of entering (objectclass=person) in the Object class field, you must enter the single keyword, person. (DT ) In certain circumstances, you cannot upload binary application sources to an Application definition, and an error message is displayed. (DT ) Workaround: Try uploading the file again. If you specify a proxy authentication type other than basic for Microsoft Exchange Web Services, then in the Universal Device Service, if you edit the Exchange ActiveSync Configuration and click the Test Connection button, an error occurs. (DT ) If the application signing certificate for an app in a software configuration expires, you must update the app version and sign it with a renewed version of the same certificate. Otherwise, the updated app may not work on users' devices. (DT ) Workaround: If the updated app does not work on devices, uninstall and then reinstall the app. If you update the SIM card information for an ios device, the Universal Device Service and the BlackBerry Management Studio do not show that change. (DT ) BES10 Self-Service The Self Service portal logs are saved to the default location of C:\Program Files (x86)\research In Motion\BlackBerry Enterprise Service 10\Logs\, even if you change the location during installation. (JI ) 15

16 Known issues In some circumstances, a user in the Universal Device Service cannot log in to BES10 Self-Service with login information from Microsoft Active Directory. (DT ) High availability When installing a secondary server, in the Administration settings screen you can use the same pool name that the primary server uses. (JI ) If your organization s domain is configured for high availability and supports Secure Work Space for ios devices, you need to follow the instructions in the task, "Configure the standby instance to support notifications for work space-enabled ios devices" in the BlackBerry Enterprise Service 10 Configuration Guide. Completing this task allows ios device users to continue receiving notifications after a high availability failover. When you start the Enterprise Management Web Service on the standby instance, device activations might not complete. (DT ) Workaround: Restart the Enterprise Management Web Service on the primary instance. If you reinstall the standby instance on another server in the BlackBerry Administration Service, the original standby instance is still listed as the failover partner for the primary instance. (DT ) If you install a standby instance, the setup application may show a BlackBerry Device Service instance as an option in the high availability drop-down list. This option should not appear in the list. (DT ) Disaster recovery In a disaster recovery scenario, if the restored databases have different names than the original databases, BlackBerry Enterprise Service 10 does not function correctly. (DT ) Work space apps for ios and Android If you change certain Microsoft ActiveSync policies, for example the Max HTMLBodyTruncationSize or Max Body TruncationSize, Microsoft ActiveSync does not work as expected on devices. (DT , JI ) Workaround: Change policies back to the default values. On ios devices, if you create a certificate that has more than 2048 characters, activate the device, and then update the device with a smaller certificate, the device continues to use the original certificate. (DT , JI ) Workaround: Delete the original certificate from the device, deactivate the device, and then reactivate the device. For ios devices, a user cannot create a contact using Work Connect unless they allow Work Connect to access their contacts. (DT , JI ) Workaround: Instruct users to allow Work Connect to access contacts in the security settings on the device. 16

17 Known issues In certain circumstances, if a user receives an "Invalid Address" message when adding an invitee to a meeting in the Calendar app, even after the user enters the correct address, the invitee is not saved. (DT , JI ) When a user clicks a non-http or non-https link in an (for example, FTP://), the Work Browser prepends to the link, causing the link to open incorrectly. (DT , JI ) For some ios devices, when a user clicks a link in an message that is supposed to link to a section further down in the message, the browser opens instead. (DT , JI ) For ios devices, when a user creates a Task in Outlook, changes to the Notes field are not synchronized between the ios device and Outlook. (DT , JI ) For ios devices, users cannot open files in the Documents To Go app if they deactivate and reactivate their device. (DT , JI ) Workaround: Delete and reinstall the Documents To Go app. If a custom enterprise app is secured through BlackBerry Enterprise Service 10, the app should use the secure PIM app for and the secure browser to access webpages. If the secure app integrates with apps such as Facebook or Twitter, when a user tries to share data with insecure versions of these apps, the communication should be blocked and an appropriate error message displayed. Currently, secured apps do not access the secure PIM app to send , and when trying to connect to an insecure version of apps such as Facebook or Twitter, the user does not receive an error message indicating why the communication is blocked (the destination app is not secure or is not installed). (DT , JI ) When a user accesses their message in the work space for the first time, in certain circumstances, the content is blank and the Work Connect app stops responding. (DT , JI ) Workaround: Close and reopen the Work Connect app. If a user installs the BES12 Client on an Android device and installs the BES10 Manager before they activate their device, when the user opens the BES10 Manager they do not see any error messages. (DT , JI ) For ios devices, when a user views a meeting reminder on the locked screen of their device, and they press and drag the appointment to the right to open Work Connect, Work Connect opens at the previous location that the user was in instead of at the calendar. (DT , JI ) 17

18 Provide feedback Provide feedback 5 To provide feedback on this content, visit 18

19 Legal notice Legal notice BlackBerry. All rights reserved. BlackBerry and related trademarks, names, and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world. Bluetooth is a trademark of Bluetooth SIG. Facebook is a trademark of Facebook, Inc. ios is a trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. ios is used under license by Apple Inc. Android is a trademark of Google Inc. Microsoft, Active Directory, ActiveSync, Internet Explorer and SQL Server are trademarks of Microsoft Corporation. IBM Notes Traveler is a trademark of International Business Machines Corporation. JavaScript is a trademark of Oracle and/or its affiliates. Samsung is a trademark of Samsung Electronics Co., Ltd. Twitter is a trademark of Twitter, Inc. All other trademarks are the property of their respective owners. This documentation including all documentation incorporated by reference herein such as documentation provided or made available on the BlackBerry website provided or made accessible "AS IS" and "AS AVAILABLE" and without condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however, BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this documentation to you in a timely manner or at all. This documentation might contain references to third-party sources of information, hardware or software, products or services including components and content such as content protected by copyright and/or third-party websites (collectively the "Third Party Products and Services"). BlackBerry does not control, and is not responsible for, any Third Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by BlackBerry of the Third Party Products and Services or the third party in any way. EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE 19

20 Legal notice DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL BLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALL HAVE NO OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY. THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED BLACKBERRY DISTRIBUTORS (ALSO INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS. IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR, EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANY AFFILIATES OF BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION. Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry Internet Service. Check with your service provider for availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with BlackBerry's products and services may require one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any Third Party Products and Services that are provided with BlackBerry's products and services are provided as a convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warranties of any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of 20

21 Legal notice separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a license or other agreement with BlackBerry. The terms of use of any BlackBerry product or service are set out in a separate license or other agreement with BlackBerry applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRY PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION. BlackBerry Limited 2200 University Avenue East Waterloo, Ontario Canada N2K 0A7 BlackBerry UK Limited 200 Bath Road Slough, Berkshire SL1 3XE United Kingdom Published in Canada 21