Blackberry JAVA DEVELOPMENT ENVIRONMENT - - FEATURE AND TECHNICAL Bedienungsanleitung

BlackBerry Enterprise Server for IBM Lotus DominoVersion: 5.0Feature and Technical Overview

Feature DescriptionThe BlackBerry MDS Application Console supports BlackBerry MDS IntegrationService version 5.0 or later.Support for new BlackBerry®

Type Descriptionhome Wi-Fi networks A home Wi-Fi network uses a single wireless access point to provide Internet accessthrough a broadband gateway. Th

Type DescriptionThin access points with an external controller can provide a more seamless roamingexperience for users with Wi-Fi enabled BlackBerry d

Feature DescriptionThe BlackBerry Enterprise Server is designed to work with the RSA® AuthenticationManager to provide software token support for use

Component DescriptionBlackBerry Enterprise Server The BlackBerry Enterprise Server provides productivity tools and data from anorganization's app

Component Descriptionwireless service provider A wireless service provider is a telephone company that provides services for BlackBerrydevices.Wi-Fi e

Priority for connections that BlackBerry devices make over a Wi-Fi networkWi-Fi® enabled BlackBerry® devices connect over a Wi-Fi network to the Black

BlackBerryservicesService providerwith GSM®/EDGEnetwork or UMAnetworkWi-Fi network andservice providerwith GSM/EDGEnetworkWi-Fi network andno servicep

BlackBerryservicesService providerwith GSM®/EDGEnetwork or UMAnetworkWi-Fi network andservice providerwith GSM/EDGEnetworkWi-Fi network andno servicep

IEEE 802.11 wireless networking standards that Wi-Fi enabled BlackBerrydevices supportWi-Fi® enabled BlackBerry® devices support the IEEE® 802.11a, IE

Characteristics of the IEEE 802.11g wireless networking standard that Wi-Fi enabledBlackBerry devices supportCharacteristic Descriptionfallback speeds

Feature DescriptionView and use contacts in public folders Users with BlackBerry Device Software version 5.0 or later can view and use contactsin publ

Glossary7AESAdvanced Encryption StandardAJAXAsynchronous JavaScript® and XMLAPIapplication programming interfaceASCIIAmerican Standard Code for Inform

DRMDigital Rights ManagementECCElliptic Curve CryptographyEDGEEnhanced Data Rates for Global EvolutionGALGlobal Address ListGANgeneric access networkG

Java MEJava® Platform, Micro EditionJSONJavaScript® Object NotationLANA local area network (LAN) is a computer network shared by a group of computers

Short Message ServiceSNMPSimple Network Management ProtocolSQLStructured Query LanguageSRPServer Routing ProtocolSSLSecure Sockets LayerTCP/IPTransmis

Provide feedback8To provide feedback on this deliverable, visit www.blackberry.com/docsfeedback.Feature and Technical OverviewProvide feedback112

Legal notice9©2009 Research In Motion Limited. All rights reserved. BlackBerry®, RIM®, Research In Motion®, SureType®, SurePress™ andrelated trademark

HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONSMAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED

thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of separatelicenses and other agr

Feature Description• 4.5\UpgradeV20071010.sql• 4.5\UpgradeV20071030.sql• 4.5\UpgradeV20080715.sql• 5.0\UpgradeV20090122.sql• 5.0\UpgradeV99990101.sqlB

Feature DescriptionSpecify maintenance windows forthresholds or BlackBerry EnterpriseServer instancesYou can use the BlackBerry Monitoring Service con

BlackBerry Enterprise Server architecture2Architecture: BlackBerry Enterprise ServerA BlackBerry® Enterprise Server consists of various components tha

Feature and Technical OverviewArchitecture: BlackBerry Enterprise Server13

Component DescriptionBlackBerry Administration Service The BlackBerry Administration Service connects to the BlackBerry ConfigurationDatabase. You can

Component DescriptionBlackBerry MDS Connection Service The BlackBerry MDS Connection Service permits users to access web content, theInternet, or your

Component DescriptionBlackBerry Policy Service The BlackBerry Policy Service performs administration services over the wirelessnetwork. It sends IT po

Component DescriptionData traffic from BlackBerry devices bypasses the wireless network when BlackBerrydevices are connected to users' computers.

SWDT305802-525776-0331031530-001

Component DescriptionBlackBerry Administration Service The BlackBerry Administration Service permits you to manage the BlackBerryCollaboration Service

Architecture: Remote BlackBerry MDS Connection ServiceYou can install the BlackBerry® MDS Connection Service on a computer that is separate from the c

Component DescriptionBlackBerry Enterprise Server The BlackBerry Enterprise Server encrypts and compresses content data thatBlackBerry devices receive

Component DescriptionBlackBerry Administration Service The BlackBerry Administration Service permits you to manage the BlackBerry MDSIntegration Servi

Component DescriptionBlackBerry Router The BlackBerry Router connects to the wireless network to send application datato and from BlackBerry devices.o

Component DescriptionBlackBerry Configuration Database The BlackBerry Configuration Database contains configuration data that theBlackBerry Administra

Component DescriptionBlackBerry Administration Service The BlackBerry Administration Service permits you to manage the BlackBerryEnterprise Server, us

You can install the BlackBerry Monitoring Service database on the same computer as the BlackBerry Monitoring Service, on thesame database server as th

Component DescriptionBlackBerry Monitoring Service console The BlackBerry Monitoring Service console is a web-based application that providesa UI that

Component DescriptionBlackBerry Administration Service The BlackBerry Administration Service permits you to manage the BlackBerryAttachment Service in

Contents1 Overview: BlackBerry Enterprise Server...

Architecture: BlackBerry Web Desktop ManagerThe BlackBerry® Web Desktop Manager consists of server-side services that are installed with the BlackBerr

BlackBerry Enterprise Server components and features3BlackBerry messaging and collaboration servicesThe BlackBerry® messaging and collaboration servic

Feature DescriptionYou can turn off wireless email reconciliation.email message filters You or users can create and change email message filters. Emai

Feature DescriptionUsers can send messages with attachments only from supported BlackBerry devicesthat are running BlackBerry® Device Software version

Feature Descriptionpersonal folders Users with BlackBerry devices that are running BlackBerry Device Software version5.0 or later can add, delete, mov

• BlackBerry® Client for use with Microsoft® Office Live Communications Server 2005• BlackBerry® Client for use with Microsoft® Office Communications

Feature Descriptioncontact pictures Using the latest versions of the collaboration clients, users can add pictures to thecontacts in their contact lis

Feature Descriptionlocation information Using the latest version of the BlackBerry Client for IBM Lotus Sametime or theBlackBerry Client for use with

Feature Descriptioninitial synchronization When the BlackBerry® Enterprise Server sends service books to BlackBerry devicesto turn on wireless data sy

Attachment file formats that the BlackBerry Attachment Service supportsFormat ExtensionAdobe® Acrobat® versions 1.1, 1.2, 1.3, and 1.4 .pdfASCII text

Managing BlackBerry device security over the wireless network using IT administration commands... 49BlackBerry Monitoring Service

Component Description• BlackBerry MDS Integration Service: The BlackBerry MDS IntegrationService enables BlackBerry MDS Runtime Applications to intera

BlackBerry ApplicationsBlackBerry® devices support BlackBerry® Browser Applications, BlackBerry Java® Applications, and BlackBerry® MDSRuntime Applica

You must install and activate the BlackBerry MDS Runtime on BlackBerry devices before you install BlackBerry MDS RuntimeApplications on BlackBerry dev

The BlackBerry MDS Connection Service also receives and responds to web requests from the BlackBerry® Browser and otherBlackBerry Applications, so tha

Feature Descriptionaccess control You can configure push initiators and push rules that define which server-side pushapplications can send application

Feature DescriptionYou can monitor the messages that BlackBerry MDS Runtime Applications send toor from the application servers or web servers that ho

When you assign a software configuration to a group or individual user accounts, the BlackBerry Administration Service createsa deployment job to inst

Feature Descriptioncontrol the resources that third-partyapplications can accessYou can use standard application control policies or create custom app

Criteria Descriptionauthenticity A BlackBerry device authenticates itself with the BlackBerry Enterprise Server to provethat it knows the master encry

How the BlackBerry Enterprise Server uses a Triple DES encryption algorithmThe BlackBerry® Enterprise Solution uses a two-key Triple DES encryption al

Process flow: Starting an instant messaging session using the BlackBerry Client for Novell GroupWise Messenger...

Protection of user data on locked BlackBerry devicesWhen the content protection feature on BlackBerry® devices is turned on, the BlackBerry devices ar

Item Descriptiontasks• subject• information included in the body of tasksProtection of master encryption keys on locked BlackBerry devicesIf you turn

Goal Descriptionpermanently delete application data ona lost or stolen BlackBerry deviceIf a BlackBerry device is lost or stolen, you can send the Era

Feature Description• configuration settings, such as the component name, component version, andcomputer name• statistics such as CPU usage, memory usa

Feature Descriptionnotification messages You can configure the BlackBerry Monitoring Service to send notification messagesto one or more recipients by

You can install the BlackBerry Router on a computer that is separate from the computer that hosts the BlackBerry EnterpriseServer to route data betwee

Feature Descriptionsecurity enforcement You can configure IT polices that define security settings for BlackBerry devices,the BlackBerry® Desktop Soft

Feature Descriptioncustom server and component namesusing friendly namesTo help you identify servers and component instances, you can define a friendl

Feature Descriptioncustomizable interface You can customize the appearance of the UI to match your organization'srequirements. You can customize

Supported feature BlackBerry Web Desktop Manager BlackBerry Desktop Manager• user accounts need to be added toa BlackBerry Enterprise Server• user acc

Direct connections between BlackBerry devices and the BlackBerry Router over an enterprise Wi-Fi network... 102Wi-Fi connection when a VPN connect

Supported feature BlackBerry Web Desktop Manager BlackBerry Desktop Manager• if users without active BlackBerrydevices connect BlackBerrydevices that

Supported feature BlackBerry Web Desktop Manager BlackBerry Desktop Managermodem support for devices not supported supportedprompt for BlackBerry devi

BlackBerry Enterprise Server high availability4High availability permits you to provide minimum downtime for BlackBerry® services if BlackBerry® Enter

Both BlackBerry Enterprise Server instances in the BlackBerry Enterprise Server pair include, by default, the BlackBerry AttachmentService, BlackBerry

How a primary BlackBerry Enterprise Server demotes itselfAfter the primary BlackBerry® Enterprise Server receives a request to demote itself from a st

Scenario: What happens after the health score of a primary BlackBerryEnterprise Server falls below the failover thresholdThe following scenario assume

BlackBerry Configuration Database mirroringThe following diagram shows how you can configure the BlackBerry® Configuration Database with principal and

The following responses assume that the messaging server and BlackBerry® Infrastructure are available.Response of a primary BlackBerry Enterprise Serv

Component High availability type DescriptionBlackBerry AttachmentServiceload-balancing with primaryand secondary groupsWhen you install two or more Bl

Component High availability type Descriptionresponding, the BlackBerry Enterprise Server assigns theactive connection to another BlackBerry MDS Connec

Overview: BlackBerry Enterprise Server1The BlackBerry® Enterprise Server is designed to be a secure, centralized link between an organization's w

BlackBerry Enterprise Server process flows5Messaging process flowsProcess flow: Sending a message to a BlackBerry device1. The IBM® Lotus Notes® route

7. The BlackBerry Router sends the encrypted data to the wireless network over port 3101, or over port 4101 if the BlackBerrydevice is a Wi-Fi® enable

3. The BlackBerry Dispatcher uses the master encryption key of the BlackBerry device to decrypt and decompress the message.If the BlackBerry Dispatche

• If the user tries to attach a file that exceeds the maximum file size that you specified, a notification appears and theuser cannot attach the file.

Process flow: Receiving a message that is encrypted using IBM Lotus Notes1. A user creates a message in IBM® Lotus Notes® with encryption turned on, a

Process flow: Searching an organization's address book from a BlackBerry device1. A user searches for a contact on a BlackBerry® device.2. The Bl

9. The BlackBerry device decrypts and decompresses the contact lookup results with the master encryption key so that theuser can view them on the Blac

The BlackBerry Collaboration Service checks the BlackBerry Configuration Database to verify that the user has permissionto use the collaboration clien

1. A user logs in to a collaboration client on a BlackBerry® device.2. The BlackBerry device compresses and encrypts the user ID and password, and sen

Process flow: Starting an instant messaging session using the BlackBerry Client for IBM LotusSametime1. A user logs in to a collaboration client on a

Feature DescriptionBlackBerry® Web Desktop Manager The BlackBerry Web Desktop Manager is a web application that permits users tomanage their BlackBerr

5. The IBM Lotus Sametime server accepts the login request from the BlackBerry device, starts a dedicated TCP/IP connectionfor the session, and listen

The BlackBerry Collaboration Service checks the BlackBerry Configuration Database to verify that the user has permissionto use the collaboration clien

The BlackBerry Collaboration Service can optimize files for viewing on the BlackBerry device only if it has access to theBlackBerry Attachment Service

Message attachment process flowsProcess flow: Viewing a message attachment1. A user receives a message with an attachment on a BlackBerry® device.2. T

9. The BlackBerry Router sends the first portion of the attachment to the wireless network over port 3101.10. The wireless network verifies that the P

8. The BlackBerry MDS Connection Service sends the first 250 KB of content to the BlackBerry Dispatcher over port 3201.9. The BlackBerry Dispatcher co

After the BlackBerry Synchronization Service registers a database for wireless data synchronization, it can no longer besynchronized or restored using

The BlackBerry Synchronization Service writes a synchronization request entry to the SynchRequest table of the BlackBerryConfiguration Database, and s

10. The BlackBerry Synchronization Service deletes the synchronization request entry from the SyncRequest table, writes anentry in the SyncRecordState

6. The BlackBerry Router sends the encrypted content to the wireless network over port 3101.7. The wireless network verifies that the PIN belongs to a

Feature DescriptionNew method for installing andmanaging the BlackBerry® DeviceSoftware and BlackBerry Java®ApplicationsYou can use the BlackBerry Adm

7. The BlackBerry Dispatcher compresses the content, encrypts it using the master encryption key of the BlackBerry device,and sends the encrypted cont

5. The BlackBerry Dispatcher compresses the content, encrypts it using the master encryption key of the BlackBerry device,and sends the encrypted cont

3. The BlackBerry MDS Connection Service converts the content so that the user can view it on the BlackBerry device, andsends the content to the Black

4. The BlackBerry Administration Service creates a deployment job.A deployment job represents the objects that must be sent to each user's BlackB

Process flow: Installing a BlackBerry MDS Runtime Application on a BlackBerry device overthe wireless network1. A developer creates a BlackBerry® MDS

The BlackBerry MDS Runtime sends a confirmation message to the BlackBerry MDS Integration Service and retrieves thefiles that are required to install

4. The Browser Push Engine on the BlackBerry MDS Integration Service sends the installation message to the BlackBerry MDSConnection Service using Push

The BlackBerry Enterprise Server and BlackBerry device establish a master encryption key. The BlackBerry Enterprise Serverand BlackBerry device confir

3. The BlackBerry device and BlackBerry Router use the BlackBerry Device Manager to send data to each other over the physicalconnection, behind the fi

Wi-Fi enabled BlackBerry devices6Wi-Fi® enabled BlackBerry® devices permit users with qualifying data plans to access BlackBerry services over a mobil