Deploying BlackBerry Enterprise Software v4.0. Phillip Lundie Technical Channel Manager Research In Motion

Transcription

1 Deploying BlackBerry Enterprise Software v4.0 Phillip Lundie Technical Channel Manager Research In Motion

2 Agenda Wireless Enterprise Activation The BlackBerry Device Configuration Tool Distributed Device Upgrades Question and Answer

3 Overview Wireless Enterprise Activation is the wireless equivalent to connecting the device to the BlackBerry Desktop Manager and initializing a user for the first time Detailed Wireless Enterprise Activation Technical White Paper is available on at: &objid=745137&objaction=browse&sort=name

4 Overview cont d Platform Requirements BlackBerry Enterprise Server BlackBerry Enterprise Server for IBM Lotus Domino v4.0 or BlackBerry Enterprise Server for Microsoft Exchange v4.0 or BlackBerry Enterprise Server for Novell GroupWise BlackBerry Device Software v4.0 (Java -enabled devices) v2.7 (C++ enabled handhelds) Hardware All device platforms that support the above application releases.

5 Overview cont d User purchases BlackBerry device and contacts their IT Department IT adds user to the BlackBerry Enterprise Server and provides them with a password User enters address and password provided by IT Security key exchange done securely over the air and service books are then provisioned wirelessly

6 Overview cont d Users calendar, address book, tasks, memos, pre-population and existing device options (if present) are then populated automatically onto the user s device for immediate use!

7 Feature Description Wireless Enterprise Activation provides: User Activation Wireless secure symmetric encryption key generation between the device and the BlackBerry Enterprise Server Wireless secure transmission of service book records from the BlackBerry Enterprise Server to the device (i.e. CMIME, CICAL, ALP, IPPP, etc) Wireless Key Regeneration Wireless secure symmetric encryption key regeneration from Options- Security screen. Key regeneration also occurs automatically every 30 days if not manually triggered

8 Feature Description Cont d Remote Service Updates Automatic wireless service book updates when switching a subscriber from one BlackBerry Enterprise Server to another Initial Data Synchronization Initial wireless PIM synchronization (Address Book, Calendar, Memo Pad and Tasks) Initial wireless backup/restore data restoration Note: This initial data synchronization can also be forced to occur over the Serial/USB connection via IT Policy

9 Wireless Provisioning - Server Subscriber notifies IT (in person, over the phone, by corporate etc...) of intent to activate a device IT identifies existing Exchange/Domino/GroupWise mailbox or creates a new mailbox IT adds Exchange/Domino/GroupWise mailbox to BlackBerry Enterprise Server and configures the user for Automatic Wireless Backup, Wireless Synchronization and Wireless Device Management (these are all enabled by default)

10 Wireless Provisioning - Server Administrator issues a temporary password to the user The Administrator provides the activation password to the user over the telephone, internal or another secure method. The Administrator can select to automatically generate and the Activation password to users as well instead of setting it manually.

11 Wireless Provisioning - Server The max password length is 32 characters The maximum number of activation attempts before the account is locked is 5 Administrator can set the length of time the password is valid for (max 720 hours)

12 Wireless Provisioning - Device The Enterprise Activation application will appear if the device is provisioned for an enterprise capable service plan from your service provider

13 Wireless Provisioning - Device The End User receives the enterprise activation password from their Administrator End User then enters their corporate address and the activation password they received and triggers the activation wirelessly using the Enterprise Activation application

14 Wireless Provisioning - Device Service Book information is sent to the device Initial data synchronization initiates including: calendar, address book, tasks, memos, existing device options (if present) and historical messages

15 Wireless Provisioning Switching Devices If the user is activating a device that has already been activated (by desktop or wirelessly), the user is given an option to erase all data on the device if the address doesn t match the currently provisioned user s address (i.e. device swap). The device resets after the data is cleared and the user can then type the new subscriber s and password into Enterprise Activation

16 Wireless Provisioning Architectural BlackBerry Enterprise Server Internet BlackBerry device Wireless Network Exchange/ Notes Mailbox Device Sends Activation Request The device sends an activation request to the user s corporate account. This contains information about the device such as routing information and the device s activation public keys.

17 Wireless Provisioning Architectural BlackBerry Enterprise Server Internet BlackBerry device Wireless Network Exchange/ Notes/ GroupWise Mailbox Note: The activation request is sent to the BlackBerry Enterprise Server in an etp.dat file attachment as well as within the message body (in case the corporate spam filter removes *.dat attachments).

18 Wireless Provisioning Architectural Internet BlackBerry Enterprise Server BlackBerry device Wireless Network Exchange/ Notes/ GroupWise Mailbox Server Sends Activation Response The BlackBerry Enterprise Server sends the device an activation response that contains routing information about the BlackBerry Enterprise Server and the server s public keys.

19 Wireless Provisioning Architectural Internet BlackBerry Enterprise Server BlackBerry device Wireless Network Establish and Verify Keys The BlackBerry Enterprise Server and the device establish a master encryption key. Both the BlackBerry Enterprise Server and the device verify their knowledge of the master key to each other without sending the key itself over the air (using SPEKE). If key confirmation succeeds, the activation proceeds and further communication is encrypted. Exchange/ Notes/ GroupWise Mailbox

20 Wireless Provisioning Architectural Internet BlackBerry Enterprise Server BlackBerry device Wireless Network Service Books Sent The BlackBerry Enterprise Server sends a copy of the IT policy and then the appropriate service books (for example, messaging service book, wireless calendar service book, browser service book) to the device. The user can now send and receive messages on the device and the Initial Data Synchronization occurs (PIM Data and device Settings). Exchange/ Notes/ GroupWise Mailbox

21 Agenda Wireless Enterprise Activation The BlackBerry Device Configuration Tool Distributed Device Upgrades

22 Device Configuration Tool A Central Deployment Option Connect devices to USB hub and upgrade multiple devices simultaneously The vendor branding on the device will ensure that the proper installed device code will be selected and used for each device Initial provisioning can also be done by using the BlackBerry Device Configuration Tool Encryption Key Generation Service Book Provisioning Initial Data Synchronization (PIM data, device settings, historical messages, etc ) just like via Enterprise Activation

23 Device Configuration Tool Central Deployment An Overview Allows IT to fully control the initial user experience Allows IT to perform the following actions for multiple users simultaneously: Load appropriate device software from a central location Provision security keys, service books and initial load of user data (calendar, address book, tasks, memos, prepopulation and default device options if desired)

24 Device Configuration Tool Central Deployment An Overview Cont d Configuring device software configuration Specify the location of the device loader files based on a Universal UNC path This location can contain all files for every BlackBerry device

25 Device Management Asset Tracking Information Agent on device reports management information to IT-based system for asset management Will report back data to a central database like: PIN#, model #, network type, color depth, serial #, home network, phone number (if available), currently applied IT Policy status, BlackBerry software versions, list of 3 rd party applications, etc

26 Device Management 3 rd Party Application Download and Management Specify which specific applications are Required, Allowed or Disallowed Specifying a 3 rd party application as Required will push that application wirelessly to the appropriate devices if not already present Specifying a 3 rd party application as Disallowed will delete that application if already present Specify what resources (on and off the device) a given 3 rd party application can access via Application Control Policies

27 Agenda Wireless Enterprise Activation The BlackBerry Device Configuration Tool Distributed Device Upgrades

28 Distributed Device Upgrades BlackBerry Device Manager Handles communication via the Serial or USB port connection and the connected BlackBerry device Optional installation component of BlackBerry Desktop Manager v4.0 that can easily be automatically deployed to user workstations (Basic MSI) and is architected to not require frequent updates

29 Distributed Device Upgrades Application Loader Lite Introduction Upgrade devices without the requirement of installing the full BlackBerry Desktop Manager Provide a simplified method of ongoing maintenance for future core device software upgrades managed from a centralized location Used in conjunction with BlackBerry Device Manager, this provides the USB driver to enable communication between the desktop and device BlackBerry Device Manager is the only requirement to be installed on users PC

30 Distributed Device Upgrades Application Loader Lite Overview IT can provide users with a basic tool to upgrade core device software (operating system/radio) A simple wizard very similar to today s Application Loader that can be run from a central location as specified by IT Note: Application Loader Lite requires that the BlackBerry Device Manager be installed on the workstations that would run this remote wizard

31 Distributed Device Upgrades Application Loader Lite Overview cont d Will support provisioning as part of the upgrade with BlackBerry Desktop Manager v4.1 Application Loader

32 Questions? Questions?