Licensing Guide. BlackBerry Enterprise Service 12. Version 12.0

Licensing Guide BlackBerry Enterprise Service 12 Version 12.0

Published: 2014-11-13 SWD-20141118133401439

Contents About this guide... 5 What is BES12?... 6 Key features of BES12...6 Product documentation... 7 Understanding licensing... 10 Managing licenses for different devices... 10 Server licenses... 11 SIM licenses... 12 BlackBerry OS licenses for BES12...13 License requirements for activation types...14 License classes...15 Migrating licenses from previous EMM solutions from BlackBerry... 16 How BES12 stores and manages licenses...16 Initial grace period for licenses... 17 Preparing to manage licenses... 18 Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices... 19 Using myaccount... 19 Register and create an account...19 Log in to myaccount... 20 Activating server licenses...20 Prerequisites: Activating server licenses...21 Activate server licenses using a license activation ID... 21 Activate server licenses using the host ID... 22 Activate server licenses using file-based activation...22 Requirements: Using licenses to activate devices...23 Managing licenses... 23 View license information... 23 License expiry...24 License compliance...24 Licensing status...25

Optimizing how licenses are used...27 Switching devices... 27 Communicating with the licensing infrastructure... 28 Releasing licenses... 29 Troubleshooting...30 The license activation ID could not be verified with the licensing infrastructure... 30 The license response file could not be uploaded...31 You or a user cannot activate a device...31 Managing licenses for BlackBerry OS devices... 32 View license information... 32 Add or delete a BlackBerry OS license key...32 Provide feedback...34 Glossary... 35 Legal notice...36

About this guide About this guide 1 BES12 helps you manage BlackBerry 10, BlackBerry OS (version 5.0 to 7.1), ios, Android, and Windows Phone devices for your organization. This guide explains how licensing works and gives you instructions for how to prepare, use, and manage your licenses. This guide is intended for senior IT professionals who are responsible for setting up and deploying the product. Follow the instructions in this guide after you install BES12. You can find instructions for installing the product in the BlackBerry Enterprise Service 12 Installation Guide. After you complete the tasks in this guide, configure the product using the instructions in the BlackBerry Enterprise Service 12 Configuration Guide. 5

What is BES12? What is BES12? 2 BES12 is an EMM solution from BlackBerry. EMM solutions help you do the following: Manage mobile devices for your organization to protect business information Keep mobile workers connected with the information that they need Provide administrators with efficient business tools With BES12, you can manage the following device types: BlackBerry 10 BlackBerry OS (version 5.0 to 7.1) ios Android Windows Phone You can manage these devices from a single, simplified UI with industry-leading security. Key features of BES12 Feature Management of many types of devices Single, unified UI Trusted and secure experience Balance of work and personal needs Description You can manage BlackBerry 10, BlackBerry OS (version 5.0 to 7.1), ios, Android, and Windows Phone devices. You can view all devices in one place and access all management tasks in a single, web-based UI. You can share administrative duties with multiple administrators who can access the management console at the same time. Device controls give you precise management of how devices connect to your network, what capabilities are enabled, and what apps are available. Whether the devices are owned by your organization or your users, you can protect your organization's information. BlackBerry Balance and Secure Work Space technologies are designed to make sure that personal information and work information are kept separate and secure on devices. If the device is lost or the employee leaves the organization, you can delete only work-related information or all information from the device. 6

What is BES12? Product documentation To read the following guides or other related materials, visit docs.blackberry.com/bes12. Category Resource Description Overview BlackBerry Enterprise Service 12 Product Overview Introduction to BES12 and its features Finding your way through the documentation Architecture Enterprise Solution Comparison Chart Comparison of what features are available across different BlackBerry enterprise solutions BlackBerry Enterprise Service 12 Architecture and Data Flow Reference Guide Descriptions of BES12 components Descriptions of activation and other data flows, such as configuration updates and email, for different types of devices Release notes BlackBerry Enterprise Service 12 Release Notes Descriptions of known issues and potential workarounds Installation and upgrade BlackBerry Enterprise Service 12 Compatibility Matrix 3rd party software that is compatible with BES12 BlackBerry Enterprise Service 12 Performance Calculator Tool to estimate the hardware required to support a given workload for BES12 BES12 Preinstallation Checklist Checklist of requirements to check before you install or upgrade your environment BlackBerry Enterprise Service 12 Planning Guide System requirements Planning BES12 deployment for an installation or an upgrade from BES5 or BES10 BlackBerry Enterprise Service 12 Installation Guide Installation instructions Configuration BlackBerry Enterprise Service 12 Licensing Guide Descriptions of different types of licenses Instructions for activating and managing licenses 7

What is BES12? Category Resource Description BlackBerry Enterprise Service 12 Configuration Guide Instructions for how to configure server components before you start administering users and their devices Instructions for migrating BES10 data from an existing BES10 database Administration BlackBerry Enterprise Service 12 Administration Guide Basic and advanced administration for all supported device types, including BlackBerry 10 devices, ios devices, Android devices, Windows Phone devices and BlackBerry OS (version 5.0 to 7.1) and earlier devices Instructions for creating user accounts, groups, roles, and administrator accounts Instructions for activating devices Instructions for creating and assigning IT policies and profiles Instructions for managing apps on devices Descriptions of profile settings BlackBerry Enterprise Service 12 Policy Reference Spreadsheet Descriptions of IT policy rules for BlackBerry 10 devices, ios devices, Android devices, Windows Phone devices and BlackBerry OS (version 5.0 to 7.1) and earlier devices Supported Features by Device Type Comparison of what device management features are supported for each type of device in BES12 Getting started. 5 Steps To Get Your Devices Active Minimum requirements to configure to get you started with activating devices Security BlackBerry 10 Security Overview Introduction to BlackBerry 10 security Description of how BlackBerry 10 protects data at rest and in transit Description of our security platform, from the device to the BlackBerry Infrastructure BlackBerry Enterprise Service 12 Security Guide for BlackBerry Description of the security maintained by BES12, the BlackBerry Infrastructure, and BlackBerry 10 devices to protect data and connections Description of the BlackBerry 10 OS 8

What is BES12? Category Resource Description Description of how work data is protected on BlackBerry 10 devices when you use BES12 BlackBerry Enterprise Service 12 Security Guide for ios, Android, and Windows Phone Description of the security maintained by BES12, the BlackBerry Infrastructure, and work space-enabled devices to protect work space data at rest and in transit Description of how work space apps are protected on work space-enabled devices when you use BES12 Resources for enterprise users BES12 Self-Service User Guide Instructions for activating devices Instructions for protecting a lost device 9

Understanding licensing Understanding licensing 3 You must obtain licenses to activate BlackBerry 10, ios, Android, and Windows Phone devices in your organization s BES12 domain. When you or a user activates a device, the device uses a license. In previous releases, licenses were also known as CAL keys. Different licenses are available to support different device types and features. To use licenses, you must: 1. Decide which types of licenses your organization wants to use. See Managing licenses for different devices. Contact your service provider to verify that devices have the correct data plan to support the license types. 2. Buy server licenses from BlackBerry (the BlackBerry Enterprise Store) or a BlackBerry partner, or buy SIM licenses from your service provider. 3. From the BlackBerry Enterprise Store, register and create an account for the myaccount website. If you buy licenses directly from the BlackBerry Enterprise Store, you register and create an account during the purchase process. 4. Log in to myaccount to get the activation IDs for your licenses. 5. Activate your server licenses using one of the methods described in this guide. You do not need to activate SIM licenses. 6. Configure BES12 and create user accounts. 7. Activate devices. You use the management console to activate licenses, monitor license status, and manage licensing settings. A BES12 domain can also support BlackBerry OS (version 5.0 to 7.1) devices, which use a separate licensing model. For more information, see Managing licenses for different devices. Managing licenses for different devices A BES12 domain supports the following devices. Device Licenses How licenses work Licensing process BlackBerry 10 ios Android Windows Phone Server licenses SIM licenses Licenses control the number and types of devices you can activate and the features you can manage. 1. Activate server licenses after you install the software. SIM licenses do not require activation. 2. Manage licenses using the BES12 management console and the myaccount website. 10

Understanding licensing Device Licenses How licenses work Licensing process BlackBerry OS (version 5.0 to 7.1) BlackBerry OS licenses for BES12 Licenses control the number of user accounts that can use BlackBerry OS devices. 1. After you upgrade from BES5 to BES12, obtain BlackBerry OS licenses for BES12. 2. Add BlackBerry OS license keys for BES12 using the BlackBerry OS Settings in the management console. 3. Delete the BES5 CAL keys. 4. Manage BlackBerry OS licenses using the BlackBerry OS Settings in the management console. Server licenses BES12 supports the following license types. You buy these licenses (known as server licenses) from BlackBerry or a BlackBerry partner. For more information about SIM licenses that you can buy from your service provider, see SIM licenses. For more information about device activation types, see License requirements for activation types or visit docs.blackberry.com/ BES12 to read the BlackBerry Enterprise Service 12 Administration Guide. Server license type Devices Activation types Silver BlackBerry 10 Work and personal - Corporate ios, Android, and Windows Phone MDM controls Gold - BlackBerry BlackBerry 10 Work and personal - Regulated Work space only Work and personal - Corporate Gold - Secure Work Space ios and Android Work and personal - full control Work and personal - user privacy ios, Android, and Windows Phone MDM controls 11

Understanding licensing SIM licenses EMM SIM-Based Licensing is an alternative licensing model that allows you to buy licenses from your service provider instead of from BlackBerry. This option allows you to pay for licenses as part of your existing plan with your service provider. Contact your service provider for pricing and subscription information. Licenses you buy from your service provider are known as SIM licenses. SIM licenses work just like server licenses and support the same devices and activation types. To use SIM licenses, devices must have SIM cards that the service provider has provisioned accordingly. SIM license type Devices Activation types Silver BlackBerry 10 Work and personal - Corporate ios, Android, and Windows Phone MDM controls Gold BlackBerry 10 Work and personal - Regulated Work space only Work and personal - Corporate ios and Android Work and personal - full control Work and personal - user privacy ios, Android, and Windows Phone MDM controls Note that a Gold SIM license can be used for a BlackBerry 10, ios, Android, or Windows Phone device. If a Gold SIM license is used for a BlackBerry 10 device, it is listed as a Gold - BlackBerry SIM license on the Licensing summary page in the management console. If a Gold SIM license is used for an ios, Android, or Windows Phone device, it is listed as a Gold - Secure Work Space SIM license on the Licensing summary page. If a user's device is using a Gold SIM license, in the user's device details, the Licensing information section lists both Gold - BlackBerry and Gold - Secure Work Space. This section indicates whether the Gold SIM license is being used as a Gold - BlackBerry license or Gold - Secure Work Space license. You do not need to activate SIM licenses to use them. When you activate a device, BES12 checks if an appropriate SIM license is available and if the device s SIM card is provisioned for SIM licensing. If both conditions are satisfied, the device uses a SIM license. If not, the device uses a server license. For more information, see License requirements for activation types. You can view the total count of SIM licenses in use on the Licensing summary screen in the management console. Switching a SIM license and a server license If you want to switch a device from using a SIM license to a server license, or a server license to a SIM license, the service provider must change the provisioning of the device's SIM card as necessary, and you must reactivate the device. 12

Understanding licensing The following table describes how BES12 handles various license switch scenarios, including some exceptions to the rule above: Scenario 1) The user removes their SIM card and replaces it with a different SIM card for temporary use while the device is roaming. 2) The user removes the SIM card from one device and inserts it in a second device. Both devices are already activated. 3) The user removes the SIM card from an activated device and inserts it in a device that is not activated on BES12. 4) A device s SIM license is no longer valid because you ended the subscription with the service provider. 5) You turn off SIM licensing for the BES12 domain. Outcome The SIM license remains assigned to the device, even if the temporary SIM card is not provisioned for SIM licensing. If the user s SIM card is inserted in another activated device, scenario 2 applies. The SIM license is assigned to the second device and BES12 assigns the appropriate server license to the first device. The SIM license remains assigned to the activated device. BES12 checks for a valid SIM license that the device can use. If none are available, BES12 replaces the SIM license with an appropriate server license. For each device that uses a SIM license, BES12 replaces the SIM license with an appropriate server license. The behavior of a user s activated device is not affected in any of these scenarios. If the device has an Internet connection available through a service provider or Wi-Fi network, any of these scenarios may apply. In any of these scenarios, BES12 must have available server licenses to replace SIM licenses. If not, usage may be exceeded for some license types. For more information, see License compliance. BlackBerry OS licenses for BES12 To support BlackBerry OS (version 5.0 to 7.1) devices in a BES12 domain, you require BlackBerry OS licenses for BES12. After you upgrade from BES5 to BES12, replace your existing BES5 CAL keys with BlackBerry OS licenses. BES5 CAL keys are not valid in a BES12 domain. To obtain BlackBerry OS licenses: Purchase them from the BlackBerry Enterprise Store or a BlackBerry partner. If you have valid BES5 CAL keys, you may be able to claim BlackBerry OS licenses. The number and types of licenses that you can claim depend on current licensing offers and your level of technical support. To view the promotions that you are eligible for, log in to myaccount and check the Account Support > Software Assurance section. For more information about license migration programs and qualifying software, visit www.blackberry.com/migrationplanning. 13

Understanding licensing When you obtain BlackBerry OS licenses, you receive a key that you must enter in the BlackBerry OS Settings in the management console to make the licenses available for use. If you have perpetual BES5 CAL keys, you must replace them with perpetual BlackBerry OS licenses. If you have subscription BES5 CAL keys, you must replace them with subscription BlackBerry OS licenses. Note: After you add BlackBerry OS license keys, delete any BES5 CAL keys. Do not delete BES5 CAL keys before you add BlackBerry OS licenses. If you do, the BES12 components that manage BlackBerry OS devices will stop responding. When you enable a user to activate a BlackBerry OS device, a BlackBerry OS license is consumed for that user. Each user account can activate one BlackBerry OS device. A user can have any combination of devices. For example, if a user has both a BlackBerry OS device and an ios device, the user account uses a BlackBerry OS license for the BlackBerry OS device and an appropriate server license or SIM license for the ios device, based on the activation type. License requirements for activation types The following table lists the required license for each activation type. BES12 checks for available licenses in the order listed. For example, if you activate a BlackBerry 10 device with the "Work and personal - Corporate" activation type, and the domain has Silver and Gold - BlackBerry server licenses available, the device uses a Silver license. If you want to check what type of license a device is using, see the user's device details in the management console. Activation type Devices Description Required license Work and personal - Corporate BlackBerry 10 Devices have a personal space and a work space. Administrators have control of the work space only. One of the following: 1. Silver SIM license 2. Gold SIM license 3. Silver server license 4. Gold - BlackBerry server license Work and personal - Regulated BlackBerry 10 Devices have a personal space and a work space. Administrators have control of both spaces. One of the following: 1. Gold SIM license 2. Gold - BlackBerry server license Work space only BlackBerry 10 Devices have a work space only. Administrators have full control of devices. One of the following: 1. Gold SIM license 2. Gold - BlackBerry server license 14

Understanding licensing Activation type Devices Description Required license MDM controls ios, Android, and Windows Phone A separate work space is not installed on devices. Administrators have basic device management controls. One of the following: 1. Silver SIM license 2. Gold SIM license 3. Silver server license 4. Gold - Secure Work Space server license Work and personal - full control ios and Android A separate work space is created on devices. Administrators have full control of devices. One of the following: 1. Gold SIM license 2. Gold - Secure Work Space server license Work and personal - user privacy ios and Android A separate work space is created on devices. Administrators have control of the work space only. One of the following: 1. Gold SIM license 2. Gold - Secure Work Space server license License classes Licenses can be one of the following classes. The classes do not apply to SIM licenses. The class determines how long a license is valid. The Licensing summary page in the management console indicates when your trial or subscription licenses expire (for BlackBerry OS licenses, see the BlackBerry OS Settings tab). For details about what happens when server licenses expire, see License expiry and License compliance. Class Applies to Description Trial Server licenses Trial licenses are licenses that you use to evaluate BES12. Trial licenses are valid for a set amount of time. When you activate trial licenses, you enable the features that are available for your trial. When trial licenses expire, you can buy subscription licenses. Subscription Server licenses BlackBerry OS licenses Subscription licenses are valid for a subscription period (for example, an annual subscription). When subscription licenses expire, you can buy more subscription licenses to replace them. 15

Understanding licensing Class Applies to Description Perpetual Server licenses BlackBerry OS licenses Perpetual licenses do not expire. Perpetual licenses are available only through specific licensing offers and technical support programs. For more information about license migration programs and qualifying software, visit www.blackberry.com/migrationplanning. Your organization's domain can have a combination of trial, subscription, and perpetual licenses. BES12 does not privilege the use of one license class above another. All license classes are added to a pool of licenses and used as necessary. If your domain has trial licenses with different trial periods, the management console displays the status of the trial licenses that expire first. Migrating licenses from previous EMM solutions from BlackBerry BES12 uses licenses that are new for the BES12 product. Note the following conditions about licenses for previous EMM solutions: BES5 CAL keys are not valid in a BES12 domain. After you upgrade from BES5 to BES12, replace your existing BES5 CAL keys with BlackBerry OS licenses. For more information, see BlackBerry OS licenses for BES12. Server licenses for BES10 are not compatible with BES12. If you have valid licenses for earlier solutions (for example, BES5 or BES10), you may be able to claim licenses for BES12. The number and types of licenses that you can claim depend on current licensing offers and your level of technical support. To view the promotions that you are eligible for, log in to myaccount and check the Account Support > Software Assurance section. For more information about license migration programs and qualifying software, visit www.blackberry.com/migrationplanning, or view Update existing BES5 or BES10 licenses to BES12 licenses if you have a technical support contract. For more information about support programs, visit BlackBerry Support options. How BES12 stores and manages licenses When you install BES12, you install the BES12 Core component. The BES12 Core manages the use of server licenses in your organization s domain. If the domain includes more than one BES12 instance, any instance of the BES12 Core can manage licensing data, and licensing data is load balanced as necessary across the available instances. 16

Understanding licensing When you activate server licenses, you register the SRP ID of the BES12 domain with the BlackBerry licensing infrastructure (this is the same SRP ID that you specified when you logged in to the management console for the first time). This is a change from BES10, which registered a MAC address with the licensing infrastructure. The BES12 Core stores the activated licenses that devices can use. The BES12 Core does not manage BlackBerry OS licenses. These licenses are managed by the BES12 components that manage BlackBerry OS devices. Initial grace period for licenses After you install BES12, the Licensing summary page indicates that no licenses are available. You must obtain and activate server licenses, or obtain SIM licenses. If you activate a device when no licenses are available, BES12 starts a grace period (the Licensing summary page indicates the duration of the grace period, for example, 15 days). During this grace period, you can activate devices. When the grace period is over, the domain is out of compliance because the number of activated devices is greater than the number of valid licenses (for example, 3 devices are activated but no licenses are available). Activated devices continue to work as expected, but you cannot activate new devices or reactivate existing devices. To make the domain compliant, obtain and activate server licenses or obtain SIM licenses. The number of valid (non-expired) licenses must be greater than the number of activated devices. For example, you install BES12, and before you activate the 100 Gold - BlackBerry server licenses you've purchased, you decide to activate a few BlackBerry 10 devices for testing. When you activate the first device, BES12 starts the 15-day grace period. During the grace period, you activate two more devices. The grace period ends. BES12 is out of compliance because 3 devices are activated but no licenses are available. You then activate 100 Gold - BlackBerry server licenses. BES12 assigns 3 of the licenses to the activated devices, and 97 licenses are now available for use. For more information about license compliance and the conditions of the grace period, see License compliance and Grace period conditions. 17

Preparing to manage licenses Preparing to manage licenses 4 To manage server licenses, SIM licenses, or BlackBerry OS licenses, use the administrator account that was created during the BES12 installation, or create an administrator account and assign it a role with these permissions: View licensing summary Manage subscriptions Edit licensing settings By default, the Security Administrator and Enterprise Administrator roles have these permissions. Administrators with the default Senior Helpdesk role can view license information, but cannot change licensing settings or activate licenses. Administrators with the default Junior Helpdesk role cannot view license information, cannot change licensing settings, and cannot activate licenses. 18

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices 5 This section provides instructions for: Creating an account for the myaccount website so that you can obtain activation IDs for the licenses you've purchased Activating server licenses so that devices can use them Viewing status information and changing licensing settings to suit your organization s needs Troubleshooting common licensing issues Using myaccount myaccount is the website that you use to track the server licenses that you buy from BlackBerry (the BlackBerry Enterprise Store) or a BlackBerry partner. After you register and create an account for the myaccount website, you can: View your organization s licenses and history of purchases Obtain the activation IDs that you need to use the licenses Activate licenses using a host ID or file-based activation Check the licensing promotions that you are eligible for Manage users on the account Manage support agreements In previous releases, the BlackBerry Account Center website was used to obtain activation IDs and view license information for your domain. myaccount replaces the BlackBerry Account Center. If you had a BlackBerry Account Center account, you can use the account credentials to log in to myaccount. To view videos that demonstrate how to register with the myaccount and obtain license activation IDs, see the BES12 Licensing videos. Register and create an account Before you can log in to myaccount, you must register and create your account. myaccount replaces the BlackBerry Account Center. If you already have a BlackBerry Account Center account, you can use those credentials to log in to myaccount. 19

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Follow the steps below if you purchase licenses from a BlackBerry partner (and if you do not already have an account). Your organization should create and maintain a single account (one email address) to manage all license purchases. If you buy licenses from BlackBerry using the BlackBerry Enterprise Store, you register and create an account during the purchase process. 1. In a browser, visit the BlackBerry Enterprise Store. 2. Click Register. 3. Enter the requested information. Click Continue. 4. Follow the instructions on the screen to verify your company information. 5. Click Create Account. 6. You receive a confirmation email at the email address you specified. In the confirmation email, click the activation link. 7. Type and confirm a password. Click Activate. Log in to myaccount 1. In a browser, navigate to www.blackberry.com. On the Enterprise menu, click Sign-in. 2. Click Sign in. 3. In the Username field, type the email address you used to register your account. 4. In the Password field, type the password you used when you activated your account. 5. Click Sign In. Activating server licenses You must activate server licenses before you can use them to activate devices. You do not need to activate SIM licenses purchased from your service provider. Before you activate licenses, see Prerequisites: Activating server licenses. You can use any of the following activation methods: Method Purpose Consoles you use Steps License activation ID Activate all available licenses associated with an activation ID in a single domain. Management console See Activate server licenses using a license activation ID. Host ID Distribute the licenses associated with an activation ID across multiple domains. Management console myaccount See Activate server licenses using the host ID. 20

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Method Purpose Consoles you use Steps File-based activation Activate licenses manually because BES12 cannot access the Internet. Management console myaccount See Activate server licenses using file-based activation. Prerequisites: Activating server licenses The management console must be running. The BES12 Core must be running. The BES12 Core must be able to connect to the licensing infrastructure (license.blackberry.com) over port 3101 (TCP). Configure your organization's firewall to allow outbound and inbound connections over port 3101. For more information about outbound port requirements, visit docs.blackberry.com/bes12 to read the BlackBerry Enterprise Service 12 Configuration Guide. Activate server licenses using a license activation ID When you obtain server licenses, you receive activation IDs that you use to activate the licenses. Each activation ID is associated with a license type and a certain number of licenses. An activation ID is also known as a CAL Authentication Key. Before you begin: Verify that the administrator account that you want to use has a role with the required permissions. See Preparing to manage licenses. Verify that you have the activation IDs for the licenses. Activation IDs are available in myaccount. Each ID uses the format xxxxxx-xxxxxx-xxxxxx-xxxxxx-xxxxxx, where each x is a letter or number. 1. In the management console, on the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing summary. 3. Click Activate licenses. 4. In the Licensing activation method drop-down list, click License activation ID. 5. In the License activation ID field, type the activation ID. 6. Click Activate. 7. Repeat steps 3 to 6 for each activation ID that you want to assign to the domain. 21

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Activate server licenses using the host ID Before you begin: Verify that the administrator account that you want to use has a role with the required permissions. See Preparing to manage licenses. 1. In the management console, on the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing summary. 3. Click Activate licenses. 4. In the Licensing activation method drop-down list, click Host ID. 5. Copy the host ID. 6. Click Connect to navigate to myaccount (or navigate to www.blackberry.com, and on the Enterprise menu, click Sign-in. Log in and go to the Licenses section. 7. Click Manage Devices. On the Servers tab, click Register Server and use the host ID that you copied to register the BES12 domain. 8. Specify the number of licenses to assign to the domain. Activate server licenses using file-based activation Before you begin: Verify that the administrator account that you want to use has a role with the required permissions. See Preparing to manage licenses. During this process, you must use a computer with access to the Internet to log in to myaccount. This can be a different computer than the one that hosts the management console. 1. In the management console, on the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing summary. 3. Click Activate licenses. 4. In the Licensing activation method drop-down list, click File based activation. 5. Click Generate. Save the license challenge file to a location that you can access when you log in to myaccount (you might use a different computer to access the Internet). 6. From a computer with Internet access, in a browser, navigate to www.blackberry.com, and on the Enterprise menu, click Sign-in. Log in and go to the Licenses section. 7. Click Manage Devices. On the Servers tab, click Generate License and follow the instructions to upload the license challenge file. 8. Download the license response file. Save the file to a location that you can access from the computer that hosts the management console. 22

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices 9. In the management console, in the Activate licenses window, click Browse and select the license response file (.bin). 10. Click Submit. Requirements: Using licenses to activate devices After you activate licenses, follow the configuration instructions in the BlackBerry Enterprise Service 12 Configuration Guide. You can then activate devices using the instructions in the BlackBerry Enterprise Service 12 Administration Guide. Before you activate devices, note the following licensing requirements: The BES12 Core must be running. Verify that you have the appropriate licenses to support the devices and features that you want to manage. Verify that your domain has enough valid licenses. For more information, see License compliance. Verify that devices have the correct data plan to support the licenses that you want to use. Contact your service provider for details and pricing information. Managing licenses You can use the management console to: View the license information for the BES12 domain View the licensing status and review warnings or errors Identify and correct compliance issues Configure how BES12 communicates with the licensing infrastructure View license information 1. On the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing summary. The top of the page displays the domain's licensing status (for details, see Licensing status). The License information table displays the following information for each server license type: the total number of licenses, the number of available licenses, and the number of licenses in use, and expiration dates. For each license type, the table also displays the total number of SIM licenses in use. The table also displays the number of devices that are using Gold - BlackBerry or Gold - Secure Work Space licenses because Silver licenses are not available (listed as "Using Silver features:"). 3. If you want to view additional information about the licenses you ve purchased, click Manage subscriptions. Log in to myaccount and navigate to the Licenses section. 23

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices If you want to check what type of license a device is using, see the user's device details in the management console. License expiry The Licensing summary page indicates when subscription server licenses are approaching the expiry date. You can configure how early this message appears. When you see this message, take action to replace licenses before they expire. When licenses expire, BES12 checks for available licenses. If valid licenses are available, BES12 assigns them to devices to replace expired licenses. If BES12 checks a license type and determines that the number of activated devices is greater than the number of valid (non-expired) licenses, usage is exceeded for that license type. For more information, see License compliance. BES12 does not track the expiry of SIM licenses. SIM licenses are valid as long as you maintain the subscription with your service provider. Change the expiry warning period You can change how many days in advance you want to be notified before subscription server licenses expire. The expiry warning displays on the Licensing summary page. The default warning period is 28 days. 1. On the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing settings. 3. In the License expiration warning drop-down list, click the appropriate warning period. 4. Click Save. License compliance For each license type, a "usage exceed" status message appears if the number of activated devices is greater than the number of valid (non-expired) licenses. Usage can be exceeded for a license type if: You allow users to activate a number of devices that exceeds the number of valid licenses Licenses are in use and they expire You release licenses from the domain while they are in use For example, 100 Silver server licenses are in use and 50 of them expire. Usage is exceed for Silver licenses because 100 devices are activated but only 50 have valid licenses. When usage is exceeded, BES12 starts a grace period. The Licensing summary page indicates the length of the grace period, for example, 15 days. During the grace period, you can continue to activate and reactivate devices using that license type. If the grace period ends and you did not correct the issue, that license type goes out of compliance. When a license type is out of compliance: 24

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices You cannot activate or reactivate devices using server licenses or SIM licenses of that license type. For example: Silver licenses are out of compliance because some Silver server licenses expired. The domain still has Silver SIM licenses available. The Silver SIM licenses cannot be used to activate devices. Devices activated with that license type continue to work as expected, but cannot be reactivated. If other license types are available, and are in compliance, those license types can still be used to activate or reactivate devices. As long as a license type is out of compliance, a grace period cannot begin for any other license type. If usage is exceeded for another license type, that license type goes out of compliance immediately. To make the license type compliant, obtain enough licenses so that the number of valid licenses is greater than the number of activated devices. For example, the Silver license type is out of compliance because 100 devices are activated using Silver server licenses, but only 50 have valid licenses. You activate 70 new Silver server licenses. BES12 assigns 50 of the new licenses to the devices with expired licenses, and 20 of the new licenses are available for use. The license type is compliant because 100 devices are activated and there is a total of 120 valid licenses. Grace period conditions Note the following conditions of the grace period: BES12 allows only one grace period at a time. If a grace period starts for one license type and usage is exceeded for a different license type, both license types use the same grace period. For example, a 15-day grace period begins for Silver licenses, and two days later usage is exceeded for Gold - Secure Work Space licenses. Both the Silver and Gold - Secure Work Space licenses have 13 days remaining in the grace period. If a grace period ends and a license type is out of compliance, BES12 does not allow a grace period to start for other license types until you correct the compliance issue. For example, the grace period ends for Silver licenses, and one week later usage is exceeded for Gold - Secure Work Space licenses. BES12 does not start a grace period for the Gold - Secure Work Space licenses; the licenses go out of compliance immediately. BES12 does not allow another grace period until you correct the compliance issues for the Silver and Gold - Secure Work Space licenses. The duration of the grace period is based on a 24-hour clock. For example, if a 15-day grace period starts at 3pm on July 11, it ends at 3pm on July 26. Licensing status The Licensing summary page displays the licensing status of the domain. If an issue requires your attention, a warning or error icon displays next to the Settings tab, in the left pane (Licensing section), and on the Licensing summary page. If more than one issue exists, the icon for the most serious issue is displayed. Status message Icon Description Licensing infrastructure BES12 was successful in its most recent attempt to contact the the licensing infrastructure. 25

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Status message Icon Description OK Licensing status Licensing infrastructure turned off Unavailable No licenses activated Expiration date for one or more licenses is approaching Grace period expires in X days Trial status - expires in X days SIM license status - Synchronization in progress Usage exceeded Grace period has expired Trial status - expired OK Info Warning Warning Warning Warning Warning Warning Error Error Error There are no issues that require your attention. The connection to the licensing infrastructure is turned off. For more information, see Communicating with the licensing infrastructure. The licensing status is not available. Verify that the BES12 services are running. No licenses exist in the domain. Obtain and activate licenses. Licenses will expire shortly. Until the licenses expire, you can continue to activate new devices and reactivate existing devices. Obtain and activate more licenses to replace the ones that will expire. For a license type, the number of activated devices is greater than the number of valid licenses. BES12 has started a grace period to give you time to correct the issue. When the grace period ends, the license type is out of compliance. Trial licenses expire in the number of days indicated. Obtain and activate licenses to replace the trial licenses. BES12 is synchronizing data for your organization s SIM licenses. If the domain includes a large number of devices, this message may appear for a lengthy period, regardless of the number of SIM licenses in use. For example, in a domain with 150,000 devices, this message may appear for up to 24 hours. For a license type, the number of activated devices is greater than the number of valid (non-expired) licenses. To make the license type compliant, obtain and activate enough licenses so that the number of valid licenses is greater than the number of activated devices. The grace period for a license type has ended and the license type is out of compliance. To make the license type compliant, obtain and activate enough licenses so that the number of valid licenses is greater than the number of activated devices. Trial licenses have expired. Obtain and activate licenses to replace the trial licenses. 26

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Status message Icon Description Licensing infrastructure status - unable to connect Error BES12 could not contact the licensing infrastructure. You cannot synchronize licensing data with the the licensing infrastructure and you cannot activate server licenses using a license activation ID or host ID. Optimizing how licenses are used BES12 checks the domain's available server licenses when: You activate server licenses You or a user activates or reactivates a device You view the Licensing summary page BES12 synchronizes data with the licensing infrastructure When any of these actions occur, BES12 checks which server licenses are available and which are in use, and tries to optimize license usage. For example, if a user activates an ios device with the "MDM controls" activation type, the device can use a Gold - Secure Work Space license if a Silver license is not available. If a Silver license becomes available at a later date (for example, you activate more licenses), when you perform any of the actions above, BES12 assigns a Silver license to the ios device. The Gold - Secure Work Space license becomes available. If you want to check what type of license a device is using, see the user's device details in the management console. When you update or replace a user's activation profile, the changes do not apply until the user reactivates their devices or activates new devices. The licenses used by the devices may change, depending on the activation type that is applied. In specific scenarios, BES12 can also change the usage of SIM licenses. For more details, see Switching a SIM license and a server license. Switching devices To switch to a different BlackBerry 10 device, you or a user can select the replace device option during activation, or use the replace device option in BES12 Self-Service. If you choose the same or lower feature level for the replacement device (for example, you change the activation type from "Work and personal - Regulated" to "Work and personal - Corporate"), the device can use the same license and BES12 does not need to check for available licenses. If you choose a higher feature level, it is considered a new activation. BES12 checks if the appropriate server license is available. If you or a user activates a new ios, Android, or Windows Phone device, it is considered a new activation. The licensing server checks if the appropriate server license is available. For information about switching devices that use a SIM license, see Switching a SIM license and a server license. 27

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices Communicating with the licensing infrastructure BES12 contacts the licensing infrastructure at a regular interval to synchronize licensing data and retrieve the server licenses that are assigned to the domain. Contact with the licensing infrastructure also enables the use of SIM licenses in the domain. By default, BES12 contacts the licensing infrastructure once a day. The Licensing settings page displays the day and time of the most recent contact. Synchronize data with the licensing infrastructure If you do not want to wait for BES12 to contact the licensing infrastructure at the set interval, you can start the synchronization process manually. For example, if you purchase additional licenses, you can start the polling process immediately to synchronize licensing data. 1. On the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing summary. 3. Click Synchronize licenses. Change how often BES12 contacts the licensing infrastructure BES12 contacts the licensing infrastructure at a regular interval to synchronize licensing data and retrieve the server licenses that are assigned to the domain. You can change how often BES12 contacts the licensing infrastructure to suit your organization s preference. 1. On the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing settings. 3. In the Polling interval drop-down list, click the appropriate polling interval. 4. Click Save. After you finish: If you selected the Manual option, see Synchronize data with the licensing infrastructure. Turn on or turn off the connection to the licensing infrastructure If regular contact with the licensing infrastructure does not meet your organization's security standards, you can turn off this connection. Turning off this connection does not affect the behavior of activated devices, but you should note the following limitations: SIM licensing is not permitted when the licensing infrastructure connection is turned off. BES12 replaces any SIM licenses in use with appropriate server licenses. Before turning off the infrastructure connection, verify that you have enough available server licenses. You cannot synchronize licensing data with the licensing infrastructure. If you purchase additional licenses, the licensing data is not synchronized with the BES12 domain. 28

Managing licenses for BlackBerry 10, ios, Android, and Windows Phone devices You cannot activate server licenses using an activation ID or host ID. 1. On the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing settings. 3. Under Licensing infrastructure, perform one of the following actions: Click Turned off. The SIM licensing option is also turned off. Click Turned on. To enable SIM licensing in the domain, under SIM licensing, click Turned on. 4. Click Save. Turn on or turn off SIM licensing If your organization does not want devices to use SIM licenses, you can turn off this feature. By default, SIM licensing is turned on. If you turn off this feature while SIM licenses are in use, BES12 replaces SIM licenses with appropriate server licenses. Before you turn off SIM licensing, verify that you have enough available server licenses. If you turn off the connection to the licensing infrastructure, SIM licensing is turned off automatically. If you turn on the licensing infrastructure connection again, you must turn on SIM licensing manually if you want to enable the use of SIM licenses. 1. On the menu bar, click Settings. 2. In the left pane, click Licensing > Licensing settings. 3. Under SIM licensing, select the appropriate option to turn on or turn off SIM licensing. 4. Click Save. Releasing licenses You can use myaccount to remove a specific number of server licenses from a domain. You may want to do this if you have available licenses that you want to activate in a different domain. For example, in domain A you activate 1000 Silver server licenses. After a month, 800 of the licenses are in use and 200 are available. You decide that you want to transfer 100 of the available licenses to domain B. In myaccount, you release 100 Silver server licenses from domain A. You then activate these 100 licenses in domain B. Make sure that you do not release more than the available number of server licenses. If you do, BES12 releases licenses that are currently in use, which can result in a compliance issue. You cannot use myaccount to release SIM licenses, as they are managed by your service provider. Release licenses 1. In a browser, navigate to www.blackberry.com. On the Enterprise menu, click Sign-in. Log in using your account credentials. 29