BlackBerry Enterprise Server for Microsoft Exchange Version 3.5 Service Pack 1 Hotfix 2 December 2002 PLEASE READ THE LEGAL NOTICES SET OUT AT THE END OF THIS DOCUMENT. This document provides information about BlackBerry Enterprise Server for Microsoft Exchange, Version 3.5 Service Pack 1 Hotfix 2, as well as answers to questions you might have. Contents Fixed issue in BlackBerry Enterprise Server 3.5 Service Pack 1 Hotfix 2 System requirements Installing BlackBerry Enterprise Server version 3.5 Service Pack 1 Hotfix 2 Post-installation requirement Removing BlackBerry Enterprise Server Software About the BlackBerry Enterprise Server About the administration software About Mobile Data Service About the Attachment Service Handheld compatibility Additional documentation
Fixed issue in BlackBerry Enterprise Server 3.5 Service Pack 1 Hotfix 2 In previous releases, the Mobile Data Service might have rejected packets sent from the handheld under both of the following conditions: if previous connections carried packets with incorrect sequence numbers from the handheld if the Mobile Data Service received packets after the previous connections (which carried packets with incorrect sequence numbers from the handheld) were removed from the Mobile Data Service queues. This issue is fixed in this release. System requirements The BlackBerry Enterprise Server Software requires the following hardware and software components: Hardware Computer with an Intel Pentium III processor or compatible (500 MHz or later, 256-MB RAM, 1-GB hard drive) Software BlackBerry Enterprise Server works in Microsoft Exchange 5.5 (or later) or Microsoft Exchange 2000 native environments, or in a mixed (Microsoft Exchange 5.5 and Microsoft Exchange 2000) environment. This software requirements section is divided into: BlackBerry Enterprise Server requirements BlackBerry Enterprise Server Management requirements Mobile Data Service requirements Other installation requirements Firewall configuration 2 BlackBerry Enterprise Server for Microsoft Exchange
BlackBerry Enterprise Server requirements The following software is required for the BlackBerry Enterprise Server to function. If you are installing with Microsoft Exchange 5.5: Windows NT 4.0 (Service Pack 5 or later) or Windows 2000 Server (Service Pack 1 or later) Microsoft Internet Explorer 5.00 or later if running on Windows NT 4.0 Microsoft Exchange 5.5, Service Pack 4 or later mail server environment Warning: We recommend installing the BlackBerry Enterprise Server service on a computer without Microsoft Exchange 5.5 installed. Microsoft Exchange 5.5 Administrator (Verify that LDAP default settings include the following: Port number value is 389 (this value can be changed to prevent a port conflict with Active Directory, but you must change the LDAP port value in BlackBerry Enterprise Server Management after it is installed), Enable protocol is selected, Windows NT Challenge/Response authentication is selected at the site level and the server level. Note: If you are using Microsoft Exchange 5.5 in a Windows 2000 environment, you may need to create or modify an existing Exchange55 key in the registry before you can see your routing groups in BlackBerry Enterprise Server Management. Refer to "No routing groups found in BlackBerry Enterprise Server Management" in the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide for more information. Before installing BlackBerry Enterprise Server, install the CDO.dll hotfix for Microsoft Product Support Services Knowledge Base article Q312273. You can download the hotfix and obtain information on the Knowledge Base article from: http://www.microsoft.com/downloads/release.asp?releaseid=38967&area=se arch&ordinal=1, and then copy the CDO.dll hotfix to C:/winnt/system32/. The CDO.dll should be version 05.05.79.2655. If you are installing with Microsoft Exchange 2000: Windows 2000 Server (Service Pack 1 or later) Microsoft Exchange 2000 (Service Pack 2 or later) mail server environment Warning: We recommend installing the BlackBerry Enterprise Server service on a computer without Microsoft Exchange 2000 installed. Microsoft Exchange 2000 System Manager, on the same computer as the BlackBerry Enterprise Server service BlackBerry Enterprise Server for Microsoft Exchange 3
Note: If Service Pack 2 of Microsoft Exchange 2000 is installed on the Microsoft Exchange Server, it should also be installed on the BlackBerry Enterprise Server to update Microsoft Exchange 2000 System Manager. Before installing BlackBerry Enterprise Server, install the CDO.dll hotfix for Microsoft Product Support Services Knowledge Base article Q314606. You can download the hotfix and obtain information on the Knowledge Base article from: http://www.microsoft.com/downloads/release.asp?releaseid=38952&area=se arch&ordinal=2, and then copy the CDO.dll hotfix to C:/winnt/system32/.The CDO.dll should be version 06.00.16.5770. BlackBerry Enterprise Server Management requirements The following software is required for BlackBerry Enterprise Server Management to function. Windows NT 4.0 (Service Pack 5 or later) or Windows 2000 Server (Service Pack 1 or later) A database engine (MSDE, SQL 7.0, or SQL 2000) must be installed before, during, or after BlackBerry Enterprise Server Management installation, and a database must be created on the database server, before you can use BlackBerry Enterprise Server Management; MSDE is provided on the BlackBerry Enterprise Server Software CD Install only ONE of the following: Microsoft Exchange 5.5 Administrator Microsoft Exchange 2000 System Manager The following software is required for BlackBerry Enterprise Server Management to function on a Windows NT 4.0 Server. These tools are built into Windows 2000 Server; you need only install them if you are running Windows NT 4.0 Server: Microsoft Management Console 1.2: You can download this software from http://www.microsoft.com/downloads/release.asp?releaseid=39918&area=search&ord inal=3 After installing Microsoft Management Console 1.2, you should do an initial startup of the installed software (type MMC at the command prompt) before continuing. Active Directory Service Interfaces (ADSI) 2.5: You can download this software from http://www.microsoft.com/ntserver/nts/downloads/other/adsi25/default.asp 4 BlackBerry Enterprise Server for Microsoft Exchange
Warning: Universal Serial Bus (USB) drivers are supported only in a Windows 2000 Server environment. USB support on Windows NT 4.0 Server is not available. USB support in Microsoft Exchange 5.5 is available only on computers on which the Microsoft Exchange 5.5 administration extension installer has been run. USB support does not replicate to all Microsoft Exchange 5.5 administration computers. Mobile Data Service requirements The following software is required for Mobile Data Service 1.0 (with BlackBerry Enterprise Server version 3.5 or later) to function. Open Database Connectivity (ODBC) 2.6 or later on the Mobile Data Service computer. ODBC is installed with SQL Server (7.0 or 2000) or MSDE; if you are not installing a database tool (which is required for the BlackBerry Enterprise Server Management database), download Microsoft Data Access Components (MDAC) 2.6 or later from http://www.microsoft.com/data/download.htm The BlackBerry Enterprise Server must be able to send HTTP requests through TCP/IP Port 3101 for browsers on Mobile Data Service-enabled handhelds to function properly Java Runtime Environment (JRE) 1.4: This software is provided on the BlackBerry Enterprise Server CD in drive:\tools\. Launch j2re-1_4_1-windows-i586-i.exe and complete the installation. This version of JRE has Java Secure Socket Extension (JSSE) imbedded. Other installation requirements Warning: To install BlackBerry User Administration, BlackBerry Enterprise Server Management must also be installed on the same computer. Note: BlackBerry Enterprise Server and Microsoft Exchange are not required on the same computer as BlackBerry User Administration. BlackBerry User Administration has the same system requirements but requires different permissions than the BlackBerry Enterprise Server. Refer to the BlackBerry Enterprise Server for Microsoft Exchange 5.5 Installation and Getting Started Guide or the BlackBerry Enterprise Server for Microsoft Exchange 2000 Installation and Getting Started Guide for further details on the appropriate system requirements for your installation environment. BlackBerry Enterprise Server for Microsoft Exchange 5
Firewall configuration The BlackBerry Enterprise Server initiates outbound, bidirectional connections to the wireless network. To support BlackBerry in an environment with a firewall in place, you must configure the firewall to enable the computers running the BlackBerry Enterprise Server within the company to initiate TCP/IP connections to an outside server listening on port 3101. If you use a proxying firewall, the proxy must be transparent. Note: A transparent proxy does NOT modify requests or responses through the proxy during proxy authentication and identification, whereas a non-transparent proxy (where the client specifies the hostname and port number of the proxy) IS used to modify requests or responses through the proxy. If you have a non-transparent proxy, the BlackBerry Enterprise Server can be configured to access an internal proxy address which is then translated externally to the SRP Host on port 3101. Please verify that your firewall is configured to accommodate these types of outbound-initiated connections bidirectionally. Installing BlackBerry Enterprise Server version 3.5 Service Pack 1 Hotfix 2 Before you install BlackBerry Enterprise Server 3.5 Service Pack 1 Hotfix 2 for Microsoft Exchange, ensure that you have installed BlackBerry Enterprise Server 3.5 Service Pack 1 for Microsoft Exchange. The version of BlackBerryServer.exe that corresponds to BlackBerry Enterprise Server 3.5 Service Pack 1 is 3.5.1.6. 1. Manually stop the Mobile Data Service. 2. While logged on to the BlackBerry Enterprise Server computer, open besx_35_s1_hf2.zip. 3. Launch BESX3_5_1-hotfix2.msp. The Welcome to the Patch for BlackBerry Enterprise Server installer screen appears. 4. In the Welcome screen, click Update. The InstallShield Wizard installs the hotfix for you, updating the location of the JRE files on the hard drive in the format %JRE_HOME%\lib\ext\ (for example, drive:\program Files\Java\j2re1.4.0_01\lib\ext) with the following files: bmds.jar, transcodercod.jar, transcoderwml.jar, transcoderwmls.jar. Note: If any of these files were not previously installed with version 3.5 Service Pack 1, they cannot be added or updated by this hotfix. 6 BlackBerry Enterprise Server for Microsoft Exchange
5. On the final screen of the InstallShield Wizard, click Finish. 6. Restart the Mobile Data Service. (Refer to "Removing BlackBerry Enterprise Server Software" for more information.) Post-installation requirement Starting the Mobile Data Service The services are installed as automatic services, but must be manually started after the installation or upgrade. If you are using Windows NT: 1. From the Start menu, select Settings > Control Panel to open the Control Panel window. 2. Click Services to open the Services window. 3. Select the Mobile Data Service item. Click Start to start the Mobile Data Service. 4. Click Close to return to the Control Panel window. If you are using Windows 2000: 1. From the Start menu, select Programs > Administrative Tools > Services to open the Services window. 2. Select the Mobile Data Service item. Right-click and select Start to start the Mobile Data Service. 3. Close the window. Removing BlackBerry Enterprise Server Software To remove BlackBerry Enterprise Server Software, or to remove individual components such as BlackBerry Enterprise Server Management, Mobile Data Service, BlackBerry User Administration, or BlackBerry utilities, refer to the BlackBerry Enterprise Server Installation and Getting Started Guide chapter, "Removing software". BlackBerry Enterprise Server for Microsoft Exchange 7
About the BlackBerry Enterprise Server The BlackBerry Enterprise Server consolidates the operation of individual Desktop Redirectors into a server that the IT department can monitor and control. The server supports laptop users and enables users to turn off their computers at the end of the day. IT departments manage the centralized administration and control of mobile email, and users can continue to configure email redirection options using the BlackBerry Desktop Software on their PCs. For administrative procedures, please refer to the BlackBerry Enterprise Server for Microsoft Exchange Administration Guide. About the administration software To administrate BlackBerry Enterprise Server(s) in a native Microsoft Exchange 2000, Microsoft Exchange 5.5, or mixed (Microsoft Exchange 2000 and Microsoft Exchange 5.5) environment, you must install BlackBerry Enterprise Server Management Software. BlackBerry Enterprise Server Management functions as a snap-in to the Microsoft Management Console. From the BlackBerry Enterprise Server Management console, you can administrate users at the server level and mailbox level. The BlackBerry Enterprise Server Management Software includes an MSDE or SQL database (to store data relevant to the BlackBerry Enterprise Server(s) and administration mailboxes), and the BlackBerry Enterprise Server Management console (the interface that enables administration of the BlackBerry Enterprise Server(s) and its users) About Mobile Data Service The Mobile Data Service is a new feature of this release. After the Mobile Data Service is enabled for users, they can use the handheld Browser to view Wireless Markup Language (WML) pages. The Mobile Data Service manages and alters information so that it can pass between the intranet and the BlackBerry handheld more efficiently. When you install BlackBerry Enterprise Server, you have the option of installing one Mobile Data Service for each BlackBerry Enterprise Server service you install. Direct flow between the handheld application and a network server does not occur - all information must pass through the Mobile Data Service first. As the intermediary agent, the Mobile Data Service fulfills two possible functions: Data conversion: As a proxy, Mobile Data Service intercepts information passing between handheld applications and the content server. Data conversion might be necessary if the content returning from the server is not appropriately formatted for the application s needs. Data routing: As a channel, Mobile Data Service passes information back and forth between the handheld application and the content server. The information 8 BlackBerry Enterprise Server for Microsoft Exchange
transferred is untouched the content sent by the application and the content sent by the server are not altered before being passed on to their destinations. After BlackBerry Enterprise Server with Mobile Data Service and BlackBerry Enterprise Server Management Software are installed, in the BlackBerry Enterprise Server Management console, Mobile Data Service properties enable you to: set the connection to the BlackBerry Enterprise Server hostname and port, Push Server Connection Listen Port and Web Server Listen Port; configure Hypertext Transfer Protocol (HTTP) properties so that Mobile Data Service can act as a proxy for HTTP messages exchanged between the client handheld and the server; configure TLS (Transport Layer Security) and HTTPS (HyperText Transport Protocol Secure) properties; configure Online Certificate Status Protocol (OCSP) properties (required for S/MIME digital signing); configure Lightweight Directory Access Protocol (LDAP) properties (required for S/MIME digital signing; and configure Push Server parameter (optional) About S/MIME and Mobile Data Service The current BlackBerry infrastructure provides secure email transport between your organization s network and the BlackBerry Wireless Handheld using Triple Data Encryption Standard (DES) encryption technology. This means that email delivered to handhelds is as secure as messages that are delivered to a personal computer on your organization s network. Secure Multipurpose Internet Mail Extensions (S/MIME) offers an additional layer of security between the sender and recipient of an email message. S/MIME technology enables end-to-end authentication and confidentiality, and protects data integrity and privacy from the time the originator of the message sends it over the BlackBerry wireless network, until it is decoded and read by the message recipient. S/MIME is enabled at the server level (through the BlackBerry Enterprise Server Management console), and on the handheld. Mobile Data Service parameters for Online Certificate Status Protocol (OCSP) properties and Lightweight Directory Access Protocol (LDAP) are required for S/MIME digital signing to work. Configure Mobile Data Service Parameters through the BlackBerry Enterprise Server s Mobile Data Service Properties window in the BlackBerry Enterprise Server Management console. Warning: Before users can send and receive S/MIME messages, they must install the BlackBerry Desktop Manager with S/MIME Support and update their handhelds to support S/MIME services. After S/MIME is enabled, they can send and receive encrypted messages, attach a signature to outgoing messages, and perform wireless certificate searches. BlackBerry Enterprise Server for Microsoft Exchange 9
About the Browser On the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld, the Browser only works with the Mobile Data Service. The Mobile Data Service must be enabled for users to use the Browser. On the BlackBerry 5800 Series, BlackBerry 6500 Series, and BlackBerry 6700 Series of wireless handhelds, the Browser works with two types of gateways: a WAP gateway that is operated by the network operator, or the Mobile Data Service (MDS). The Mobile Data Service must be used to access corporate intranets, but it can also be used to access the Internet. Support for WAP or MDS depends on provisioning by the network operator. The Mobile Data Service uses a protocol called the IP Proxy Protocol (IPPP) to communicate with the handheld. Communication between the handheld and the Mobile Data Service is encrypted in the same way as email. About the Attachment Service When you install the Attachment Service, the BlackBerry Enterprise Server can deliver email attachment content to any BlackBerry handheld. The Triple-DES encryption of the BlackBerry Enterprise Server applies to the attachment content. Using the Attachment Service application, you can open attachments with the following file name extensions:.doc,.xls,.ppt,.pdf,.wpd, and.txt. The file formats are converted to the Universal Content Stream (UCS), a Research In Motion Limited (RIM) proprietary format, by the Attachment Service and are delivered as email attachments to the handheld. Content is generated by the Attachment Service and received by the handheld based on requests by the handheld user for a Table of Contents or Full Content. Handheld compatibility Handhelds running with BlackBerry Desktop Software version 2.0 or higher are compatible with BlackBerry Enterprise Server version 3.5 or later. Note that a handheld with software version 2.0 will not support the wireless calendar synchronization feature, as BlackBerry Desktop Software version 2.1 and BlackBerry Handheld Software version 2.1 (or later versions of the software) must be used in conjunction with BlackBerry Enterprise Server version 2.1 (or later versions of the software) in order to support this feature. The wireless synchronization of IT Policy settings and IT Admin commands are available only with version 2.5 of the handheld software for the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 10 BlackBerry Enterprise Server for Microsoft Exchange
957 Wireless Handheld and with version 3.6 of the handheld software for the BlackBerry 5800 Series, BlackBerry 6500 Series, and BlackBerry 6700 Series of wireless handhelds. The Global Address Lookup feature is available only with version 2.5 of the handheld software for the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld and with version 3.6 of the handheld software for the BlackBerry 5800 Series, BlackBerry 6500 Series, and BlackBerry 6700 Series of wireless handhelds. To support the Attachment Service feature, you must run the BlackBerry Desktop Software version 2.1 or later and BlackBerry Handheld Software version 2.1 or later in conjunction with BlackBerry Enterprise Server version 3.5 or later. After the Attachment Service for the BlackBerry Enterprise Server is installed on top of the BlackBerry Enterprise Server installation, the Attachment Service for the wireless handheld can be installed on top of the installation of version 2.1 or 2.5 of the handheld software for the RIM 850 Wireless Handheld, RIM 857 Wireless Handheld, RIM 950 Wireless Handheld, and RIM 957 Wireless Handheld. Additional documentation After you install the software, all documentation is located in the Docs directory, with the installed software. BlackBerry Enterprise Server Management Software offers online Help to guide you and answer your questions. To open the online Help, click Help in the Help menu of any active window. Refer to the BlackBerry Enterprise Server Software for Microsoft Exchange 2000 Installation and Getting Started Guide or the Microsoft Exchange 5.5 Installation and Getting Started Guide for more information about installing the BlackBerry Enterprise Server Software. BlackBerry Enterprise Server for Microsoft Exchange 11
Installation Documentation Title BlackBerry Enterprise Server Software for Microsoft Exchange 2000 Installation and Getting Started Guide BlackBerry Enterprise Server Software for Microsoft Exchange 5.5 Installation and Getting Started Guide Location on installation CD Root_directory:\Docs\Installation with Microsoft Exchange 2000.pdf Root_directory:\Docs\Installation with Microsoft Exchange 5.5.pdf Administration Documentation Title BlackBerry Enterprise Server Software Administration Guide Location on installation CD Root_directory:\Docs\Administration Guide.pdf If any of these components are missing, contact your point of purchase of your license for BlackBerry Enterprise Server Software. Note: This document is provided for informational purposes only, and does not constitute a binding legal document. RIM assumes no responsibility for any typographical, technical or other inaccuracies in this document, and makes no warranties, express or implied, with respect to the content of this document. RIM reserves the right to periodically change information that is contained in this document; however, RIM makes no commitment to provide any such changes, updates, enhancements or other additions to this document to you in a timely manner or at all. IN NO EVENT SHALL RIM BE LIABLE TO ANY PARTY FOR ANY DIRECT, INDIRECT, SPECIAL OR CONSEQUENTIAL DAMAGES FOR ANY USE OF THIS DOCUMENT, INCLUDING WITHOUT LIMITATION, RELIANCE ON THE INFORMATION PRESENTED, LOST PROFITS OR BUSINESS INTERRUPTION, EVEN IF RIM WAS EXPRESSLY ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. Any software that is provided with this document will be governed by the terms and conditions of the RIM software license provided to you with either your RIM wireless handheld or the RIM BlackBerry Enterprise Server Software, as applicable, and, by using the software provided with this document, you agree to be bound by such terms. Warning: This document is for the use of licensed users only. Any unauthorized copying, distribution or disclosure of information is a violation of copyright laws. No reproduction in whole or in part of this document may be made without express written consent of RIM. 2002 Research In Motion Limited. All rights reserved. The BlackBerry and RIM families of related marks, images and symbols are the exclusive properties of Research In Motion Limited. RIM, Research In Motion, 'Always On, Always Connected', the envelope in motion symbol and the BlackBerry logo are registered with the U.S. Patent and Trademark Office and may be pending or registered in other countries. All other brands, product names, company names, trademarks and service marks are the properties of their respective owners. The handheld and/or associated software are protected by copyright, international treaties and various patents, including one or more of the following U.S. patents: 6,278,442; 6,271,605; 12 BlackBerry Enterprise Server for Microsoft Exchange
6,219,694; 6,075,470; 6,073,318; D,445,428; D,433,460; D,416,256. Other patents are registered or pending in various countries around the world. Please visit www.rim.net/patents.shtml for a current listing of applicable patents. Note: These files are considered pre-release because they have received only minimal software quality assurance. If you decide to use the files in this release, you should retest your entire application. Although these files are considered an interim patch, they are deployable and supported. By applying this release, you agree to upgrade and apply the next generally available public release. This product includes code licensed from RSA Security, Inc. Some portions licensed from IBM are available at http://oss.software.ibm.com/icu4j/ Part No.:PDF-04436-037 BlackBerry Enterprise Server for Microsoft Exchange 13