BlackBerry Enterprise Server for Microsoft Exchange

Placing the BlackBerry Enterprise Server in a
Segmented Network
Version: 5.0
Service Pack: 4
Technical Note
BlackBerry Enterprise Server for
Microsoft Exchange
Published: 2014-01-16
SWD-20140116165150736
Contents
1
Using a segmented network to prevent the spread of malware........................................................... 4
2
Protecting BlackBerry Enterprise Solution communications in your organization's environment......... 5
How a BlackBerry Enterprise Server and messaging server protect a connection to each other ............................................. 5
How the BlackBerry Enterprise Server components and the BlackBerry MVS protect communication ...................................6
How the BlackBerry Collaboration Service connects to an instant messaging server and collaboration clients on devices ...... 7
3
Architecture: BlackBerry Enterprise Server components in a segmented network.............................. 8
4
BlackBerry Enterprise Solution connection types and port numbers................................................ 12
BlackBerry Administration Service connection types and port numbers.............................................................................. 12
BlackBerry Attachment Service connection types and port numbers...................................................................................14
BlackBerry Collaboration Service connection types and port numbers................................................................................ 15
BlackBerry Configuration Database connection types and port numbers.............................................................................17
BlackBerry Controller connection types and port numbers..................................................................................................18
BlackBerry Dispatcher connection types and port numbers................................................................................................ 19
BlackBerry Messaging Agent connection types and port numbers.......................................................................................21
BlackBerry MDS Connection Service connection types and port numbers........................................................................... 23
BlackBerry Monitoring Service connection types and port numbers.................................................................................... 25
BlackBerry Policy Service connection types and port numbers ...........................................................................................26
BlackBerry Router connection types and port numbers ......................................................................................................27
BlackBerry Synchronization Service connection types and port numbers ........................................................................... 29
CalHelper connection type and port number...................................................................................................................... 30
IBM Sametime connection type and port number............................................................................................................... 30
Microsoft Exchange connection types and port numbers.................................................................................................... 31
BlackBerry Client for use with Microsoft Office Live Communications Server 2005 connection types and port numbers....... 31
Microsoft Office Live Communications Server 2005 connection types and port numbers .................................................... 32
Novell GroupWise Messenger connection type and port number......................................................................................... 32
RPC connection types and port numbers............................................................................................................................ 33
SNMP agent connection types and port numbers............................................................................................................... 33
Syslog connection type and port number............................................................................................................................ 34
5
Changing port numbers.................................................................................................................. 36
Change the port number that BlackBerry Enterprise Server components use to connect to the BlackBerry
Configuration Database......................................................................................................................................................36
Change the port number that the syslog tools use to monitor BlackBerry Enterprise Server events....................................... 37
6
Glossary .........................................................................................................................................38
7
Provide feedback............................................................................................................................40
8
Legal notice ................................................................................................................................... 41
Technical Note
Using a segmented network to prevent the spread of malware
Using a segmented network to
prevent the spread of malware
1
To help prevent the spread of malware in your organization’s network, you can use firewalls to divide your organization’s
network or LAN into segments to create a segmented network. Each segment can manage the network traffic for a specific
BlackBerry Enterprise Solution component. A segmented network is designed to improve the security and performance of
the segments by filtering out data that is not sent to the correct segment.
To configure the BlackBerry Enterprise Solution in a segmented network, you must install each BlackBerry Enterprise
Solution component on a computer that is separate from the computers that host other components and then place each
computer in its own network segment. If you configure the BlackBerry Enterprise Solution in a segmented network, you
create an architecture that is designed to prevent the spread of potential attacks from one computer that hosts a
component to another computer within your organization’s LAN. A segmented network architecture is designed to isolate
attacks and contain them on one computer. To permit communication with other components, when you install each
component in its own segment, you open only the port numbers that the components use.
The BlackBerry Enterprise Server and components, with the exception of the BlackBerry Router, do not support installation
in a DMZ. For more information about configuring the BlackBerry Router in the DMZ, see Placing the BlackBerry Router in
the DMZ.
For more information about the port numbers that the components use, see the BlackBerry Enterprise Server
Administration Guide.
4
Technical Note
Protecting BlackBerry Enterprise Solution communications in your organization's environment
Protecting BlackBerry
Enterprise Solution
communications in your
organization's environment
2
How a BlackBerry Enterprise Server and
messaging server protect a connection to
each other
A BlackBerry Enterprise Server is designed to connect to the following messaging servers in a highly secure manner.
Messaging server
Description
IBM Domino
The BlackBerry Enterprise Server and the Domino server communicate using
the Notes RPC protocol.
A user who activates a BlackBerry device when the device is connected to a
computer can encrypt data that is in transit between the Domino server and a
Notes Inbox.
For more information, see the online help for Domino.
Microsoft Exchange
The BlackBerry Enterprise Server and Microsoft Exchange Server can
communicate using Microsoft Exchange Web Services or the Microsoft
Exchange Server RPC protocol over a MAPI connection.
When the BlackBerry Enterprise Server and Microsoft Exchange Server
communicate using Microsoft Exchange Web Services they use an SSL
connection.
A user can use 128-bit encryption to encrypt RPC communication over the MAPI
connection between the Microsoft Exchange server and Microsoft Outlook. For
5
Technical Note
Messaging server
Protecting BlackBerry Enterprise Solution communications in your organization's environment
Description
more information about turning on encryption, see the documentation for
Microsoft Exchange
.
Novell GroupWise
The BlackBerry Enterprise Server is designed to use a trusted application key to
open a connection to the Novell GroupWise server. To generate the trusted
application key, an administrator of Novell GroupWise runs the trusted
application key generator, specifies the location of the primary domain of Novell
GroupWise, and specifies the application name that the BlackBerry Enterprise
Server can use to connect to the Novell GroupWise server. The trusted
application key is a 64-byte ASCII string.
The BlackBerry Enterprise Server connects to a user’s mailbox in a highly secure
manner using the trusted application key. The Novell GroupWise server verifies
the trusted application key and permits the BlackBerry Enterprise Server to
open a connection to the Novell GroupWise database for the user.
How the BlackBerry Enterprise Server
components and the BlackBerry MVS
protect communication
BlackBerry Enterprise Server components and the BlackBerry Mobile Voice System use the BlackBerry inter-process
protocol to help protect the data that the components send to each other. The BlackBerry inter-process protocol uses a
communication password to generate a session key that encrypts the data that the components send to each other. The
BlackBerry Collaboration Service, BlackBerry MDS Connection Service, BlackBerry Policy Service, BlackBerry
Synchronization Service, and BlackBerry MVS share a communication password. The BlackBerry Messaging Agent and
BlackBerry Dispatcher share a different communication password. The communication passwords are designed to prevent
a potentially malicious user from viewing data that the BlackBerry Enterprise Server components and the BlackBerry MVS
send to each other.
When a BlackBerry Enterprise Server component or the BlackBerry MVS opens a connection to the BlackBerry Dispatcher,
the BlackBerry inter-process protocol is designed to use SPEKE to generate the session key. The key generation process
uses the communication password of the BlackBerry Enterprise Server component or BlackBerry MVS and generates an
AES-256 encryption key, which is the session key. The BlackBerry Enterprise Server components and BlackBerry MVS use
the session key to encrypt the data that the BlackBerry Enterprise Server components and BlackBerry MVS sends to other
BlackBerry Enterprise Server components that share the same communication password.
6
Technical Note
Protecting BlackBerry Enterprise Solution communications in your organization's environment
How the BlackBerry Collaboration Service
connects to an instant messaging server
and collaboration clients on devices
The BlackBerry Collaboration Service is designed to connect to an instant messaging server and the collaboration clients
on BlackBerry devices. If your organization’s instant messaging server is Microsoft Office Live Communications Server
2005 or Microsoft Office Communications Server 2007, the BlackBerry Collaboration Service connects to the Microsoft
Office Communicator Web Access server using HTTPS or HTTP.
7
Technical Note
Architecture: BlackBerry Enterprise Server components in a segmented network
Architecture: BlackBerry
Enterprise Server components
in a segmented network
8
3
Technical Note
Architecture: BlackBerry Enterprise Server components in a segmented network
Component
Description
BlackBerry Administration Service
The BlackBerry Administration Service connects to the BlackBerry
Configuration Database. You can use the BlackBerry Administration Service to
manage BlackBerry Enterprise Server components, user accounts, and features
for BlackBerry devices.
9
Technical Note
Architecture: BlackBerry Enterprise Server components in a segmented network
Component
Description
BlackBerry Attachment Service
The BlackBerry Attachment Service converts supported message attachments
into a format that users can view on their devices.
BlackBerry Collaboration Service
The BlackBerry Collaboration Service provides a connection between the instant
messaging server and the enterprise instant messaging application on devices.
BlackBerry Configuration Database
The BlackBerry Configuration Database is a relational database that contains
the configuration data that BlackBerry Enterprise Server components use.
BlackBerry Controller
The BlackBerry Controller monitors other BlackBerry Enterprise Server
components and restarts them if they stop responding.
BlackBerry Dispatcher
The BlackBerry Dispatcher compresses and encrypts all data that devices send
and receive. The BlackBerry Dispatcher sends the data through the BlackBerry
Router, to and from the wireless network.
BlackBerry Mail Store Service
The BlackBerry Mail Store Service connects to the messaging servers in your
organization's environment and retrieves the contact information that the
BlackBerry Administration Service must use to search for user accounts on the
messaging servers.
BlackBerry MDS Connection Service
The BlackBerry MDS Connection Service permits users to access web content
on your organization's intranet or on the Internet. The BlackBerry MDS
Connection Service also permits applications on devices to connect to your
organization's application and content servers to retrieve application data and
updates.
BlackBerry Messaging Agent
The BlackBerry Messaging Agent connects to your organization's messaging
servers to provide messaging services, calendar management, contact lookups,
attachment viewing, and attachment downloading. The BlackBerry Messaging
Agent also generates device transport keys and acts as a gateway for the
BlackBerry Synchronization Service to access organizer data on the messaging
servers. The BlackBerry Messaging Agent synchronizes configuration data
between the BlackBerry Configuration Database and user mailboxes.
BlackBerry Monitoring Service
The BlackBerry Monitoring Service is designed to help you monitor your
organization's BlackBerry Domain. You can use the BlackBerry Monitoring
Service to troubleshoot issues and monitor the health of your organization's
BlackBerry Domain proactively.
BlackBerry Policy Service
The BlackBerry Policy Service sends IT policies and IT administration
commands to devices and provisions service books. The BlackBerry Policy
Service sends service books to devices to configure settings for features and
components on the devices.
BlackBerry Router
The BlackBerry Router connects to the wireless network to send data to and
from devices. The BlackBerry Router also sends data within your organization's
network to devices that are connected to computers that host the BlackBerry
Device Manager.
10
Technical Note
Architecture: BlackBerry Enterprise Server components in a segmented network
Component
Description
BlackBerry Synchronization Service
The BlackBerry Synchronization Service synchronizes organizer data between
devices and the messaging servers over the wireless network.
devices
Devices provides users with access to BlackBerry services such as messaging
and browsing.
instant messaging servers
Instant messaging servers store instant messaging accounts.
messaging servers
Messaging servers receive, send, and store all email messages.
organization's application and content
servers
Your organization's application server or content server provides push
applications and intranet content that the BlackBerry MDS Services use to
install on devices.
SNMP agent
The SNMP agent monitors the SNMP queries and traps for the BlackBerry
Enterprise Server components.
syslog
The syslog monitors events that the BlackBerry Enterprise Server components
produce.
users' computers with the BlackBerry
Device Manager
The users' computers with BlackBerry Device Manager permit users to connect
their devices to their computers over a serial connection or USB connection.
The BlackBerry Enterprise Server uses the connection to send data between it
and the devices.
11
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
BlackBerry Enterprise Solution
connection types and port
numbers
4
The BlackBerry Enterprise Server components authenticate the port connections over a TCP/IP or UDP/IP connection that
uses SSL or TLS.
BlackBerry Administration Service
connection types and port numbers
Item
Connection
type
Default port
number
UI where you can
configure the
connection
for a Microsoft SQL Server, incoming data connections
from, and outgoing data connections to, the BlackBerry
Configuration Database
TCP
1433
Windows registry
12
•
On a 32-bit version
of Windows:
HKEY_LOCAL_MAC
HINE\SOFTWARE
\Research In Motion
\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version
of Windows:
HKEY_LOCAL_MAC
HINE\SOFTWARE
\WOW6432Node
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can
configure the
connection
\Research In Motion
\BlackBerry
Enterprise Server
\Database\Port
incoming data connections from, and outgoing data
connections to, browsers
HTTPS
443
BlackBerry
Configuration Panel
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components
HTTP
18180
BlackBerry
Configuration Panel
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components for HA JNDI
TCP
11100
BlackBerry
Configuration Panel
incoming data connections from, and outgoing data
connections to, a BlackBerry Administration Service
instance for local JNDI
TCP
11099
BlackBerry
Configuration Panel
internal data connection
TCP
18082, 18083
BlackBerry
Configuration Panel
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components for Java RMI
TCP
13873
BlackBerry
Configuration Panel
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components for Java RMI over SSL
TLS
13843
BlackBerry
Configuration Panel
internal data connection
TCP
14457
BlackBerry
Configuration Panel
internal data connection
TCP
28083
BlackBerry
Configuration Panel
internal data connection
TLS
23843
BlackBerry
Configuration Panel
internal data connection
TCP
21099
BlackBerry
Configuration Panel
13
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Item
Connection
type
Default port
number
UI where you can
configure the
connection
data connections between BlackBerry Administration
Service instances
UDP
multicast IP
address/port
—
228.1.2.1/48858
228.1.2.1/48857
228.1.2.1/48855
228.1.2.5/45588
data connections between BlackBerry Administration
Service instances using TCP ping
TCP
first unused port
number from
17000 to 17009;
17200 to 17209;
17100 to 17109;
17400 to 17409;
17600 to 17609
and 17800 to
17809
BlackBerry
Administration Service
BlackBerry Attachment Service connection
types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming document submissions from the BlackBerry
Attachment Service
TCP
1900
BlackBerry Administration
Service
outgoing conversion results to the BlackBerry Attachment
Connector
TCP
1900
BlackBerry Administration
Service
incoming connections and outgoing connections for
BlackBerry Administration Service configuration
TCP
1999
BlackBerry Administration
Service
incoming document queries from the BlackBerry
Attachment Service
TCP
2000
BlackBerry Administration
Service
14
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
outgoing conversion results of large attachments to the
BlackBerry Attachment Connector for the BlackBerry
Attachment Service
TCP
2000
BlackBerry Administration
Service
1433 (static
connections
only)
Windows registry
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server database hosts
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
BlackBerry Collaboration Service
connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the Microsoft Office Live Communications
Server 2005 or Microsoft Office Communications Server
2007
HTTPS
443
BlackBerry Administration
Service
15
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the Microsoft Office Communications
Server 2007 R2 or Microsoft Lync Server 2010
TLS or MTLS
5061
BlackBerry Administration
Service
incoming data connections from, and outgoing data
connections to, IBM Sametime
TCP/IP
1516
BlackBerry Administration
Service
incoming data connections from, and outgoing data
connections to, the Novell GroupWise Messenger
SSL
8300
BlackBerry Administration
Service
incoming data connections from, and outgoing data
connections to, the BlackBerry Dispatcher
TCP
3200
—
1433 (for
static port)
Windows registry
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server hosts
outgoing syslog connections to the SNMP agent
UDP
4071
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
Windows registry
•
16
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion\
\BlackBerrySNMPAgent
\Parameters\UDPPort
BlackBerry Configuration Database
connection types and port numbers
Item
Connection
type
for a Microsoft SQL Server, incoming data connections
TCP
from, and outgoing data connections to, any of the following
BlackBerry Enterprise Server components:
•
BlackBerry Administration Service
•
BlackBerry Attachment Service
•
BlackBerry Collaboration Service
•
BlackBerry Dispatcher
•
BlackBerry MDS Connection Service
•
BlackBerry Messaging Agent
•
BlackBerry Policy Service
•
BlackBerry Synchronization Service
Default port
number
UI where you can configure
the connection
1433 (for
static port)
BlackBerry Configuration
Panel
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
17
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
\BlackBerry Enterprise
Server\Database\Port
BlackBerry Controller connection types and
port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming syslog connections from the BlackBerry
Messaging Agent
UDP
4070
Microsoft Windows registry
outgoing syslog connections to the BlackBerry Messaging
Agent
18
UDP
port number
that the
BlackBerry
Messaging
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Logging Info\Mailbox
Agent\SysLogHost
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Logging Info
\Mailbox Agent
\SysLogHost
—
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
Agent
provides
BlackBerry Dispatcher connection types
and port numbers
Item
Connection
type
incoming data connections from the BlackBerry Messaging TCP
Agent
incoming data connections from, and outgoing data
connections to, one or more of the following BlackBerry
Enterprise Server components:
•
BlackBerry Collaboration Service
•
BlackBerry MDS Connection Service
TCP
Default port
number
UI where you can configure
the connection
5096
Windows registry
3200
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server\Agents
\TcpPortDispatcher
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Agents
\TcpPortDispatcher
—
19
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
TCP
3101
BlackBerry Administration
Service
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server hosts
1433
Windows registry
•
BlackBerry Policy Service
•
BlackBerry Synchronization Service
outgoing data connection that uses SRP to the BlackBerry
Router
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
incoming data connection from the BlackBerry database
notification system
UDP
first unused —
port number
from 4185 to
4499
outgoing syslog connection to the SNMP agent
UDP
4071
Windows registry
•
20
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
BlackBerry Messaging Agent connection
types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
outgoing data connections to the BlackBerry Dispatcher
TCP
5096
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server\Agents
\TcpPortDispatcher
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Agents
\TcpPortDispatcher
21
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server hosts
Default port
number
UI where you can configure
the connection
1433
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
incoming syslog connections from the BlackBerry Controller UDP
and CalHelper
first unused —
port number
from 4085 to
4499
outgoing syslog connections to the BlackBerry Controller
4070
22
UDP
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server\Agents
\SysLogHost
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
Server\Agents
\SysLogHost
outgoing syslog connections to the SNMP agent
incoming data connections from the BlackBerry database
notification system
UDP
UDP
4071
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server\Agents
\UDPPort
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Agents\UDPPort
first unused —
port number
from 4185 to
4499
BlackBerry MDS Connection Service
connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
if access control for push applications is turned on,
incoming connections for the HTTP listener port
HTTP
8080
BlackBerry Administration
Service
23
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
if access control for push applications is turned on,
incoming connections for the HTTP listener port
HTTPS
8443
BlackBerry Administration
Service
incoming data connections from, and outgoing data
connections to, the BlackBerry Dispatcher
TCP
3200
—
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server hosts
1433
Windows registry
outgoing syslog connections to the SNMP agent
24
UDP
4071
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
\BlackBerrySNMPAgent
\Parameters\UDPPort
incoming data connections for reliable pushes
TCP
7874
BlackBerry Administration
Service
BlackBerry Monitoring Service connection
types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
for a Microsoft SQL Server, incoming data connections
from, and outgoing data connections to, the BlackBerry
Configuration Database and BlackBerry Monitoring Service
database
TCP
1433
BlackBerry Configuration
Panel
incoming data connections from, and outgoing data
connections to, browsers
HTTP
58180
—
incoming data connections from, and outgoing data
connections to, browsers
HTTPS
8443
—
incoming data connections from, and outgoing data
connections to, the BlackBerry Enterprise Server and any
other applications that you configured the BlackBerry
Monitoring Service to send SNMP traps to
SNMP
161 and 162
BlackBerry Monitoring
Service console
internal data connection to the BlackBerry Monitoring
Service Application Core
TCP
55500
BlackBerry Configuration
Panel
internal data connection to the BlackBerry Monitoring
Service Polling Engine
TCP
55501
BlackBerry Configuration
Panel
internal data connection to the BlackBerry Monitoring
Service Data Collection Subsystem
TCP
55502
BlackBerry Configuration
Panel
25
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
internal data connection to the BlackBerry Monitoring
Service console
TCP
55503
BlackBerry Configuration
Panel
BlackBerry Policy Service connection types
and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the BlackBerry Dispatcher
TCP
3200
—
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server hosts
1433 (for the Windows registry
static port)
• On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
incoming data connections from the BlackBerry database
notification system
26
UDP
first unused —
port number
from 4185 to
4499
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
BlackBerry Router connection types and
port numbers
Item
Connection
type
incoming data connections from the BlackBerry Dispatcher TCP
that use SRP
Default port
number
UI where you can configure
the connection
3101
BlackBerry Configuration
Panel
Windows registry
outgoing data connections to the BlackBerry Infrastructure
that use SRP
TCP
3101
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
\BlackBerryRouter
\ServicePort
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerryRouter
\ServicePort
BlackBerry Configuration
Panel
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
27
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
\BlackBerryRouter
\TcpPort
•
incoming data connections from, and outgoing data
TCP
connections to, BlackBerry devices that use the BlackBerry
Device Manager to bypass the wireless network and devices
that connect using Wi-Fi
outgoing syslog connections to the SNMP agent
UDP
4101
BlackBerry Device Manager
Windows registry
4071
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
\BlackBerryRouter
\DevicePort
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerryRouter
\DevicePort
Windows registry
•
28
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerryRouter
\TcpPort
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
\BlackBerrySNMPAgent
\Parameters\UDPPort
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
BlackBerry Synchronization Service
connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the BlackBerry Dispatcher
TCP
3200
—
incoming data connections from, and outgoing data
TCP
connections to, the BlackBerry Configuration Database that
a Microsoft SQL Server hosts
1433
Windows registry
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Database\Port
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
29
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Server\Database\Port
incoming data connections from the BlackBerry database
notification system
UDP
first unused —
port number
from 4185 to
4499
CalHelper connection type and port number
Item
Connection
type
Default port
number
UI where you can configure
the connection
outgoing logger connections to the BlackBerry Messaging
Agent
UDP
port number
that the
BlackBerry
Messaging
Agent
provides
—
IBM Sametime connection type and port
number
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from and outgoing data
connections to the BlackBerry Collaboration Service
TCP/IP
1533
IBM Sametime
Administration Tool
30
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Microsoft Exchange connection types and
port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
RPC endpoint mapper
TCP
135
For more information, visit
support.microsoft.com to
read article 270836.
Microsoft Exchange System Attendant service
TCP
—
For more information, visit
support.microsoft.com to
read article 270836.
NSPI service
TCP
—
For more information, visit
support.microsoft.com to
read article 270836.
Microsoft Exchange Information Store service
TCP
—
For more information, visit
support.microsoft.com to
read article 270836.
BlackBerry Client for use with Microsoft
Office Live Communications Server 2005
connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the Microsoft Office Live Communications
Server
TLS
5061
BlackBerry Configuration
Panel
31
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the Microsoft Office Live Communications
Server
TCP
5060
BlackBerry Configuration
Panel
Microsoft Office Live Communications
Server 2005 connection types and port
numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the connector for the Microsoft Office Live
Communications Server
TLS
5061
Microsoft Office Live
Communications Server
incoming data connections from, and outgoing data
connections to, the connector for the Microsoft Office Live
Communications Server
TCP
5060
Microsoft Office Live
Communications Server
Novell GroupWise Messenger connection
type and port number
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming data connections from, and outgoing data
connections to, the BlackBerry Collaboration Service
SSL
8300
Novell GroupWise server that
hosts the Novell GroupWise
Messaging Agent
32
Technical Note
BlackBerry Enterprise Solution connection types and port numbers
RPC connection types and port numbers
Item
Connection
type
Default port
number
UI where you can
configure the connection
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components for RPC/SMB requests on NetBIOS over
TCP/IP
UDP
137 or 138
—
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components for RPC/SMB requests on NetBIOS over
TCP/IP
TCP
137 or 139
—
incoming data connections from, and outgoing data
connections to, BlackBerry Enterprise Server
components for RPC/SMB requests when NetBIOS is
turned off on the BlackBerry Administration Service
TCP
445
—
SNMP agent connection types and port
numbers
Item
Connection
type
Default port
number
UI where you can configure
the connection
incoming syslog connections from the following BlackBerry
Enterprise Server components:
UDP
4071
Windows registry
•
BlackBerry Messaging Agent
•
BlackBerry Dispatcher
•
BlackBerry Router
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
33
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerrySNMPAgent
\Parameters\UDPPort
incoming syslog connections from SNMP queries and traps
UDP
161
Windows registry
outgoing syslog connections from SNMP queries and traps
TCP
162
Windows registry
Syslog connection type and port number
Item
Connection
type
Default port
number
UI where you can configure
the connection
listener port for the BlackBerry Enterprise Server events
UDP
514
Windows registry
34
•
On a 32-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE\Research
In Motion\BlackBerry
Enterprise Server
\Logging Info
\<component>\(Default)
•
On a 64-bit version of
Windows:
HKEY_LOCAL_MACHIN
E\SOFTWARE
\WOW6432Node
\Research In Motion
\BlackBerry Enterprise
Technical Note
Item
BlackBerry Enterprise Solution connection types and port numbers
Connection
type
Default port
number
UI where you can configure
the connection
Server\Logging Info
\<component>\(Default)
35
Technical Note
Changing port numbers
Changing port numbers
5
Change the port number that BlackBerry
Enterprise Server components use to
connect to the BlackBerry Configuration
Database
You can change the static port number that BlackBerry Enterprise Server components use if you changed the port number
that the BlackBerry Configuration Database uses after you install the BlackBerry Enterprise Server.
By default, the BlackBerry Configuration Database accepts TCP/IP connections to port 1433 on a Microsoft SQL Server.
The BlackBerry Configuration Database accepts connections through ports 1024 to 65535.
1.
On the computer that hosts the BlackBerry Enterprise Server component, open the BlackBerry Configuration Panel.
2.
In the Database Connectivity tab, in the Use dynamic ports or specify SQL port field, type the port number.
3.
Click Apply.
4.
Click OK.
5.
In the Windows Services, restart the appropriate service for the BlackBerry Enterprise Server component.
6.
Repeat steps 1 to 5 on each computer that hosts a BlackBerry Enterprise Server component that connects to the
BlackBerry Configuration Database.
36
Technical Note
Changing port numbers
Change the port number that the syslog
tools use to monitor BlackBerry Enterprise
Server events
You can change the port number that the syslog tools listen on to monitor BlackBerry Enterprise Server events. By default,
the syslog tools listen to events for the BlackBerry Enterprise Server on port 514.
1.
On the computer that hosts the BlackBerry Enterprise Server component, open the Windows Registry Editor.
2.
Perform one of the following actions:
•
If you are running a 32-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\Research In Motion
\BlackBerry Enterprise Server.
•
If you are running a 64-bit version of Windows, navigate to HKEY_LOCAL_MACHINE\Software\WOW6432Node
\Research In Motion\BlackBerry Enterprise Server.
3.
In the Logging Info registry key, click a BlackBerry Enterprise Server component.
4.
If the DWORD value does not exist, create a DWORD value that you name (Default).
5.
Change the DWORD value to the port number that the syslog tools listen on.
6.
Click OK.
7.
In the Windows Services, restart the service for the BlackBerry Enterprise Server component.
37
Technical Note
Glossary
Glossary
6
AES
Advanced Encryption Standard
ASCII
American Standard Code for Information Interchange
BlackBerry interprocess protocol
The BlackBerry inter-process protocol is a BlackBerry proprietary protocol that generates the
session key that BlackBerry Enterprise Solution components, such as the BlackBerry Enterprise
Server and BlackBerry Mobile Voice System, can use to communicate in a highly securely
manner with each other. The BlackBerry inter-process protocol generates the session key based
on the communication password.
BlackBerry MDS
BlackBerry Mobile Data System
BlackBerry MVS
BlackBerry Mobile Voice System
communication
password
The communication password is a password that BlackBerry Enterprise Solution components
use for the BlackBerry inter-process protocol. The communication password is designed to
prevent a potentially malicious user from viewing the data that the components send to each
other.
DMZ
A demilitarized zone (DMZ) is a neutral subnetwork outside of an organization's firewall. It exists
between the trusted LAN of the organization and the untrusted external wireless network and
public Internet.
HTTP
Hypertext Transfer Protocol over Secure Sockets Layer
HTTPS
Hypertext Transfer Protocol over Secure Sockets Layer
IP address
An Internet Protocol (IP) address is an identification number that each computer or mobile
device uses when it sends or receives information over a network, such as the Internet. This
identification number identifies the specific computer or mobile device on the network.
IT administration
command
An IT administration command is a command that you can send over the wireless network to
protect sensitive information on a BlackBerry device or delete all BlackBerry device data.
IT policy
An IT policy consists of various IT policy rules that control the security features and behavior of
BlackBerry smartphones, BlackBerry PlayBook tablets, the BlackBerry Desktop Software, and
the BlackBerry Web Desktop Manager.
IT policy rule
An IT policy rule permits you to customize and control the actions that BlackBerry smartphones,
BlackBerry PlayBook tablets, the BlackBerry Desktop Software, and the BlackBerry Web
Desktop Manager can perform.
JNDI
Java Naming and Directory Interface
38
Technical Note
Glossary
LAN
local area network
MAPI
Messaging Application Programming Interface
MTLS
Mutual Transport Layer Security
NetBIOS
network basic input/output system
NSPI
Name Service Provider Interface
PAP
Push Access Protocol
RMI
Remote Method Invocation
RPC
remote procedure call
SMB
Server Message Block
SNMP
Simple Network Management Protocol
SPEKE
Simple Password-authenticated Exponential Key Exchange
SQL
Structured Query Language
SRP
Server Routing Protocol
SSL
Secure Sockets Layer
TCP/IP
Transmission Control Protocol/Internet Protocol (TCP/IP) is a set of communication protocols
that is used to transmit data over networks, such as the Internet.
TCP
Transmission Control Protocol
TLS
Transport Layer Security
UDP/IP
User Datagram Protocol/Internet Protocol
UDP
User Datagram Protocol
USB
Universal Serial Bus
39
Technical Note
Provide feedback
To provide feedback on this content, visit www.blackberry.com/docsfeedback.
40
Provide feedback
7
Technical Note
Legal notice
Legal notice
8
©2014 BlackBerry. All rights reserved. BlackBerry® and related trademarks, names, and logos are the property of
BlackBerry Limited and are registered and/or used in the U.S. and countries around the world.
IBM, Domino, Lotus, Notes, and Sametime are trademarks of International Business Machines Corporation. Java is a
trademark of Oracle and/or its affiliates. Microsoft, Lync, Outlook, SQL Server, and Windows are trademarks of Microsoft
Corporation. Novell and GroupWise are trademarks of Novell, Inc. Wi-Fi is a trademark of the Wi-Fi Alliance. All other
trademarks are the property of their respective owners.
This documentation including all documentation incorporated by reference herein such as documentation provided or
made available at www.blackberry.com/go/docs is provided or made accessible "AS IS" and "AS AVAILABLE" and without
condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated
companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other
inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential
information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized
terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however,
BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this
documentation to you in a timely manner or at all.
This documentation might contain references to third-party sources of information, hardware or software, products or
services including components and content such as content protected by copyright and/or third-party websites
(collectively the "Third Party Products and Services"). BlackBerry does not control, and is not responsible for, any Third
Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility,
performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The
inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by
BlackBerry of the Third Party Products and Services or the third party in any way.
EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS,
ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR
WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE
QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A
COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE
OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES
REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR
PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND
CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE
DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE
HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM
THAT IS THE SUBJECT OF THE CLAIM.
41
Technical Note
Legal notice
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL
BLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR
PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY
PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING
DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED
DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS,
BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION
OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY
APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF
THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST
OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR
PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF
BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALL HAVE NO
OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING
ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY.
THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF
THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT,
NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL
BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY
CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS,
AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED BLACKBERRY DISTRIBUTORS (ALSO
INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT
CONTRACTORS.
IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR,
EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANY AFFILIATES OF
BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION.
Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that
your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer
Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for
availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with
BlackBerry's products and services may require one or more patent, trademark, copyright, or other licenses in order to
avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party
Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring
them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any
Third Party Products and Services that are provided with BlackBerry's products and services are provided as a
convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees,
representations, or warranties of any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation
thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of
separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a
license or other agreement with BlackBerry.
42
Technical Note
Legal notice
Certain features outlined in this documentation require a minimum version of BlackBerry Enterprise Server, BlackBerry
Desktop Software, and/or BlackBerry Device Software.
The terms of use of any BlackBerry product or service are set out in a separate license or other agreement with BlackBerry
applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN
AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRY PRODUCT OR
SERVICE OTHER THAN THIS DOCUMENTATION.
Certain features outlined in this documentation might require additional development or Third Party Products and Services
for access to corporate applications.
This product includes software developed by the Apache Software Foundation (www.apache.org/) and/or licensed
pursuant to Apache License, Version 2.0 (www.apache.org/licenses/). For more information, see the NOTICE.txt file
included with the software. Unless required by applicable law or agreed to in writing, software distributed under the
License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
implied. See the License for the specific language governing permissions and limitations under the License.
BlackBerry Limited
2200 University Avenue East
Waterloo, Ontario
Canada N2K 0A7
BlackBerry UK Limited
200 Bath Road
Slough, Berkshire SL1 3XE
United Kingdom
Published in Canada
43