Monday, March 25, 2013

Installing Blackberry Enterprise Service 10 - Blackberry Device Service 6.2

I had a client who recently got his hands on a new Blackberry z10 device to test out and while he didn’t feel it was much of a priority to get a new BES 10 up, it quickly became one after his boss saw the device.  I’ve just completed the install and felt that it was pretty much the same as the old BES 5 which was quite easy to do but thought it would be a good idea to document and blog it to show what the step by step process looks like. I haven’t gotten to installing the Universal Device Server for iOS and Android phones but will do soon.  The following is what was required to get Blackberry Enterprise Service 10’s Blackberry Device Service 6.2 deployed in an environment that already has BES 5.

First off, the deployment guide I used can be found here:

Blackberry Device Service



Also note that I intend on installing Blackberry Device Service and Universal Device Service on the same server so I simply gave it a generic name.  More information about collocating the 2 services together can be found in the following KB:

Installing BlackBerry Device Service, Universal Device Service, and BlackBerry Management Studio on the same host server;jsessionid=6BC84FE31517A1D15907D5ABED8981EC?externalId=KB32547&sliceId=2&cmd=displayKC&docType=kc&noCount=true&ViewedDocsListHelper=com.kanisa.apps.common.BaseViewedDocsListHelperImpl

Setup BlackBerry Windows Server 2008 R2 Server

Begin by adding your BES service account to the local administrators group on the server:



Continue by opening Start –> Administrative Tools –> Local Security Policy:


Navigate to Security Settings –> Local Policies –> User Rights Assignment:

Review the configuration for Allow log on locally to see whether the besadmin account already has these permissions as it usually does because the Administrators group usually in there but if not, add it in:


Continue by granting the besadmin account the Log on as a service permission:



Setup Separate SQL Server

With the server permissions configured, proceed with opening SQL Server Management Studio and connect to the database instance you plan to use to host the Blackberry Device Service database (I’m not going to use a local SQL Express install but if you are, you can skip this step).  Navigate to Security –> Login then right click and select New Login…:


Select the domain besadmin account:


Click on the Server Roles and grant the account dbcreator permissions (this is temporary):


Install Blackberry Device Service

Log off of the BES 10 server and log back on as the besadmin service account and launch the installer:


Continue by clicking the Install button for Blackberry Device Service and confirm that you are using the correct account for the install:


Enter the appropriate user name, organization and select the country:


Continue by selecting Create a Blackberry Configuration Database and Use an existing Microsoft SQL Server in your organization:


I’m installing all the components onto one server so all of the components will be selected:


Note the additional applications that will be installed:


Modify the Installation folder or Log-file folder locations if necessary:


I usually don’t change these locations because I believe that with proper monitoring put in place, we should be able to have the log files on the same installation folder drive rather than provision a new drive that doesn’t add any performance benefit in a virtualized environment because it’s probably going to be on the same LUN anyways.  Servers these days also don’t come to a grinding halt if the system drive fills up.

Review the summary and continue with the install:





Proceed with entering the appropriate information for your SQL server and note that you can leave the default database name because the old BES 5 default database name is BESMgmt while the new BES 10 is BDSMgmt:



The installer will detect that the database does not exist and will ask whether one should be created:


Note the status for the creation of the database at the bottom:


Provide a name for the BlackBerry Device Service:


Proceed by entering the required CAL and SRP keys:


I found the information I received from my free BES 10 trial email a bit confusing because there was no SRP key.  After doing a bit of searching, I realized that the:

CAL key = CAL Authentication Key

SRP Identifier = Serial Number

SRP authentication key = License Key



Ensure you use the Verify button to verify that the BES 10 server can get out via port 3101 (SRP):


… and that the keys used for the install are valid: 


Unless there is a reason to change the port numbers, leave them as defaults:


Enter the service account credentials:


Choose the authentication method and/or account you would like to log into the BlackBerry Device Service:


Click Next to start the service:





Note the BlackBerry Administration Service address and the BlackBerry Web Desktop Manager address and close the install wizard:


Verify BlackBerry Device Service SQL Database

Refreshing the database list on the SQL server should show the new BDSMgmt database created:


Note the database files created in the folder:

BDSMgmt.ldf – 25,600 KB

BDSMgmt.mdf – 102,400 KB


One of the items suggested after the install is to verify that the collation setting for the BlackBerry Configuration Database is default case-insensitive:


For those who aren’t familiar with SQL collation, a list can be found here:


Note the collation settings for the BDSMgmt database:



Verify Health of BlackBerry Device Service

Ensure that all the services have been started:


Review the Application and System logs to ensure there aren’t any unexpected errors or warnings:


Open up a browser and navigate to: http://<besServerName>:8080 to test the BlackBerry MDS Connection Service service:


If you’ve tested the SRP connection during the install and nothing on the firewall has been changed, you can skip this SRP test step but if you want to ensure the server is able to get out 3101, navigate to the following folder via the command prompt:

C:\Research In Motion\BlackBerry Enterprise Service 10.0.0\bundle0030\Modules\BDS\tools

… and execute the following:

bbsrptest.exe -host 3101

An output similar to the following will be displayed:

C:\Research In Motion\BlackBerry Enterprise Service 10.0.0\bundle0030\Modules\BDS\tools>

bbsrptest.exe -host 3101

Attempting to connect to (, port 3101

Sending test packet

Waiting for response

Receiving response

Checking response


C:\Research In Motion\BlackBerry Enterprise Service 10.0.0\bundle0030\Modules\BDS\tools>


Log into the BlackBerry Administration Service via the URL: https://<BlackBerryServerName>/webconsole/login:


Note how the interface hasn’t changed much:


Remove Unneeded Permissions for Besadmin

Remove the dbcreator role from the besadmin account:



Note that on page 41 under the heading:

Configure minimum database permissions for theservice account or Microsoft SQL Server account

… the guide instructs us to remove db_owner and grant only public and rim_db_bes_server role membership to the BDSMgmt database:


I tried this but received the error:

Drop member failed for DatabaseRole ‘db_owner’.


I don’t think it’s a big deal to leave the permissions as long as it is no longer a dbcreator on the database server.


Finish off the install by creating a new user on the server to verify that the server can communicate to the SQL database and then activate the user:


I hope this post gives anyone who is looking for something that shows what the process of install Blackberry Device Service looks like.


Unknown said...

Great post Terence! I liked the way you have simplified the setup step by step.

We are planning to upgrade our BES v5 soon as one of the Mobile service provider here (UK) are offering MVS (Mobile voice service) which I believe integrates well with BES v10. For more info -



Kaita said...

Excellent document. really helpful for most of the administrators who are new to the BES 10.

Did you get change to install UDS ::)-

Anonymous said...

Awesome! Thank you very much! I was able to follow your directions with no issues! Thank you again :)


Dan said...

Thanks! Do you know if there will be any issues if my SQL 2012 server is a VM?

Dan said...

What are your thoughts about installing the BDS and BMS on separate VM's vs on teh smae one?

Anonymous said...

Don't forget to create an Email Profile using Active Sync(should be the last step).... I followed everything other step and you were right on the money. Thank you!!!

Anonymous said...

Your instructions were a great addition to the documentation suppied by BlackBerry.

I've managed to get the whole thing installed and I am able to log into the webcole, everything appears in order. However, when I try to add a device I get the following error, "The BlackBerry® Administration Service cannot connect to the external directory."

Anyone else experience this error? I can't search for users and therefore I can't add devices.

John Michle said...

Its really good to know about that the procedure given in detail and the other facts relating to the point given here are quite considerable and efficient as well would be better idea to look for more of that kind for having better and efficient results.

Construction Service Management Software

OluSegun Babs said...

This is an excellent document Terence and i really appreciate you on the details of this work, I already have a BES 10.2.1 installed(BDS and UDS on same box) (DB on a seperate SQL server cluster).
I am currently looking for a document for the installation of BES 10.2 DR

Anonymous said...

thank you mate work for me :)

Anonymous said...

this might be a dumb question, but does BES 10.2.0 work with server 2012R2 and exchange 2013?