planning your blackberry enterprise service 12 environment ... · planning your blackberry...

Participant Manual

Planning your BlackBerry Enterprise Service 12 environment

716-60280-123

Published: 2015-10-22SWD-20151022151354264

ContentsMaterials and resources................................................................................. 5

Topics covered.................................................................................................................................... 5Course resources................................................................................................................................ 5Product documentation.......................................................................................................................5Training curriculum............................................................................................................................. 8

Identifying your organization's needs..............................................................9Activity: Who am I?............................................................................................................................ 10Steps to plan your BES12 environment.............................................................................................. 13Discussion: Why should you use the steps for planning your BES12 environment?.............................. 14Identifying your organization's needs................................................................................................. 16Activity: Identifying the organization's needs ..................................................................................... 24Reviewing BES12 requirements.........................................................................................................28Activity: Identify whether BES12 can be supported............................................................................ 33Review: Identifying your organization's needs.................................................................................... 35

Designing a deployment plan....................................................................... 37Designing a deployment plan for BES12............................................................................................ 38Installing or upgrading to the latest version of BES12......................................................................... 39Planning tools................................................................................................................................... 44Activity: Planning a large BES12 installation.......................................................................................46Upgrading from BES10 to BES12.......................................................................................................47Upgrading from BES5 to BES12.........................................................................................................50Upgrading from BES5 and BES10 to BES12.......................................................................................62Activity: Identifying advantages and disadvantages of a deployment plan........................................... 63Activity: Choosing how to deploy BES12.............................................................................................65Review: Designing a deployment plan................................................................................................ 67

Supporting the deployment.......................................................................... 69Discussion: Installation and upgrade issues....................................................................................... 70Creating a deployment support plan.................................................................................................. 71Review: Supporting the deployment...................................................................................................74

Answers.......................................................................................................75Activity: Who am I?............................................................................................................................ 75Discussion: Why should you use the steps for planning your BES12 environment?.............................. 75Activity: Identify whether BES12 can be supported............................................................................ 76Activity: Identifying the organization's needs ..................................................................................... 77Review: Identifying your organization's needs.................................................................................... 78Activity: Planning a large BES12 installation.......................................................................................79Activity: Planning an upgrade from BES5 to BES12............................................................................ 80Activity: Identifying advantages and disadvantages of a deployment plan........................................... 82Activity: Choosing how to deploy BES12.............................................................................................82Review: Designing a deployment plan................................................................................................ 83

Discussion: Installation and upgrade issues....................................................................................... 84Review: Supporting the deployment...................................................................................................84

Glossary.......................................................................................................87

Legal notice................................................................................................. 89

Materials and resourcesTopics covered

Module title Time

Identifying your organization's needs 60 minutes

Designing a deployment plan 90 minutes

Supporting the deployment 30 minutes

Course resourcesCourse Resources

716-60280 - Planning your BlackBerry Enterprise Service 12 environment

The following documents, used as course material, are included in the participants kit:

• 716-60280 Planning your BES12 environment - Participant Manual

Product documentation

Resource Description

Overview and what's new • Introduction to BES12 and its features• Finding your way through the documentation• Architecture• Descriptions of BES12 components• Descriptions of activation and other data flows, such as configuration

updates and email, for different types of devices

Materials and resources

5


Architecture and data flows

• Descriptions of BES12 components• Descriptions of activation and other data flows, such as configuration

updates and email, for different types of devices

Release notes and advisories

• Descriptions of known issues and potential workarounds

Installation and upgrade • System requirements• Planning BES12 deployment for an installation or an upgrade from BES5 or

BES10• Installation instructions• Upgrade instructions

Licensing • Instructions to obtain, activate, and manage licenses

Configuration • Descriptions of different types of licenses• Instructions for activating and managing licenses• Instructions for how to configure server components before you start

administering users and their devices• Instructions for migrating BES10 data from an existing BES10 database

Administration • Basic and advanced administration for all supported device types, including BlackBerry 10 devices, iOS devices, Android devices, Windows devices and BlackBerry OS (version 5.0 to 7.1) and earlier devices

• Instructions for creating user accounts, groups, roles, and administrator accounts

• Instructions for activating devices• Instructions for creating and assigning IT policies and profiles• Instructions for managing apps on devices• Descriptions of profile settings• Descriptions of IT policy rules for BlackBerry 10 devices, iOS devices,

Android devices, Windows devices and BlackBerry OS (version 5.0 to 7.1) and earlier devices

Security • Description of the security maintained by BES12, the BlackBerry Infrastructure, and BlackBerry 10 devices to protect data and connections

• Description of the BlackBerry 10 OS• Description of how work data is protected on BlackBerry 10 devices when

you use BES12• Description of the security maintained by BES12, the BlackBerry

Infrastructure, and iOS, Android, and Windows devices activated on BES12 to protect data at rest and in transit

• Description of how work space apps are protected on work space-enabled devices when you use BES12


6


Compatibility matrix • List of supported operating systems, database servers, browsers, and mobile operating systems for the BES12 server

• List of mail servers for BES12 Secure Work Space• List of supported Samsung KNOX operating systems• List of supported Android for Work operating systems• List of mail servers for BlackBerry 10 OS


7

Training curriculumTo browse a catalog of self-guided courses, see the BES12 web-based training. To browse the available hands-on labs, visit http://global.blackberry.com/en/support/blackberrytraining/Labs.html. To find a BlackBerry Authorized Training Partner in your area, visit BlackBerry Learn at http://www.blackberry.com/training/.


8

http://help.blackberry.com/detectLang/bes12-web-based-training/

http://global.blackberry.com/en/support/blackberrytraining/Labs.html

http://www.blackberry.com/training/

Identifying your organization's needsObjectives

By the end of those module, you should be able to:

• Describe the steps you will take to create an overall deployment plan for your organization• Determine what you need to document and why• Determine your organization's needs and goals• Determine whether sample environments meet the system requirements for BES12 and what you

need to do to meet them

Activity: Who am I?Take 5 minutes to identify the BES12 components described in the following questions. You can use the BES12 Architecture and Data Flows Reference Guide as a reference.

1. I contain user account information and configuration information used by BES12 to manage devices.

2. I'm an optional BES12 component that connects to the BlackBerry Infrastructure. My primary ports are 3101 and 3102.

3. I'm a web-based user interface used to manage users, devices, and component settings in BES12.

4. I perform all of the steps required to move a user’s BlackBerry 10 device to a new instance when the instance they are assigned to is not working.

5. I'm responsible for providing notifications to iOS devices that are using Secure Work Space.

demo activity

lab

review

Identifying your organization's needs

10

http://docs.blackberry.com/67268/

6. I am an optional component that allows BlackBerry OS device users to connect with your organization's instant messaging server.

7. I monitor BlackBerry OS management components and restart them if they stop responding.

8. I compress, encrypt, decompress, and decrypt data that passes between BlackBerry OS devices and BES12.

9. I'm responsible for making sure that you get your email on BlackBerry OS devices.

10. I synchronize organizer data between BlackBerry OS devices and your organization's mail server using the BlackBerry Messaging Agent.

11. I allow users to manage their own BlackBerry OS devices.


11

12. I allow users to manage their own BlackBerry 10, iOS, Android, and Windows Phone devices.


12

Steps to plan your BES12 environmentWhen you deploy BES12 in your environment, you perform the following actions:

Step Action

Identify your organization's needs.

Review BES12 requirements.

Design a deployment plan.

Support the deployment.


13

Discussion: Why should you use the steps for planning your BES12

environment?Discuss the following questions:

1. Why is it important to understand your current environment?

2. Why is it important to have a deployment plan, and what do you think could be impacted if you don't have one?

demo activity

lab

review


14

3. Why is it important to design a deployment support plan?


15

Identifying your organization's needsPart of planning for BES12 is to document your organization’s current environment and consider what you want BES12 to provide for your organization. Using this information, you can figure out what your organization must do to get from your current environment to an implementation of BES12 that meets your needs.

When identifying your organizations needs you have to consider; EMM solution, users, devices, device control, security, licenses, databases, high availability, hardware, network, support, apps, additional software, and your budget.

To help you identify your organization's needs, see the Compatibility matrix and download the Performance calculator.

EMM solutionYour organization's current environment

Considerations for BES12 What you need

Do you currently have another EMM solution from BlackBerry (BES5, BES10, or BES12), an EMM solution from another vendor, or no previous EMM solution?

Knowing which EMM solution you already have helps you identify whether you should plan for an installation or upgrade:

• If your organization's network already has an EMM solution from BlackBerry, you can upgrade to the latest version of BES12.

• If you have no previous EMM solution from BlackBerry, you can install a new instance of BES12.

After you know the type of BES12 deployment you need, you can determine the requirements to implement it.

If you are upgrading from BES5, the software must be at BES5 version 5.0.4 MR10 or later.

If you are upgrading from BES10, the software must be at BES10 version 10.2.3 or later.

UsersYour organization's current environment


You should gather the following information about your organization’s users:

• How many users

• How technically savvy they are

• Whether any users have more than one device

You can download the Performance calculator and use it to determine how many instances of BES12 are required to handle the number of users in your organization.

Knowing the level of technical expertise of your users helps you tailor the activation email they receive, if they activate their own devices using BES12 Self-Service.

You may need to obtain more computers to handle a large number of users.


16

http://help.blackberry.com/detectLang/bes12/12.3/compatibility-matrix/

https://help.blackberry.com/detectLang/bes12/current/performance-calculator-zip/




DevicesYour organization's current environment


Determine which types of devices the current EMM solution in your organization manages:

• Number and types of devices (BlackBerry 10 OS, BlackBerry OS, iOS, Android, and Windows Phone)

• The models and software versions of the devices

To determine which configuration of BES12 instances you require to support the various device types, see the Compatibility matrix and download the Performance calculator. You can determine whether any users must upgrade their hardware or software so that their devices work with BES12.

Your users may need to upgrade or change their device hardware, or upgrade their device software.

iOS and Android devices must have the latest version of the BES12 Client before they can function on BES12.

You may need to obtain more computers to handle the number and types of devices.

Device controlYour organization's current environment


Find out about the level of control your organization currently has over your users’ devices.

When you know the level of control your organization currently has over users’ devices, you can decide whether you want to maintain that level, change it, or implement it differently. For example, do you want:

• Separate personal and work spaces

• The ability to wipe the devices remotely

• To implement a bring-your-own-device (BYOD) policy

This helps you determine whether you need Secure Work Space for iOS and Android devices and BlackBerry Balance for BlackBerry 10 devices.

You may need to obtain new licenses or new types of licenses.


17




SecurityYour organization's current environment


How is security for devices and EMM implemented in your organization’s environment?

Beyond device security, you should determine the level of security that your organization requires for your installation of BES12.

If your organization’s business is regulated, you may require a DMZ, firewall, TCP proxy server, or the BlackBerry Router. You can install the BlackBerry Router and BES12 in a DMZ. You may require more computers to install these components.

LicensesYour organization's current environment


Gather information about your organization’s existing BlackBerry licenses, such as the types and number of licenses.

Determine the types of licenses your organization needs for BES12. Consider the types of devices supported by your organization and the level of control you want over devices.

Determine how many licenses you require. Every activated device uses a single license.

Determine whether you want to buy licenses from BlackBerry (or a BlackBerry partner) or from your service provider as part of your current service agreement.

Obtain BES12 licenses. Depending on your current licenses, your level of technical support, and current licensing promotions, you may be able to claim some licenses for BES12.

Perpetual licenses are valid only for the version of BES12 that they are issued for. If your BES12 domain includes perpetual licenses, obtain and activate perpetual licenses for the version of BES12 that you are upgrading to. For more information, visit support.blackberry.com/kb to read article KB36805.

DatabasesYour organization's current environment


If you have an EMM solution from BlackBerry, make sure that you know the names and locations of the databases. (For example, the default name for the BES10 BlackBerry Configuration Database is BDSMgmt).

BES12 handles roles differently than BES5. BES12 allows only one role for each user, and BES5 allows multiple roles for each user. BES12 requires an entire role to be assigned to one, some, or all groups. BES5 allows each privilege

If you are upgrading from BES5 to BES12, you must review the BES5 roles to remove any conflicting privileges, otherwise the BES12 setup application stops when it tries to resolve the roles.


18

http://support.blackberry.com/kb


Your organization's current environment


within a role to be assigned to one, some, or all groups.

To migrate BES10 users, devices, IT policies, profiles, and groups to BES12, defragment the indexes of the BES10 BlackBerry Configuration Database and the BES10 Management Database before you begin migration.

To migrate BES12 users, devices, IT policies, and profiles to another BES12 database, defragment the indexes of both databases before you begin migration.

If you are upgrading from BES10 to BES12, perform defragmentation tasks on the BES10 BlackBerry Configuration Database, the BES10 Management Database, and the BES12 database (if one exists) before you start the migration process. If you are migrating a large number of users, you should defragment the BES12 database after you migrate each group of users.

High availabilityYour organization's current environment


Is your organization’s current EMM solution set up for high availability?

To determine if your organization requires multiple BES12 instances to support high availability, think about whether:

• Users can tolerate some interruptions in service, or if they require minimal service interruptions while you resolve server issues or perform upgrades

• Your organization wants to load-balance user and device data across multiple BES12 instances

• Your organization wants to retain database service and data integrity if issues occur with the BES12 database

Install more than one BES12 instance to create a high availability configuration, and configure database high availability using Microsoft SQL Server features.


19

HardwareYour organization's current environment


What hardware do you already have? For example:

• The number of computers

• The specifications of these computers (processors, RAM, hard disk)

• Any application servers

Do you use monitoring tools?

Use the information in this Planning section, see the Compatibility matrix and download the Performance calculator to determine whether your organization has:

• Enough disk space to install BES12

• Hardware that can provide the level of performance your organization needs

• Hardware limitations, to identify whether you are limited to a single-server installation or if a multiple server installation is possible

• Whether you can use some or all of your existing hardware for BES12

There are many tools that you can use for monitoring various aspects of BES12:

• Windows Event Viewer

• System logging (Syslog)

• BES12 performance counters

• BES12 Resource Kit

• Performance calculator

• BES12 Dashboard

You can also use third-party SNMP tools to monitor the activity of the BES12 Core.

If your existing computers do not meet your organization’s needs for BES12, you may need to add or upgrade computers.

For more details on SNMP monitoring with BES12, see the Configuration content.


20





http://help.blackberry.com/detectLang/bes12/12.3/configuration/


NetworkYour organization's current environment


Identify known network issues such as latency and determine the overall network performance.

Document the top-level architecture of the network, for example:

• Does it have multiple domains?

• How many instances of an EMM solution from BlackBerry and where are those servers located?

• Does your network use a proxy server?

Do you need to increase the network’s overall performance?

Do you need to consolidate domains?

If your network has servers from a single domain in multiple regions, it is possible that a user from one region might get moved to a server in another region during an upgrade to BES12. Performance issues may result, for example, if a user in the United States is on a BES12 instance in the United Kingdom.

If your organization requires a proxy server, install a BlackBerry Router in the BES12 domain, or use a TCP proxy server that is already installed in your environment.

Installing BES12 to a mapped network drive is not supported.

BES12 components support only IPv4 for TCP/IP connections.

To manage BlackBerry OS (version 5.0 to 7.1) devices from BES12, you must observe the same MAPI latency restrictions with your BES12 as you do with your BES5.

Consolidate domains before installing BES12, because it is not possible to move users from one BES12 domain to another in this release of BES12.

You can make sure that users stay in a specific region by creating a dedicated BES12 domain for each region.

If you decide to install a proxy server or a BlackBerry Router in a DMZ, you must set up both an internal and an external firewall.

SupportYour organization's current environment


Consider your current support structure and needs. For example:

• Does your organization have an in-house support team and an in-house development team for writing and porting apps?

• Are most users mobile workers who rely on their devices to do much of their work (critical resources) or

Do you need to change your support organization at all to accommodate BES12?

Document new tasks for the support organization.

Training for the support organization.


21



are the devices more of a “perk” of the business?

• Do users activate their own devices?

AppsYour organization's current environment


Take stock of the apps currently used in your organization. Depending on the answers, the types of apps can have implications for several areas, including software development, security, and network capacity. Some considerations are:

• Custom apps that might need to be ported to other device types

• Required or optional apps

• Secured apps

• Plans for apps to add to your EMM environment

Find out which apps your users consider important.

App assignments cannot be moved from BES10 to BES12.

Plan for software development to:

• Port custom apps to other device types

• Secure apps

• Develop new custom apps

Make sure that any required apps are added to BES12 before moving users and devices.

Extra softwareYour organization's current environment


Does your organization use instant messaging?

Beyond basic EMM features, your organization may require other software, such as:

• A dedicated enterprise instant messaging solution

• Special VPN requirements or network requirements

• To support enterprise instant messaging, you must install BES12 version 12.1 or later.

• BES12 supports BlackBerry Collaboration Service 12. If you have a supported instant messaging server in a BES12 environment, you can install BlackBerry Collaboration Service 12.


22



• Productivity tools that work with devices that can be deployed to the users' desktops or laptops

For more information about planning your installation, hardware requirements, installation instructions, and additional tasks after installing BlackBerry Collaboration Service 12, see the BlackBerry Enterprise IM for BES12 content.

BudgetYour organization's current environment


What is the budget for your current EMM solution and devices?

Your organization’s budget for the BES12 installation has an impact on several areas, including:

• Determining how much BYOD to allow

• Whether you need to start with a scaled-back solution, with plans for growth, or if you can afford to accommodate all your requirements right away

• How you can use policies, profiles, and groups to help reduce roaming charges and data costs

• Which types of licenses to buy

Plan for phased implementation.

Plan IT policies, profiles, and groups.

Buy appropriate licenses.


23

http://help.blackberry.com/detectLang/enterprise-im-for-bes12



Activity: Identifying the organization's needs

Given the following scenarios, identify the organization's needs and requirements if they want to deploy BES12.

You can use the following resources:

• BES12 Compatibility matrix• BES12 Configuration content• BES12 Installation and upgrade content• BES12 Licensing content• BES12 Preinstallation checklist

1. Catering Co.

Catering Co. has decided to deploy BES12 in their office environment. They currently have 1,250 employees distributed over three different buildings. They have done some of the basic documentation of their current environment and have hired you to plan their deployment for them. Users are a mixed group. Administrative assistants, chefs, pastry chefs, servers, and drivers are new to using smart devices, while the senior executives, sales executives, and IT departments contain a large number of users who are technologically savvy.

Given the following information, develop a plan that would meet their needs.

• The IT department is required to test all platforms, software updates, and app deployments, so they require 5 testing devices of every device type for the team, plus a BlackBerry 10 device for each team member for their own personal use

• All other employees can have only 1 device and it must be on the supported list of devices below so they can manage the recipes, work orders, and delivery schedules with the Catering Co. apps.

• BlackBerry Q10

• BlackBerry Passport

• iOS tablet

• Android tablet

• Catering Co. wants to keep work and personal data separate regardless of whether the device was provided by Catering Co. or whether the users brought their own device.

• Catering Co. wants to use a proxy server or router in the environment to increase network security.

• Reliability and redundancy is important to Catering Co.

• The organization is open to deploying virtual servers

demo activity

lab

review


24



http://help.blackberry.com/detectLang/bes12/12.3/installation-and-upgrade/

http://help.blackberry.com/detectLang/bes12/12.3/licensing/

http://help.blackberry.com/detectLang/bes12/12.3/installation-and-upgrade/preinstallation-and-preupgrade-checklist.html

Users

• Senior Executives: 15

• Administrative Assistants: 85

• IT Department: 50

• Chefs: 300

• Pastry Chefs: 100

• Drivers: 150

• Servers: 400

• Sales Executives: 150

Apps

All apps have been developed in-house and tested for all the device types on the supported list. Apps include:

• Delivery schedule app

• Recipe app

• Work order app

Software

• Microsoft Exchange Server 2013

Hardware

• All current servers are physical hardware running 16 GB of RAM, plenty of spare hard disk space and quad core processors

Answer the following questions:

1. How many devices do they need to support in total?

2. What type, and how many licenses do they need?

3. Is there anything special they have to do to deploy their apps?

4. Does the organization meet the minimum requirements to install BES12 and support their current needs?

5. What other information do you have to start planning a deployment?

6. What about the organization's future needs?

7. What would you recommend to this organization? Why?


25

2. Financial Co.

Financial Co., wants to install BES12. They have already purchased BlackBerry 10 devices for all of their current employees and want a high level of control and security on these devices, to meet industry regulations.

Given the following information, determine what their BES12 solution requirements are:

• Financial Co. has 250 employees

• All devices must be activated with a "Work and personal - Regulated" activation type. This allows the employees to have a personal space, but for the organization to track what a device is used for.

• No computer hardware has been purchased.

• They have a single Microsoft Exchange Server, running Windows Server 2012 that acts as email, application, and Microsoft Active Directory server.

• They plan to expand to 500 employees in the next six months, and all require devices managed by BES12. The new employees will be located in a new office building.

Users

• 250 users, expanding to 500 in six months

Devices

• Current devices: 250 BlackBerry 10 devices

Licenses

• All BlackBerry 10 devices will be activated with the "Work and personal - Regulated" activation type

Software

• Windows Server 2012 acting as the Microsoft Exchange Server, mail server, application server, and Active Directory server

Apps

• No specific app requirements

Answer the following questions:

1. What type, and how many, licenses will they need?

2. Does the organization meet the minimum requirements to install BES12 and support their current needs?


26

3. Will their current software support their growth?

4. What other information do you need to start planning a deployment?

5. What would you recommend to this organization? Why?


27

Reviewing BES12 requirementsBES12 requirements for hardware depend on the size of your environment. BES12 also has requirements for third-party software compatibility.

Hardware requirementsTo determine the CPU and disk space requirements for BES12, you must consider the number of devices that you plan to activate, the type of connection that devices use, and the level and type of user activity on devices. For more information about calculating hardware requirements for a BES12 environment, download the Performance calculator.

The following guidelines apply to a BES12 environment that supports email messages and app downloads. The environment can include BlackBerry 10, BlackBerry OS (version 5.0 to 7.1), iOS, Android, and Windows Phone devices.

Hardware requirements for up to 1000 devicesFor up to 1000 devices, install BES12 and Microsoft SQL Server or Microsoft SQL Server Express (and optionally BES5 version 5.0.4 and the BlackBerry Administration Service) on one computer. A domain of this configuration can have a maximum of 1000 devices. The total of 1000 devices can include up to 500 BlackBerry OS (version 5.0 to 7.1) devices.

Server Requirement

BES12 and Microsoft SQL Server or Microsoft SQL Server Express (and optionally BES5 version 5.0.4 and the BlackBerry Administration Service)

• One processor, Quad Core, 2.7 GHz (4 cores) or 4 vCPU

• 12 GB of available memory

• 64 GB of disk space

Hardware requirements for up to 5000 devicesFor up to 5000 devices, install BES12 and optionally BES5 version 5.0.4 on one computer. Install Microsoft SQL Server on a separate computer. If you installed BES5 version 5.0.4, install the BlackBerry Administration Service on a separate computer.

One instance of this configuration can support up to 5000 devices, of which 2000 can be BlackBerry OS (version 5.0 to 7.1) devices. The best practice is to have a maximum of 1000 BlackBerry OS (version 5.0 to 7.1) devices.

You can have multiple instances of BES12 (including BES5 components) and multiple instances of the BlackBerry Administration Service. Multiple instances of BES12 require increased database CPU and memory. The best practice for this configuration is to have a maximum of eight BES12 instances.

The computers that BES12 are on must be physically located near the computer with the Microsoft SQL Server database. If BES5 version 5.0.4 components are installed on any computers, they must be physically located near the mail and messaging computers. The computers with the BlackBerry Administration Service must be physically located near the computer with the Microsoft SQL Server database.


28

http://help.blackberry.com/detectLang/bes12/current/performance-calculator-zip/

http://help.blackberry.com/detectLang/bes12/current/performance-calculator-zip/

Server Requirement

BES12 (and optionally BES5 version 5.0.4 with up to 2000 BlackBerry OS (version 5.0 to 7.1) devices)

• Two processors, Quad Core, 2.7 GHz (8 cores) or 8 vCPU



Microsoft SQL Server For 5000 devices:




For 40,000 devices:



• 64 GB of disk space, 600 IOPS throughout

BlackBerry Administration Service (optional)




Hardware requirements for up to 25,000 devicesFor up to 25,000 devices, install BES12 and Microsoft SQL Server on separate computers. The total of 25,000 devices can include any mix of BlackBerry 10, Android, iOS, and Windows Phone devices.

Additional features and configurations create more connections and sessions between devices and the BES12 instances, which limits the number of devices that one instance can support. To support more devices, add more instances of BES12. You can download the Performance calculator and use it to determine the minimum number of BES12 instances for your device configuration and workload.

The computers that BES12 is installed on must be physically located near the computer with the Microsoft SQL Server database. The BES12 computers do not need to be near the mail and messaging computers.

Server Requirement

BES12 • Two processors, Quad Core, 2.7 GHz (8 cores) or 8 vCPU



Microsoft SQL Server • One processor, Dual Core, 2.7 GHz (2 cores) or 2 vCPU




29


Hardware requirements for up to 150,000 devicesFor up to 150,000 devices, install multiple instances of BES12 and optionally, multiple instances of BES5 version 5.0.4, and the BlackBerry Administration Service.

One instance of BES12 can support up to 25,000 BlackBerry 10, iOS, Android, and Windows Phone devices.

Additional features and configurations create more connections and sessions between devices and the BES12 instances, which limits the number of devices that one instance can support. To support more devices, add more instances of BES12. You can download the Performance calculator and use it to determine the minimum number of BES12 instances for your device configuration and workload.

The computers that BES12 is installed on must be physically located near the computer with the Microsoft SQL Server database. The BES12 computers do not need to be near the mail and messaging computers.

One instance of BES5 version 5.0.4 can support up to 2000 BlackBerry OS (version 5.0 to 7.1) devices. The computers with the BlackBerry Administration Service must be physically located near the computer with the Microsoft SQL Server database.

Server Requirement

BES12 Install enough instances of BES12 to support the number of devices.




BES12

management console only

Each computer that hosts only the management console can support a maximum of 20 administrators in a domain of up to 150,000 devices. (In smaller domains, each computer can support more administrators.) To support up to 20 administrators on each computer in this configuration, disable the management console on the computers that host the BES12 Core. The latency between the computers that host the management console instances and the computers that host the BES12 Core and database instances should be no more than 50 ms.




BES5 version 5.0.4 Install as many BES5 instances as required to support the number of devices, up to a maximum of 50 pairs of BES5 servers, which can be regionally distributed and must be physically located near the applicable mail and messaging computers.

BlackBerry Administration Service (for BES5 version 5.0.4)

Up to six BlackBerry Administration Service instances, which must be physically located near the computer with the Microsoft SQL Server database.

Microsoft SQL Server • Two processors, Hex Core, 2.7 GHz (12 cores) or 12 vCPU


• 64 GB of disk space, 2200 IOPS for 150,000 devices


30


Hardware requirements: BlackBerry RouterThe following requirements apply to the computer that you install a standalone BlackBerry Router on.

Number of activated devices Requirement

1 to 150,000 • One processor, Quad Core, 2.7 GHz (4 cores) or 4 vCPU



Third-party software requirementsFor more information about which third-party software is compatible with BES12, see the Compatibility matrix.

Additional BES12 requirementsBES12 has some specific software requirements to be aware of.

BlackBerry Secure Connect PlusIf your BES12 domain will support more than 1000 devices per server using BlackBerry Secure Connect Plus at the same time, you must install Windows Server 2012 R2 or later on the computers that host BES12.

Log filesThe size of log files for BES12 varies based on the number of devices in your organization's environment, the level of user activity on devices, and the logging levels that BES12 uses. It is a best practice to monitor and control the amount of disk space that the BES12 log files take up. For more information about configuring logging, see the Administration content.


31


http://help.blackberry.com/detectLang/bes12/12.3/administration/

Understanding scalability requirementsScalability is the ability of the BES12 solution to grow, keeping pace with the growth of your organization, by adding extra instances of BES12 to your environment.

For example:

Financial Co. is a small organization of 750 employees with less than 1,000 devices in use across the entire organization. Financial Co. currently uses a single BES12 instance to manage these devices.

Financial Co. acquires another organization consisting of two offices. Remote office A has 500 users with 750 devices and remote office B has 1500 users with 3000 devices.

The current computer that hosts BES12 already has the maximum amount of memory installed and does not meet the minimum requirements for this larger number of users and devices. In order to support these new users, Financial Co. must either upgrade to new hardware or install more computers.

Financial Co. can install more instances of BES12, in the same domain, to help manage all of the new users and devices. By installing another instance or instances, Financial Co. can still manage all users and devices from one console and the workload is automatically distributed across all BES12 instances.

For more information on using multiple instances and load-balancing, visit help.blackberry.com to see the Configuration content.

For more information about using multiple instances and load balancing, see the Configuration content.


32



Activity: Identify whether BES12 can be supported

Use the following resources to determine whether BES12 can be supported in the following environments.

• This participant manual• BES12 Compatibility matrix• BES12 Preinstallation checklist

1. An organization that uses LDAP with simple bind authentication and SSL

2. An organization that uses Microsoft Exchange Server 2007 SP3 with Exchange ActiveSync 12.1

3. An organization that has several Android devices running OS 2.2.

4. An IT group that has installed Windows Internet Explorer 8.0 (32-bit) to use with the BES12 management console.

5. An organization's environment that includes:

• Windows Server 2012 (32-bit)



demo activity

lab

review


33



• Microsoft SQL Server 2012 (32-bit)

• Microsoft .NET Framework 4.5

• Microsoft IIS 8.0

6. An environment that will support 2,500 devices. It includes:

• Windows Server 2012 (64-bit) and Microsoft SQL Server 2012 (64-bit) installed on the same server:




34

Review: Identifying your organization's needs

1. List the three stages of planning your BES12 environment.

2. True or false. BES12 supports installation on a 32-bit operating system.

3. Why is it important to understand your organization's needs?

4. True or false. The type of licenses your organization requires depends on how much control over the device they need.

5. When identifying app requirements for your organization, you should consider which of the following:

• Whether there are custom apps that might need to be ported to other device types

• Whether apps are required or optional

• Whether you need to secure apps for iOS or Android device with Secure Work Space

• All of the above

6. True or false. Users don't have to upgrade their device OS regardless of what type of device or what version of OS they have.

demo activity

lab

review


35

Designing a deployment planObjectives


• Identify the upgrade options available and how to choose the best one for your environment• Determine whether you are doing a new installation or an upgrade in your environment• Develop a deployment plan for a sample environment

Sim

ple

Designing a deployment plan for BES12You can deploy BES12 in your organization’s environment in several ways, depending on whether or not you have other EMM solutions from BlackBerry installed. You can install BES12 if your organization has:

• BES12

• BES10

• BES5

• no other EMM solutions from BlackBerry

Note:

• You cannot install BES12 on a computer that has both BES5 and BES10 installed on it.

• You cannot install BES12 on a computer that has the BlackBerry Cloud Connector installed on it.

Follow the instructions in Steps to install BES12 to install BES12. Follow the instructions in Steps to upgrade BES12, Steps to upgrade from BES10 to BES12, or Steps to upgrade from BES5 to BES12 to upgrade to the latest version of BES12. After the installation is complete, see the Licensing content and the Configuration content to finish setting up your BES12.

Designing a deployment plan

38




Installing or upgrading to the latest version of BES12The BES12 setup application upgrades the BES12 software and database to the latest version of BES12.

Special situationsNot all installations are covered by the standard deployment plan. You may also have to make additional plans if you:

• Plan to install the BES12 management console or BES12 Core on a separate computer

• Are upgrading a BES12 domain that is configured for high availability

• Have a large number of users and devices and require multiple SRPs

• Have a domain with multiple instances of BES12 and need to take into consideration load-balancing data

Multiple SRPsBES12 enterprise connectivity traffic for BlackBerry 10 devices includes email, organizer data, and browser network traffic. All of this traffic flows from the BlackBerry Dispatcher (one for each BES12 instance), to the active BlackBerry Affinity Manager within the BES12 domain, to the BlackBerry Infrastructure, and then to the device. In the path between the BlackBerry Affinity Manager and the BlackBerry Infrastructure, network conditions such as latency, packet loss, and packet reordering reduce the rate at which data can be transmitted over a single TCP connection due to the nature of the TCP/IP protocols.

Adding SRPs allows the BlackBerry Affinity Manager to establish multiple connections to the BlackBerry Infrastructure, known as SRP connections. Each connection must have an SRP ID associated with it. By having multiple connections, you can compensate for these network effects by reducing the amount of data each connection must carry between the BlackBerry Affinity Manager and the BlackBerry Infrastructure. The BES12 Configuration Tool helps estimate how many SRP connections you need for your particular domain size and network conditions.

It is a best practice to establish the correct number of SRP connections before you install BES12, to allow for a good distribution of BlackBerry 10 devices across the SRP connections. BlackBerry 10 devices are statically assigned to the least loaded SRP connection during activation. If an extra SRP connection is added later, new devices are assigned to the new SRP connection when they are activated until the new SRP connection reaches the same load as the other SRP connections.

Creating or upgrading a BES12 database using CreateDBNote: You cannot upgrade a BES10 database to a BES12 database.

If your organization's security policies do not allow applications to have permissions to create or upgrade databases, you can run CreateDB on the database server to create a BES12 database or upgrade to a BES12 database instead of using the setup application. After you create or upgrade to the BES12 database using


39

CreateDB, you can run the setup application using a service account that has minimum permissions on the database server.

Installing or upgrading BES12 using the command prompt windowYou have the option of installing or upgrading BES12 using the command prompt window. If you are planning to do this, then you need to consider the following:

• Do you have sufficient permissions to run the application at the command line?

• Is your environment ready to be upgraded?

If you are installing, you may want to:

• Add the parameter --installSQL if you want to install a local Microsoft SQL Server database.

• Add the parameter --showlog if you want to see the progress of the installation on the computer screen.

If you are upgrading, you will need to change the deployer.properties file if:

• You want to use Windows authentication to connect to the database, specify the password for the Windows service account

• You want to specify the location for the database backup file

• If you do not want the BES12 services to start after the upgrade is complete

You may also may want to:

• Add the parameter --showlog if you want to see the progress of the installation on the computer screen.

BES12 high availability optionsBES12 offers the following high availability options to minimize service interruptions for device users:

High availability for...

Description For more information

The components that manage BlackBerry 10, iOS, Android, and Windows Phone devices

You can install multiple instances of BES12 to take advantage of the following features:

• Automatically move BlackBerry 10 devices to a healthy instance if there is an enterprise connectivity issue

• Manage devices using any available instance

• Use a round-robin DNS pool to ensure access to a working management console

See the Configuration content

The components that manage BlackBerry OS devices

If you upgrade from BES5 to BES12, your high availability configuration for the components that manage BlackBerry OS devices remains intact.

See the BlackBerry Enterprise Server Administration Guide.


40


http://help.blackberry.com/en/bes5-for-exchange/5.0.4/

http://help.blackberry.com/en/bes5-for-exchange/5.0.4/

High availability for...

Description For more information

The BES12 database You can use one of the following Microsoft SQL Server features to ensure uninterrupted database service if issues occur with the BES12 database:

• AlwaysOn (Failover Cluster Instances or Availability Groups) for Microsoft SQL Server 2012 or 2014

• Database mirroring for Microsoft SQL Server 2008 or 2012

If you want to use AlwaysOn, you must perform configuration tasks before you install BES12. You can configure database mirroring any time after you install BES12.

Microsoft recommends using AlwaysOn because database mirroring will be deprecated in a future version of Microsoft SQL Server.

For more information about AlwaysOn, see the Installation and upgrade content.

For more information about database mirroring, See the Configuration content .

Choose the database high availability option that is right for your organizationBefore you install BES12, decide if you want to configure high availability for the BES12 database. Database high availability allows you to retain database service and data integrity if issues occur with the BES12 database.

You can use one of the following Microsoft SQL Server features for database high availability:

• AlwaysOn Failover Cluster Instances (FCI) for Microsoft SQL Server 2012 or 2014 (Standard Edition)

• AlwaysOn Availability Groups for Microsoft SQL Server 2012 or 2014 (Enterprise Edition)

• Database mirroring for Microsoft SQL Server 2008 or 2012

If you want to use an AlwaysOn feature, you must complete configuration steps before you install BES12. This section gives you instructions for configuring database high availability using AlwaysOn.

You can configure database mirroring any time after you install BES12.

Note: Microsoft recommends using AlwaysOn because database mirroring will be deprecated in a future version of Microsoft SQL Server. Note that the AlwaysOn feature cannot be used if you upgrade from BES5 to BES12 (the BES5 database is upgraded to a BES12 database). AlwaysOn is not supported for the components that manage BlackBerry OS devices.

Upgrading a BES12 domain that is configured for high availabilityFollow these steps when you upgrade a BES12 domain that you’ve configured for high availability:

1. Identify the BES12 instance with the active BlackBerry Affinity Manager.


41





2. On each computer that hosts a BES12 instance with a standby BlackBerry Affinity Manager, stop all BES12 services and services for BlackBerry OS devices.

3. Upgrade the BES12 instance with the active BlackBerry Affinity Manager.

4. Upgrade the other BES12 instances one at a time. You do not need to restart the BES12 services and services for BlackBerry OS devices before you start the upgrade process.

Installing the BES12 management console or BES12 Core on a separate computerAfter you install BES12 on a computer, you can install the BES12 management console or BES12 Core on a separate computer. You can install BES12 components on separate computers for security reasons or if your computer has system resource limitations.

Note: You should install BES12 on one computer before you install the management console or BES12 Core on separate computers.

Installing a standalone BlackBerry RouterThe BlackBerry Router is an optional component that you can install in a DMZ outside your organization's firewall. The BlackBerry Router connects to the Internet to send data between BES12 and devices that use the BlackBerry Infrastructure.

The BlackBerry Router functions as a proxy server and can support SOCKS v5 (no authentication). For more information about installing a standalone BlackBerry Router, see the Installation and upgrade content.

If you want to configure BES12 to use a proxy server, see the Configuration content.

Note: If your current environment contains a TCP proxy server, you do not need to install the BlackBerry Router for BES12.

Installing BES12 in a DMZIf your organization's security policies require more granular control over the resources that BES12 has access to, you can install BES12 in its own DMZ.

For example, you can install the BlackBerry Router or a TCP proxy server in your organization's DMZ and install BES12 in a separate DMZ.


42



For more information about configuring BES12 when it's installed in a DMZ, see the Configuration content.

Load-balancing data for BlackBerry 10 devicesIf you install multiple instances of BES12 in the same domain, data for BlackBerry 10 devices is load-balanced equally across all healthy instances. For example, if you install three instances of BES12 and the domain includes 3000 BlackBerry 10 devices, BES12 assigns 1000 devices to each instance. Load-balancing occurs only if the domain includes more than 500 BlackBerry 10 devices.

Each BES12 instance uses the same SRP ID and connects to the same BES12 database. The components on each instance are all running and actively managing data for all device types, except for the BlackBerry Affinity Manager and BlackBerry Work Connect Notification Service. Only one instance of the BlackBerry Affinity Manager and the BlackBerry Work Connect Notification Service are active. You can view the status of each instance in the management console.

For more information about high availability and load balancing, see the Configuration content.


43



Planning toolsIn addition to all of your planning considerations, BES12 has some tools that you can use to assist you in planning your BES12 installation or upgrade:

• BES12 Readiness Tool

• BES12 Configuration Tool

• BES12 Performance Calculator

Using the BES12 Readiness ToolYou can use the BES12 Readiness Tool to check system requirements before you run the BES12 setup application. The BES12 Readiness Tool checks the following requirements:

• Proxy server setting validation

• Minimum operating system requirements

• Minimum hard disk space

• Secure connection

• SRP connection

• Required ports

• Account permissions

• Database validation

The BES12 Readiness Tool does not check for the following requirements:

• Microsoft .NET Framework 4.5

The BES12 Readiness Tool is included with the BES12 software. You can also download the tool from help.blackberry.com/BES12tools.

Using the BES12 Configuration ToolIf your organization plans to support more than 500 users, use the BES12 Configuration Tool to calculate the number of SRP IDs you require. After you install BES12, run the BES12 Configuration Tool to import the SRPs into the BES12 database before you add or migrate users. The BES12 Configuration Tool is included with the BES12 software. You can also download the tool from help.blackberry.com/BES12tools.

The BES12 Configuration Tool:

• Allows you to update or change the BES12 database properties, including:

• Microsoft SQL Server name

• Database name

• Port configuration

• Database authentication

• Windows username


44

https://help.blackberry.com/BES12tools

http://help.blackberry.com/BES12tools

• Windows password

• Allows you to calculate the number of SRP IDs required for BES12 based on the projected total number of users.

• Allows you to import extra SRP IDs into the BES12 database.

For more details on the BES12 Configuration Tool, visit support.blackberry.com/kb to read article KB36443.

For more information about obtaining and importing SRP IDs, visit support.blackberry.com/kb to read article KB36435.

Using the BES12 Performance CalculatorThe BES12 Performance Calculator is a tool used to estimate the hardware required to support a given workload for BES12.

You can use the tool to help you:

• Calculate how many instances of BES12 you should install based on your organization's device use

• Calculate how many SRP connections should be in the domain, based on your organization's hardware and database deployment

• Calculate the minimum number of connections to the BlackBerry Infrastructure for each BES12 instance based on your organization's BES12 deployment and number of devices

• Suggested WAN bandwidth based on your deployment and usage

Download the BES12 Performance Calculator.


45



http://help.blackberry.com/detectLang/bes12/12.3/performance-calculator-zip/

Activity: Planning a large BES12 installation

Financial Co. is a large organization that requires a mix of regulated and nonregulated device users in their environment. The organization's users have a wide variety of devices. They intend to install BES12 to manage all of the organization's devices.

Financial Co. has started the planning process and have made the following determinations:

• There must be at least one BES12 instance installed at all ten offices• High availability is required• A new Microsoft SQL Server database is being installed with the AlwaysOn option

The following number of users and devices must be supported:

• 25,000 users with 75,000 devices

• 35,000 BlackBerry 10 devices• 15,000 iOS devices, 10,000 require Secure Work Space• 20,000 Android devices, 15,000 require Secure Work Space• 5,000 Windows Phone devices

Given this scenario, answer the following questions:

1. What is the best way to determine how many SRP IDs that this organization needs?

2. What is the best way to determine how many BES12 instances to install?

3. Do you see any particular issues with the requirements?

demo activity

lab

review


46

Upgrading from BES10 to BES12You can use the BES12 management console to manage BlackBerry OS (version 5.0 to 7.1), BlackBerry 10, iOS, Android, and Windows Phone devices.

DecisionsDecide if you want to move your BES10 IT policies, profiles, groups, users, and devices to BES12.

If you do want to move your BES10 IT policies, profiles, groups, users, and devices to BES12, decide if you want to install BES12 on the same computer as BES10 or on another computer.

Decide when the particular stages of the migration will be done, and who will do them.

Considerations Same computer Different computer

Additional hardware required No Yes

Service outage for all BES10 users Yes (when you uninstall BES10) No

Move a pilot group of users for testing before moving the rest of the users

Yes Yes

Performance issues Possible (if the number of users and devices exceed the optimum for a single computer environment) – see Tip

Unlikely

Tip: If you expect to exceed the recommended number of users and devices in a single computer environment, you can install additional instances of BES12 after the upgrade to accommodate more users and devices.

Installing BES12 on the same computer as BES10When you install BES12, the setup application creates a BES12 database.

Note:

• If you plan to retain the BES10 instance for a long period of time, do not install BES12 on the same computer.

• If you install BES12 on the same computer as BES10, make sure that the computer has enough memory to meet the requirements of both BES10 and BES12.

• Do not stop the BES10 services when you install BES12 on the same computer as BES10. If you do, BES12 may use some of the ports that BES10 is already using, which will cause port conflicts.

CAUTION: After you install BES12 on the same computer as a BES10 instance, do not modify or upgrade the BES10 instance.

If you install BES12 on the same computer as BES10, you should migrate your IT policies, profiles, groups, users, and devices from BES10 to BES12 as soon as possible, and then uninstall the BES10 instance.


47

When you install BES12 on the same computer as BES10, there is a service interruption when you uninstall BES10 after the upgrade is complete.

Installing BES12 on a separate computer from BES10Install BES12 on a different computer than the existing BES10 instance. The setup application creates a BES12 database. When you install BES12 on another computer, there is no service interruption because you can uninstall BES10 or decommission the BES10 computer without affecting the new BES12 computer.

Migrating data to BES12For instructions about how to move data to a BES12 domain, see the Configuration content. You use the BES12 management console to move the data to the new BES12 domain.

To move data from BES12 to BES12, the source and destination BES12 instances must both be at version 12.1 or later.


48


To move data from BES10 to BES12, the source BES10 instance must be at version 10.2.3 or later. After all BES10 data has been moved, you can uninstall BES10 and delete or archive the BlackBerry Configuration Database and Management Database.


49

Upgrading from BES5 to BES12You can use the BES12 management console to manage all your domain users, groups, apps, policies, profiles, BlackBerry OS (version 5.0 to 7.1), BlackBerry 10, iOS, Android, and Windows Phone devices. However, you must use the BlackBerry Administration Service to configure VPN profiles, Wi-Fi profiles, and software updates for BlackBerry OS (version 5.0 to 7.1) devices.

Note: After the upgrade, distributed BES5 components remain in place and continue to perform the same functions for the BlackBerry OS devices as they did before the upgrade.

The BlackBerry Router that you originally installed with your BES5 continues to work only for the components that are used to manage BlackBerry OS devices. If you install a new instance of the BlackBerry Router with BES12, you can configure it to work with all components.

CAUTION: After an upgrade from BES5 to BES12, you cannot roll back to the BES5 database. Before you begin an upgrade, back up the BES5 database. The BES12 setup application backs up the database by default.

BES12 Migration Kit

You can use a BES12 migration kit to move users from one computer that has an initial BES5 instance to another computer that has a second BES5 instance. You can upgrade this second BES5 instance to BES12 and then move the IT policies, profiles, users, and devices in increments to the BES12 instance. The BES12 migration kit allows you to install a second BES5 instance on another computer using the following:

• BES5 SRP• BES5 software with setup application• One user CAL

Upgrading from BES5 to BES12 in an existing domainTo upgrade from BES5 to BES12 in an existing domain, you can install BES12 on the same computer as or on a different computer than an existing BES5 database.

Follow the instructions in the Upgrade section to install BES12 and point it to the BES5 database to upgrade.

Note: If you install BES12 on the same computer as the existing BES5 database, make sure that the computer meets the hardware requirements for BES12.

Note: If you install BES12 on the same computer as the existing BES5 database, performance issues can occur if the number of users and devices exceed the optimum for a single computer environment. To accommodate more than the recommended number of users and devices for a single computer environment, install BES12 on a separate computer, or install additional instances of BES12 after the upgrade is complete.


50

Choose this option if:

• You want to upgrade an existing BES5 BlackBerry Configuration Database to a BES12 database.

• If you do not need to consolidate any domains

• You need to retire existing BES5 instances

• You do not want to deploy another instance

Pros

• The ability to have BlackBerry OS (version 5.0 to 7.1) devices supported in BES12• You do not necessarily need another computer

Cons

• A global service interruption while the BES5 database is upgraded• The existing BES5 environment is affected

Upgrading from BES5 to BES12 in a new domain• To upgrade from BES5 to BES12 in a new domain, install a BES5 instance on a new computer (to do

this, you need another SRP, an authentication key, and CALs).

• Follow the instructions in the Installation section to install BES12 on the new computer. The BES12 setup application upgrades the new BES5 BlackBerry Configuration Database to a BES12 database.

• Next use BlackBerry Enterprise Transporter to move the IT policies, profiles, users, and devices in increments from the original BES5 to the BES12 database on the new computer. Service interruptions


51

occur only for the batch of users that you are moving from the original BES5 database to the new BES12 database.

Choose this option if:

• You want to retire existing BES5 instances

• It is too time-consuming to upgrade existing BES5 instances to BES5 version 5.0.4 MR10 or later

Pros

• The ability to have BlackBerry OS (version 5.0 to 7.1) devices supported in BES12• You can move data at your own pace• No impact to the existing BES5 environment

Cons

• You must build a new BES5 domain• You must install another server

Preparing a BES5 database for an upgrade to BES12You must prepare the BES5 database before you upgrade it to BES12.

BES5 software versionBefore you upgrade from BES5 to BES12, make sure that the BES5 database is at version 5.0.4 MR10 or later.


52

BES5 database compatibilityThe BES5 database must be compatible with the version of Microsoft SQL Server used for BES12. The compatibility level of the BES5 database must be 100 or higher. You can check and set the compatibility level using Microsoft SQL Server Management Studio:

• To check the compatibility level, type and run the following query in Microsoft SQL Server Management Studio: SELECT compatibility_level FROM sys.databases WHERE name = '<besdbname>';

• If the compatibility level is less than 100, type and run the following query in Microsoft SQL Server Management Studio: ALTER DATABASE [<besdbname>] SET COMPATIBILITY_LEVEL = 100

Note: Replace <besdbname> with the name of the BES5 database.

BES5 database backupBefore you upgrade your BES5 environment to BES12, back up the BES5 databases.

CAUTION: After an upgrade from BES5 to BES12, you cannot roll back to the BES5 database.

BES5 rolesAfter an upgrade, the roles from BES5 are available in BES12 and you can manage them using the BES12 management console. However, BES12 handles roles differently than BES5:

• BES12 allows only one role for each user.

• BES12 requires that an entire role to be assigned to one, some, or all groups.

During an upgrade from BES5 to BES12, if a user has more than one role assigned, BES12 combines the roles. BES12 resolves the roles so that the permissions remain as close as possible to the original permissions in BES5. If there are conflicting permissions that BES12 cannot resolve, the setup application stops and you must resolve the conflict in BES5 manually.


53

Upgrading a large BES5 environment to BES12Large environments have unique considerations, such as:

• Distributed BES5 components installed at remote locations

• Multiple BlackBerry Router or proxy server deployments

• Network latency

A large BES5 environment before an upgrade to BES12

This diagram shows a BES5 environment hat consists of three sites. Site A has one instance of BES5 configured for high availability. Site B has a BES5 instance installed for disaster recovery purposes. Site C is a smaller site that has a standalone BES5 instance that communicates with the BlackBerry Configuration Database at Site A.

The following remote components are installed at sites A and B:

• BlackBerry Administration Service• BlackBerry Attachment Service• BlackBerry Collaboration Service for BES5• BlackBerry MDS Connection Service for BES5• BlackBerry Router for BES5

Site C also hosts a BlackBerry Attachment Service and BlackBerry MDS Connection Service for BES5.


54


55

Stage 1

During the first stage of the upgrade, you should do the following things.

First, make sure that all BES5 components at all sites, including the BlackBerry Configuration Database, are the latest version of BES5. If components are not updated to the latest version, they will not be able to communicate with the upgraded database.

Second, upgrade the BlackBerry Configuration Database at sites A and B.

Do not upgrade the BES5 instances to BES12. If you upgrade the BES5 instances to BES12, you might interrupt the BES5 data traffic.

Install the BlackBerry Router for BES12 at sites A and B. The BlackBerry Router for BES5 doesn't support BES12 instances. If your organization requires a proxy server, you must install the BlackBerry Router for BES12 or a TCP proxy server.

Note: You can also install the BlackBerry Router for BES12 during stage 2.


56


57

Stage 2

During the second stage of the upgrade, you should install BES12 instances at sites A and B to support BlackBerry 10, iOS, Android, and Windows Phone devices. You can also install BlackBerry Collaboration Service for BES12 at sites A and B. You should install the BlackBerry Router for BES12 or a TCP proxy server (if you didn't install them in stage 1).

You don't need to make changes to any of the following distributed BES5 components:

• BlackBerry Administration Service• BlackBerry Attachment Service• BlackBerry Collaboration Service for BES5• BlackBerry MDS Connection Service for BES5• BlackBerry Router for BES5

Site C remains unchanged and now communicates with the upgraded BES12 database at site A.


58


59

Activity: Planning an upgrade from BES5 to BES12

Manufacturing Co. is running BES5 in their environment. They have an active and standby BES5 instance and several remote components that they want to upgrade to BES12. Their environment includes the following:

• Two BES5 instances configured for high availability. Each site hosts one instance.• Two clustered BlackBerry Administration Service instances• A BlackBerry Configuration Database with database mirroring configured• Distributed instances of the BlackBerry Router, BlackBerry Attachment Service, and BlackBerry MDS

Connection Service

Given this scenario, answer the following questions:

1. Is this upgrade scenario supported?

2. What are some pros and cons of each of these options:

a Manufacturing Co. migrates the BES5 version 5.0.4 domain to BES12 by installing a new BES12 database on new computers. The administrator then uses the BlackBerry Enterprise Transporter to move all of the BlackBerry OS users and devices to the new BES12 domain.

demo activity

lab

review


60

b Upgrade the BES5 version 5.0.4 domain to BES12, keeping the current BES5 infrastructure and upgrading only the database. Install new BES12 instances to support BlackBerry 10, iOS, Android, and Windows Phone devices.

c Upgrade the BES5 version 5.0.4 domain on the same computers. Install additional BES12 instances to support BlackBerry OS, BlackBerry 10, iOS, Android, and Windows Phone devices.

3. What do you think will happens to the remote components during an upgrade?


61

Upgrading from BES5 and BES10 to BES12You can install BES12 if you have both a BES5 and a BES10 installed in your organization.

Note: You cannot install BES12 on a computer that has both BES5 and BES10 installed on it.

To upgrade from BES5 and BES10 to BES12, you must first do one of the following:

• Upgrade the BES5 database to BES12

• Install a new BES5 instance, upgrade its database to BES12, and move the data from the original BES5

Second, move the BES10 data to the new combined BES5 and BES12 database.


62

Activity: Identifying advantages and disadvantages of a deployment plan

BES12 offers you several paths to upgrade your environment. Given each scenario, identify the advantages and disadvantages for each upgrade option.

1. Consulting Co. has used BES5 to manage their organization's BlackBerry OS (version 5.0 to 7.1) devices for several years now. They recently decided to start upgrading to BlackBerry 10 devices over the next few years. The current environment does not meet the minimum requirements to upgrade to BES12.

What are the pros and cons of each of the following upgrade paths for this scenario?

• Installing BES12 on the same computer as BES5

• Installing BES12 on a new computer and moving the BES5 data to BES12

demo activity

lab

review


63

2. Manufacturing Co. has a BES5 and BES10 instance in their organization. They manage 300 BlackBerry OS devices and 500 BlackBerry 10, iOS, and Android devices.

What are the advantages and disadvantages of each of the following upgrade paths for this scenario?

• Installing BES12 on the same computer as BES5 and moving the BES10 data to BES12

• Installing BES12 on a new computer and moving the BES5 and BES10 data to BES12


64

Activity: Choosing how to deploy BES12Given the information for each organization, determine whether they should do a new installation or upgrade.

1. Consulting Co. currently supports iOS and Android devices with another EMM solution. They have recently decided to move to BES12 for the added security as well as the ability to manage BlackBerry 10 devices. Currently, they have a BES5 instance that manages some devices, and they want to maintain that capability. The organization must move BES5 to a new computer.

• Currently manages 250 BlackBerry OS devices and must maintain this capability.

• The computer that hosts BES5 must be replaced with new hardware.

• They want to move all of their devices onto a single management solution, including their iOS and Android devices, currently managed with another solution.

• Security is a significant concern for them.

1. What deployment path would you recommend on this scenario ? Why?

2. Are there any requirements for the deployment path you recommend? For example, do they need extra licenses or SRP IDs?

2. Manufacturing Co. currently has two BES5 instances installed in their environment. They want to move completely to BlackBerry 10 devices over the coming months, but must maintain their BlackBerry OS support until device migration is completed.

• They have 1800 devices, split evenly over the two BES5 instances.

• They have purchased 100 BlackBerry 10 devices to test the BES12 deployment with.

• Both BES5 computers meet the minimum requirements for BES12.


2. Are there any requirements for the deployment path you recommend? For example, would they need extra licenses or SRP IDs?

3. Catering Co. is a new organization with 100 employees who bring their own devices to work. They have a mixture of BlackBerry 10 and Android devices, with the possibility of adding iOS devices in the future. The organization wants to be able to manage the work data on the devices, but aren't concerned about the personal data. Due to budgeting concerns, they must keep the deployment to two computers, one for the Microsoft Exchange Server and one for BES12.

demo activity

lab

review


65

• Can buy up to two computers for software installation.

• Manages 60 BlackBerry 10 and 40 Android devices.

• Wants to be able to manage iOS and Windows Phone devices in the future.

• Budget is a concern for them.



4. Financial Co., an organization specializing in stock trading, has a highly regulated environment. Currently, they manage BlackBerry 10, iOS, and Android devices using BES10. The ability to manage all of these devices in a single management console is a significant feature for them, so they have decided to upgrade to BES12. Currently, the BES10 databases are installed on a single computer that does not host any other software.

• The organization must have as much control over the work and personal data on a device as possible.

• Redundancy must be built into the solution, because down-time affects business significantly.

• Redundancy for BES12 database is also required.




66

Review: Designing a deployment plan1. True or false. You can install BES12 on a computer that hosts both BES5 and BES10.

2. If you upgrade to BES12 from BES5 or BES10, can you manage Windows Phone devices?

3. True or false. You can upgrade BES5 to BES12.

4. What happens to distributed BES5 components if you upgrade to BES12?

5. If your environment includes BES5 and BES10 installed on different computers, which instance should you upgrade to BES12 if you want to maintain support for BlackBerry OS devices?

demo activity

lab

review


67

Supporting the deploymentObjectives


• Create a support plan for your deployment strategy• Create a full deployment plan for a sample organization

Discussion: Installation and upgrade issues

During the installation or upgrade of any product, there is always the possibility of something going wrong. Consider the following:

1. What hardware issues should you consider?

2. What sort of software issues could occur?

3. What sorts of user or device issues could occur?

4. What other sorts of issues can you think of?

demo activity

lab

review

Supporting the deployment

70

Creating a deployment support planThe final step in creating a BES12 deployment plan, is to create a support plan for the deployment itself. During this process you try to anticipate things that might go wrong and prepare for them.

During this stage, you can consider two options:

• Mitigating issues during deployment: Try to reduce the impact of any problems that occur, while still moving forward.

• Returning to a previous installation: Return to the previous state and make a new plan for a future deployment.

Hardware issuesPossible issue Mitigation options

• The hardware does not work or does not meet BES12 requirements

• Not all hardware is available

Before the planned installation date:

• Check all hardware before the planned installation date to verify that it is in working order and that it meets all BES12 hardware requirements.

• Prepare one or two extra computers in case a computer stops working on the planned installation date.

During installation:

• If you must install multiple instances of BES12, stage the deployment so that you complete a full installation on one computer first to make sure that all hardware is working.

• Install the BlackBerry Router later (if applicable).

Software issuesPossible issue Mitigation options

• Port conflicts

• The computer’s operating system does not meet BES12 requirements

• The BES12 setup application does not work


• Run the BES12 Readiness Tool on the computers you plan to install BES12 on. The BES12 Readiness Tool helps you determine whether or not the computers meet the minimum requirements for installing BES12.


71

Possible issue Mitigation options

• Make sure all application servers, such as Exchange ActiveSync and the mail servers, are active, running, and tested.

Network issuesPossible issue Mitigation options

• Required firewall ports are not open

• BES12 instances cannot communicate with each other

• BES12 cannot communicate with the BlackBerry Infrastructure

• BES12 cannot communicate with application or content servers


• Run the BES12 Readiness Tool on the computers you plan to install BES12 on. The BES12 Readiness Tool helps you determine whether or not the computers meet the minimum requirements for installing BES12.

• Create a detailed list of the ports that are required. Confirm with your networking team that the ports are open.

User, device, device control, and license issuesPossible issue Mitigation options

• Users were added between the time of planning and the time of deployment

• The type of activation planned for each user group was changed

• Test activations are not working

Depending on device type, number of devices, and activation type, you may have fewer licenses than you need when it is time to activate devices. In this case, you can activate only the key users and add more licenses as soon as possible.

When dealing with activation, app, IT policy, or profile issues during deployment, make sure that:

• You have enough licenses for the activation type.

• You have created or imported the correct IT policies and profiles and assigned them to the user that you are testing.

• If you are not registering users with the BlackBerry Infrastructure, make sure that you have the correct BES12 web address to enter during activation.

• Application servers are accessible by the devices and by BES12.

• The devices are compatible with BES12.


72

Database issuesPossible issue Mitigation options

• The BES12 database does not install

• The existing BES5 database is not accessible

• The upgrade from BES5 to BES12 does not complete


• Check all hardware before the planned installation date to verify that it is in working order and that it meets all BES12 hardware requirements.

• Install and test the database.

• Test all connectivity between the computer that will host BES12 and the database.

• Perform a test upgrade of a copy of the BES5 database. For more information about backing up the BES5 database before an upgrade, see the BES5 Administration Guide.

Returning to a previous environmentMost organizations cannot afford a long service interruption while troubleshooting. Therefore, before a database upgrade, you should plan for the ability to return to the previous environment, in case any issues arise.

Returning to the previous environment is not as simple as stopping the upgrade, especially if data was being migrated when an issue occurred.

To prepare to return to your previous environment, before the planned installation date:

• Back up the existing databases. (By default, the BES12 setup application backs up the existing database.)

• If you use a virtual environment, take a snapshot of it.

If you encounter an issue during or after installing BES12, collect data about the issue before you return to your previous environment so that you can determine its root cause.

For more information about backing up the BES5 BlackBerry Configuration Database, see the BES5 Administration Guide.

For more information about backing up the BES10 BlackBerry Configuration Database, see the BES10 Upgrade Guide.

For more information about backing up the BES12 database, see Backing up the BES12 database.

Removing the BES12 softwareYou can use the uninstall application to remove the BES12 software from a computer. The uninstall application can also remove the log files for the existing installation.

The uninstall application does not remove the BES12 database from the database server and it does not remove the database instance that hosts the BES12 database.

CAUTION: You cannot uninstall BES12 and continue to use BES5 after you have upgraded from BES5 to BES12. If you uninstall BES12 after the upgrade, BES5 will not function correctly.


73

http://help.blackberry.com/en/category/enterprise-services/#earlier-solutions




http://help.blackberry.com/detectLang/bes10/

http://help.blackberry.com/detectLang/bes10/

Review: Supporting the deployment1. One way to make sure your computer meets the requirements to install BES12 is to run the

_________________________ before the installation day.

2. To be able to return to a previous installation if something goes wrong during your BES5 to BES12 upgrade, what do you need a backup of?

3. You should always make sure that you have enough ________ for the number of devices that you are going to activate before you start the installation.

demo activity

lab

review


74

AnswersActivity: Who am I?

Take 5 minutes to identify the BES12 components described in the following questions. You can use the BES12 Architecture and Data Flows Reference Guide as a reference.

1. BES12 database

2. BlackBerry Router

3. Management console

4. BlackBerry Affinity Manager

5. BlackBerry Work Connect Notification Service

6. BlackBerry Collaboration Service

7. BlackBerry Controller

8. BlackBerry Dispatcher for BlackBerry OS devices

9. BlackBerry Messaging Agent

10. BlackBerry Synchronization Service

11. BlackBerry Web Desktop Manager

12. BES12 Self-Service

Discussion: Why should you use the steps for planning your BES12

environment?Discuss the following questions:

1. Some good reasons to do this include:

• Documenting your current settings allows you to return to a previous version if anything goes wrong

demo activity

lab

review

demo activity

lab

review

Answers

75

http://docs.blackberry.com/67268/

• Lets you know what you might need to upgrade or buy more of to meet requirements

• Helps prevent surprises such as broken equipment, more users than you expected, network blockage issues, and devices you didn’t know were being managed

• Helps you identify your organization's security requirements and how to meet them.

2. Planning how you should deploy BES12 can prevent incompatible technologies which could lead to missed opportunities. Planning can improve performance, save license and hardware costs, identify shared technical expertise within your organization, and identify potential reuse of existing solutions.

Other reasons why planning the deployment is important include avoiding potential issues such as:

• Defining management and security issues up front can help you avoid costly infrastructure changes later.

• Defining training needs for support staff and device users who may not know where to turn for assistance.

• Identifying inconsistent policies across the organization that can create resentment and frustration among employees. For example, strategies should be put in place early to determine which groups receive corporate devices, which groups may be allowed to bring their own devices, and which activation types and services each group of employees receive.

3. The planning stages are important to the overall success of any BES12 deployment; however, despite the best laid plans, unexpected things can happen during installation or upgrade that can force you to change those plans. One good reason to plan how you will support the deployment include minimizing down time for users if something goes wrong.

Activity: Identify whether BES12 can be supported

Use the following resources to determine whether BES12 can be supported in the following environments.

• This participant manual• BES12 Compatibility matrix• BES12 Preinstallation checklist

1. Supported. See the BES12 Preinstallation Checklist.

2. Supported. See the BES12 Compatibility Matrix.

3. Not supported. See the BES12 Compatibility Matrix.

4. Not supported. See the BES12 Compatibility Matrix.

5. Not supported. BES12 requires a 64-bit operating system and at least 12 GB of available memory. All other components meet the system requirements. See the BES12 Compatibility Matrix and the BES12 system requirements.

6. Not supported. In order to support 2,500 devices you require:

demo activity

lab

review

Answers

76



• Two computers

• Windows Server 2012 (64-bit) computer requires:



• Microsoft SQL Server 2012 (64-bit) computer requires:



Activity: Identifying the organization's needs

Given the following scenarios, identify the organization's needs and requirements if they want to deploy BES12.

You can use the following resources:

• BES12 Compatibility matrix• BES12 Configuration content• BES12 Installation and upgrade content• BES12 Licensing content• BES12 Preinstallation checklist

1. 1. They need to support 1250 devices, one for each person, plus the 25 testing devices for the IT department.

2. To keep work and data separate, they will need the following types of licenses:

• Silver licenses for BlackBerry 10 devices

• Gold - Secure Work Space for iOS and Android devices

The number of licenses of each type will depend on what devices the users choose.

3. Yes. To deploy these apps on the work space in iOS and Android devices, they have to secure the apps using the BES12 management console.

4. Without finding out more details about their hardware, it is not be possible to say if their organization meets the minimum requirements to deploy BES12.

5. Some things you might want to know include:

• When does the organization plan on deploying BES12?

• Where does the organization want to install the BES12 solution, do they want to distribute it between the three locations in a unit of scale or high availability deployment?

• Does the organization know if they may add any new devices in the near future?

• What are the specifics of the physical hardware? For example, processor speed, and so on.

demo activity

lab

review

Answers

77






6. If Catering Co. plans to expand in the future, then the recommendations need to include that. Right now that information is unknown.

7. A good recommendation could include:

• Purchase of multiple computers to host the BES12 deployment.

• Deploy BES12 in a high availability model spread out over the three locations.

• Purchase some extra licenses to allow for short-term expansion.

• Consider deploying the BlackBerry Router, or a TCP proxy service, at each of the locations.

2. Answers to table questions:

• Will this software configuration be sufficient to meet the organization's current and future BES12 needs?

1. The organization will need a minimum of 250 Gold - BlackBerry server licenses in the short term. If the organization wants to be proactive, they could purchase the additional 250 Gold - BlackBerry server licenses right away.

2. Yes. They plan on purchasing new hardware for the BES12 solution, they can leave this computer as it is, since it meets the requirements for BES12, and install the BES12 software and BES12 database on a new computer.

3. Because their future expansion plans are modest at 250 additional BlackBerry 10 devices, a single computer running BES12 would meet their future needs. It won't matter that the users are in another building, as long as they are able to successfully route to the BES12 computer. This means making sure that routing is available over Wi-Fi, VPN, or the wireless network.

4. Some things you might want to know include:

• When does the organization plan on purchasing the additional BlackBerry 10 devices?

• Where does the organization want to install the BES12 solution, at their current location or the additional location?

• Is the organization considering using iOS, Android, or Windows Phone devices in the future?

5. A good recommendation could include:

• Purchase of a single computer to run BES12 and the BES12 database.

• Purchase of 500 Gold - BlackBerry.

Review: Identifying your organization's needs

1. • Identify your organization's needs

• Design a deployment plan

demo activity

lab

review

Answers

78

• Support the deployment

2. False. BES12 requires a 64-bit operating system to be installed.

3. Part of planning for BES12 is to document your organization’s current environment to consider what you want BES12 to provide for your organization. Using this information, you can figure out what your organization requires to get from your current environment to an implementation of BES12 that meets your needs.

4. True

5. All of the above

6. False. Users may need to upgrade their device software to meet the minimum requirements for BES12.

Activity: Planning a large BES12 installation

Financial Co. is a large organization that requires a mix of regulated and nonregulated device users in their environment. The organization's users have a wide variety of devices. They intend to install BES12 to manage all of the organization's devices.

Financial Co. has started the planning process and have made the following determinations:

• There must be at least one BES12 instance installed at all ten offices• High availability is required• A new Microsoft SQL Server database is being installed with the AlwaysOn option

The following number of users and devices must be supported:

• 25,000 users with 75,000 devices

• 35,000 BlackBerry 10 devices• 15,000 iOS devices, 10,000 require Secure Work Space• 20,000 Android devices, 15,000 require Secure Work Space• 5,000 Windows Phone devices

1. Use the BES12 Configuration Tool. By entering the total number of users, it tells you how many SRP IDs you need. In this example, the BES12 Configuration Tool recommends 23 SRP IDs if all of the computers are installed in North America or the European Union. If the computers are being installed in the Asia Pacific region, then the BES12 Configuration Tool recommends 56 SRP IDs.

2. Use the BES12 Performance Calculator. At a minimum, you need 1 instance for every 25,000 devices but the calculator gives you a more detailed answer. In this case, we know that there are a minimum of ten instances of BES12 being installed because the organization wants at least one in each office. Running the BES12 Performance Calculator with just the device numbers gives a minimum recommendation of 13 instances.

3. This question has no specific answers. The installation should work fine, but it is definitely based on the rest of the organization's environment. Things to keep in mind would be:

demo activity

lab

review

Answers

79

• Network latency

• Network access

• Disaster recovery

Activity: Planning an upgrade from BES5 to BES12

Manufacturing Co. is running BES5 in their environment. They have an active and standby BES5 instance and several remote components that they want to upgrade to BES12. Their environment includes the following:

• Two BES5 instances configured for high availability. Each site hosts one instance.• Two clustered BlackBerry Administration Service instances• A BlackBerry Configuration Database with database mirroring configured• Distributed instances of the BlackBerry Router, BlackBerry Attachment Service, and BlackBerry MDS

Connection Service

demo activity

lab

review

Answers

80

1. Yes

2. a Pros:

• After they are migrated, the BES12 administrators can manage all device types from a single management console. This allows them to move BlackBerry OS users to new devices as required.

• With no major upgrades to existing equipment, the impact to the existing BES5 domain and its users is limited.

• You can shut down the computer that hosts BES5 after all users are migrated to new devices.

Cons:

• You can migrate only 300 users at a time.

• You need to set up new computers to host BES5 before you use the BlackBerry Enterprise Transporter to migrate the users.

• The BES5 components continue to run and use system resources, even after all BlackBerry OS users have moved to new devices.

b Pros: The administrator can manage all devices from a single management console.

Cons:

• You must upgrade all BES5 version 5.0.4 instances to BES12.

• Downtime will be required to upgrade any computers to meet the minimum hardware requirements for BES12 (if required).

• The database software must meet BES12 requirements. This can result in downtime to upgrade the database software if it does not meet the minimum requirements.

• You must upgrade the BlackBerry Configuration Database database to a BES12 database.

• You can migrate only 300 BlackBerry OS devices at one time using the BES12 management console.

• The BES5 components run and use system resources, even after all BlackBerry OS users have moved to new devices.

c Pros: The administrator can manage all devices from a single management console.

Cons:

1. The complexity of the deployment is prohibitive because you are trying to host active/standby components for BES5 and active/active components for BES12 on the same computer.

2. Downtime may be required to upgrade any computers to meet the minimum hardware requirements for BES12.

3. The database software must meet BES12 requirements. If it does not meet the minimum requirements, downtime is required to upgrade the database software.

4. The BES12 instances can host only 5,000 devices.

5. There is a higher risk of issues when you perform multiple hardware and software upgrades.

6. The BES5 components run and use system resources, even after all BlackBerry OS users have moved to new devices.

Answers

81

3. All remote components continue to function as before. Upgrading to BES12 does not disrupt the functionality of remote components, except if you install the latest service packs before the upgrade.

Activity: Identifying advantages and disadvantages of a deployment plan

BES12 offers you several paths to upgrade your environment. Given each scenario, identify the advantages and disadvantages for each upgrade option.

1. • Installing BES12 on the same computer as BES5: The organization needs new hardware to deploy a BES5 installation and then move the users, because their current computer does not meet the hardware requirements for BES12. This also requires an extra SRP ID for BES5, as well as the SRP ID for BES12.

• Installing BES12 on a new computer and moving the BES5 data to BES12: This is the only suitable option in this scenario, because the current computer does not meet the minimum BES12 requirements. Additional considerations include:

• Upgrading the database may cause a service outage for users

• Migrating the users to a new database causes a temporary service outage only for the users being migrated at the time

2. • Installing BES12 on the same computer as BES5 and moving the BES10 data to BES12: In this case the organization doesn't need to purchase new hardware and can recover the old BES10 computer for other uses. However, during the upgrade, BES5 users experience a service outage and BES10 users experience an outage when they are migrated.

• Installing BES12 on a new computer and moving the BES5 and BES10 data to BES12: In this case the organization must purchase a new computer for the BES12 installation, but will have two computers they could deploy for other use after the users are moved to BES12. However, again, users would experiences service interruptions while being moved to the new installation. This can be mitigated by moving users in small batches when possible.

Activity: Choosing how to deploy BES12Given the information for each organization, determine whether they should do a new installation or upgrade.

1. 1. This customer should deploy BES5 on a new computer and use the BlackBerry Enterprise Transporter to migrate the users. Then upgrade this new installation to BES12.

2. The customer will need a new SRP ID and authorization code for the BES5 installation, as well as the SRP ID and authorization code for BES12.

2. 1. This customer has two options available to them. They can deploy a new BES12 computer that is separate from their BES5 installations or they can upgrade both BES5 installations to BES12. If they upgrade both BES5 installations to BES12, this would make the move to BlackBerry 10 devices smoother.

demo activity

lab

review

demo activity

lab

review

Answers

82

2. Installing a new BES12 instance and leaving the BES5 instances alone would require new hardware. Upgrading the two BES5 instances to BES12 would only require the new BES12 SRP ID and authorization code, as well as the additional licences for activating the BlackBerry 10 devices.

3. 1. This customer can safely deploy a single BES12 computer to manage this number of devices. Recommend that the organization activates the BlackBerry 10 devices using the "Work and personal - Corporate" activation type and the Android devices using the "Work and personal - user privacy" activation type, which will give them the best control over the work data while still leaving the device users with a personal space.

2. The organization will need to purchase both Silver licenses for the BlackBerry 10 devices and Gold - Secure Work Space licenses for the Android devices. They should plan for the future and purchase extra Gold - Secure Work Space licenses to add iOS devices in the future.

4. 1. This customer has strong redundancy and security requirements, which means they should deploy a solution that contains the following:

• High availability for both the BES12 solution and the BES12 databases

• Installation in separate locations to preserve redundancy, so that if one site loses power, for example, the other site can pick up the load

• BlackBerry Router or TCP proxy servers installed in a DMZ to maintain solid security

• Gold - BlackBerry licenses to activate BlackBerry 10 devices with the "Work space only" activation type

• Gold - Secure Work Space licenses to activate iOS and Android devices with the "Work and personal - full control" activation type

2. Financial Co. will require an SRP ID and authorization code for each BES12 deployment, as well as enough of the appropriate license types to support the number of devices in their environment. Additional computers would be required to use the BlackBerry Router or TCP proxy service in a DMZ.

Review: Designing a deployment plan1. False. If you have BES5 and BES10 installed on the same computer, then you cannot install BES12 on

this computer as well. If the BES12 setup application detects BES5 and BES10 on the computer, it stops the installation.

2. Yes. Any installation of BES12 can manage Windows Phone devices.

3. True. There are several paths available to upgrade from BES5 to BES12 that allow you to choose the best one suited for your environment.

4. Distributed BES5 components remain in place and continue to function as usual. However, if you upgrade from BES5 to BES12, the BlackBerry Router you originally installed with your BES5 continues to work only for the components used to manage BlackBerry OS devices. If you install a new instance of the BlackBerry Router with BES12, you can configure it to work with all components.

demo activity

lab

review

Answers

83

5. To maintain support for BlackBerry OS devices, you should upgrade BES5 to BES12 and then move the BES10 users to the BES12 instance.

Discussion: Installation and upgrade issues

During the installation or upgrade of any product, there is always the possibility of something going wrong. Consider the following:

1. • Required hardware isn't available

• Your hardware doesn't meet specifications

• Your hardware doesn't work

2. • Insufficient licenses

• Database fails to upgrade

• Database fails to launch after upgrade

• Software fails to install

• Software fails to run after installing

• Other required software isn't compatible with your BES12 instance

• Other required software isn't installed, or is installed but not working

3. • Number of users have changed and you have to support them after planning was completed

• Device types have changed, either added or removed

• Users are unable to activate devices

• Users' apps are not being deployed

• Can't add users to the database

4. • Network is insufficient, you don't have enough connections, you can't talk to the Microsoft Exchange Server, Exchange ActiveSync server, application servers

• Network goes offline, required firewall access isn't available, or you have no network connectivity

• Power outages, planned or unplanned

Review: Supporting the deployment1. BES12 Readiness Tool

2. The BlackBerry Configuration Database

demo activity

lab

review

demo activity

lab

review

Answers

84

3. Licenses

Answers

85

GlossaryBES5 BlackBerry Enterprise Server 5

BES10 BlackBerry Enterprise Service 10

BES12 BlackBerry Enterprise Service 12

BES12 instance BES12 instance refers to all BES12 components installed on one computer except the BlackBerry Router, which is an optional component that is installed separately. A BES12 instance is sometimes referred to as a "unit of scale."

DMZ A demilitarized zone (DMZ) is a neutral subnetwork outside of an organization's firewall. It exists between the trusted LAN of the organization and the untrusted external wireless network and public Internet.

EMM Enterprise Mobility Management

SRP Server Routing Protocol

SRP ID The SRP ID is a unique identifier that an EMM solution from BlackBerry uses to identify itself to the BlackBerry Infrastructure during SRP authentication.

TCP Transmission Control Protocol

Glossary

87

Legal notice© 2015 BlackBerry. Trademarks, including but not limited to BLACKBERRY, EMBLEM Design, BBM, BES, MANYME, VIRTUAL SIM PLATFORM, WORKLIFE, MOVIRTU, SECUSMART, SECUSMART & Design , SECUSUITE, WATCHDOX, WATCHDOX & Design and WATCHDOX & EMBLEM Design are the trademarks or registered trademarks of BlackBerry Limited, its subsidiaries and/or affiliates, used under license, the exclusive rights to which are expressly reserved.

Android is a trademark of Google Inc. iOS is a trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. iOS® is used under license by Apple Inc. KNOX and Samsung KNOX are trademarks of Samsung Electronics Co., Ltd. Microsoft, ActiveSync, SQL Server, Windows, and Windows Phone are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. Wi-Fi is a trademark of the Wi-Fi Alliance. All other trademarks are the property of their respective owners.

This documentation including all documentation incorporated by reference herein such as documentation provided or made available on the BlackBerry website provided or made accessible "AS IS" and "AS AVAILABLE" and without condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however, BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this documentation to you in a timely manner or at all.

This documentation might contain references to third-party sources of information, hardware or software, products or services including components and content such as content protected by copyright and/or third-party web sites (collectively the "Third Party Products and Services"). RIM does not control, and is not responsible for, any Third Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by RIM of the Third Party Products and Services or the third party in any way.

EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL RIM BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL,

Legal notice

89

PUNITIVE, OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH RIM PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF THE USE OF RIM PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF RIM HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, RIM SHALL HAVE NO OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY.

THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO RIM AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED RIM DISTRIBUTORS (ALSO INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS.

IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR, EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF RIM OR ANY AFFILIATES OF RIM HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION.

Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with RIM's products and services may require one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any Third Party Products and Services that are provided with RIM's products and services are provided as a convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warranties of any kind by RIM and RIM assumes no liability whatsoever, in relation thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a license or other agreement with RIM.

Certain features outlined in this documentation require a minimum version of BlackBerry® Enterprise Server, BlackBerry® Desktop Software, and/or BlackBerry® Device Software.

The terms of use of any RIM product or service are set out in a separate license or other agreement with RIM applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN AGREEMENTS OR WARRANTIES PROVIDED BY RIM FOR PORTIONS OF ANY RIM PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION.

BlackBerry Limited2200 University Avenue EastWaterloo, OntarioCanada N2K 0A7

BlackBerry UK Limited200 Bath RoadSlough, Berkshire SL1 3XE

Legal notice

90

United Kingdom

Published in Canada

Legal notice

91

planning your blackberry enterprise service 12 environment ... · planning your blackberry...

Documents