• For failover to occur only when the standby BlackBerry Enterprise Server is in a healthier state than the primary
BlackBerry Enterprise Server, you can move the promotion threshold so that it is lower than the failover threshold.
• For failover to occur when the standby BlackBerry Enterprise Server can provide the same services that the primary
BlackBerry Enterprise Server can provide when it is healthy, you can move the promotion threshold so that it is equal to
the failover threshold.
Configuring failover to occur when the standby BlackBerry Enterprise
Server is in an acceptable state
By default, the thresholds are configured so that if the primary BlackBerry Enterprise Server loses its SRP connection or its
messaging server connection, or the primary BlackBerry Enterprise Server cannot browse the Internet, the primary
BlackBerry Enterprise Server must fail over. The standby BlackBerry Enterprise Server can promote itself if it can connect
to the BlackBerry Infrastructure and messaging server. This default configuration is designed to make sure that the
BlackBerry Enterprise Server remains in an acceptable state.
To maintain the BlackBerry Enterprise Server in an acceptable state, you configure the standby BlackBerry Enterprise
Server to promote itself when it is sufficiently healthy to provide the BlackBerry services that your organization considers
essential. The primary BlackBerry Enterprise Server cannot demote itself as long as it provides the BlackBerry services that
your organization uses but does not consider essential.
For example, when the BlackBerry Enterprise Server pair uses the default configuration, if the primary BlackBerry
Enterprise Server cannot connect to the messaging server, and the standby BlackBerry Enterprise Server cannot browse
the Internet, the primary BlackBerry Enterprise Server must demote itself because one of its health parameters indicates
that it is not sufficiently healthy. The standby BlackBerry Enterprise Server, even though it is experiencing an issue, can
promote itself to become the primary BlackBerry Enterprise Server because all of the required health parameters indicate
that it is healthy enough to become the primary instance.
Configuring failover to occur when the standby BlackBerry Enterprise
Server can provide the same services that the primary BlackBerry
Enterprise Server can provide
If you move the failover threshold and promotion threshold so that the identical health parameters are above both
thresholds, the primary and standby BlackBerry Enterprise Server instances must meet the same requirements to be
considered sufficiently healthy to run. You can move the promotion threshold to be the same as the failover thresholds if
your organization requires that the failover process can promote a healthy standby BlackBerry Enterprise Server only.
In this scenario, you configure the standby BlackBerry Enterprise Server to promote itself when it can provide most of the
BlackBerry services that your organization requires. The primary BlackBerry Enterprise Server demotes itself when it
cannot provide most of the BlackBerry services that your organization considers essential.
For example, you can configure the failover threshold and the promotion threshold so that the primary and standby
BlackBerry Enterprise Server instances must be able to connect to the BlackBerry Infrastructure and messaging server and
browse the Internet. If the primary BlackBerry Enterprise Server cannot connect to the messaging server and the standby
BlackBerry Enterprise Server cannot browse the Internet, the standby BlackBerry Enterprise Server cannot promote itself
because it is not sufficiently healthy.
Administration Guide
Configuring BlackBerry Enterprise Server high availability
103