2.
Click
MDS Connection Service
.
3.
Click
Edit component
.
4.
On the
TLS
tab, in the
Name
field, type the name of a web server.
5.
In the
Service URL
field, type the regular expression for the web address of the web server.
6.
In the
Settings
section, in the
Allow untrusted servers
drop-down list, perform one of the following actions:
• To permit only trusted TLS connections from the web server, click
No
.
• To permit untrusted TLS connections from the web server, click
Yes
.
7.
Click the
Add
icon.
8.
Repeat steps 4 to 7 for each web server that you want to specify.
9.
Click
Save all
.
After you finish:
Restart the BlackBerry MDS Connection Service.
Related information
Add a retrieved certificate for a web server to the key store,
200
Restarting BlackBerry Enterprise Server components,
392
Configuring certificate server information for the
BlackBerry MDS Connection Service
The certificate for the BlackBerry MDS Connection Service permits push applications to make HTTPS connection to the
BlackBerry MDS Connection Service. You can configure the BlackBerry MDS Connection Service to search for and retrieve
certificates and the status of the certificates that external web servers use to make HTTPS connections.
To search for and retrieve certificates from an LDAP server, you can configure the BlackBerry MDS Connection Service to
use LDAP or DSML. The BlackBerry MDS Connection Service searches each LDAP server using LDAP or DSML in the order
that you specify. If you configure the BlackBerry MDS Connection Service to use both LDAP and DSML to search and
retrieve certificates, the BlackBerry MDS Connection Service searches the servers using LDAP and then searches the
servers using DSML. After the BlackBerry MDS Connection Service retrieves the certificate, the BlackBerry Enterprise
Server sends the certificate to the BlackBerry device, and the BlackBerry device displays the certificate so that the user
can accept it. The BlackBerry MDS Connection Service supports DSML version 2.
To search for and retrieve the status of the certificates, you can configure the BlackBerry MDS Connection Service to
search the OCSP servers or CRL servers. If you search for the status of the certificates using an OCSP server or a CRL
server, which server you choose to search for the status of the certificates first does not matter because each server
creates a prioritized list automatically.
For more information about certificates, see the
BlackBerry Enterprise Solution Security Technical Overview
.
Administration Guide
Configuring how users access enterprise applications and web content
193