IBM AH0QIKO - Lotus Domino Enterprise Server Upgrade Manual

Manual is about: Upgrade Guide

Summary of AH0QIKO - Lotus Domino Enterprise Server

  • Page 2

    Published: 2011-07-29 swdt561575-1649561-0729024836-001.

  • Page 3

    Contents 1 revision history................................................................................................................................................. 5 2 overview: blackberry enterprise server........................................................................................

  • Page 4

    Configure the server document to permit the blackberry enterprise server to move user accounts within a blackberry domain...................................................................................................................... 25 configuring connections for the blackberry enterprise ser...

  • Page 5

    Specifying a name for the blackberry administration service pool during the installation process......... 50 move user accounts to a new blackberry enterprise server using the blackberry administration service..... 50 prevent the previous blackberry enterprise server from connecting to the blackberr...

  • Page 6

    Configure the blackberry mail store service to use a local system account.................................................... 69 store database credentials for the local system account................................................................................. 70 provisioning the blackberry col...

  • Page 7: Revision History

    Revision history 1 date description 29 july 2011 updated the following topics: • unsupported environments • upgrade the blackberry enterprise server software by overwriting the existing version and using the existing blackberry configuration database • install the blackberry enterprise server on a n...

  • Page 8

    Overview: blackberry enterprise server 2 the blackberry® enterprise server is designed to be a secure, centralized link between an organization's wireless network, communications software, applications, and blackberry devices. The blackberry enterprise server integrates with your organization's exis...

  • Page 9: Upgrade

    Planning a blackberry enterprise server upgrade 3 if your organization's environment includes only one blackberry® enterprise server that is version 4.1 sp7 or later, you can upgrade the blackberry enterprise server to the latest version by overwriting it or by installing it on a different computer ...

  • Page 10: Database

    Upgrade implications for the blackberry configuration database when you upgrade the blackberry® enterprise server to the latest version, you must also upgrade the blackberry configuration database to the latest version. You can use the setup application to install or upgrade blackberry enterprise se...

  • Page 11: Voice System 4.6

    If the blackberry configuration database in the blackberry domain is earlier than version 5.0, you cannot use the upgrade application for blackberry enterprise server 5.0 sp3. You must upgrade the blackberry enterprise server by running the setup application. Upgrading the blackberry enterprise serv...

  • Page 12: Server

    Hardware requirements: blackberry enterprise server 4 the following are requirements for a blackberry® enterprise server and the blackberry enterprise server components that you install on a single computer, and excludes the blackberry collaboration service. The requirements are for a blackberry ent...

  • Page 13

    Item requirement • approximately 2 mb per user each day for log files (100 email messages per user) blackberry enterprise server that supports up to 2000 users • 64-bit operating system recommended • single processor, 2.83 ghz intel xeon 5400 series (quad core) or two processors, 3.0 ghz intel xeon ...

  • Page 14: System Requirements

    System requirements 5 for information about calculating hardware requirements, visit www.Blackberry.Com/go/serverdocs to see the blackberry enterprise server capacity calculator and blackberry enterprise server performance benchmarking guide. System requirements: blackberry enterprise server item re...

  • Page 15

    Item requirement • if using windows server 2008, to support audio attachments, windows media® format sdk (for more information, visit support.Microsoft.Com to read article 972098) • if using windows server 2003, to support audio attachments, windows media player 9 or later network proximity a high-s...

  • Page 16: Databases

    Item requirement diiop task running in your organization's environment, an ibm lotus domino server running the diiop task and, if you use ibm lotus domino authentication with blackberry administration service or blackberry web desktop manager, with the directory assistance feature turned on. Hardwar...

  • Page 17

    Item requirement • microsoft sql server 2005 sp3 enterprise edition or standard edition (32-bit or 64-bit) • microsoft sql server 2005 sp4 enterprise edition or standard edition (32-bit or 64-bit) • microsoft sql server 2008 sp1 enterprise edition or standard edition (32-bit or 64-bit) • microsoft s...

  • Page 18

    Item requirement media player one of the following: • if using windows server 2008, to support audio attachments, windows media® format sdk (for more information, visit support.Microsoft.Com to read article 972098) • if using windows server 2003, to support audio attachments, windows media player 9 ...

  • Page 19

    Item requirement • the windows® account that runs the blackberry collaboration service added to one of the following groups: • rtcuniversalserveradmins group, to automatically provision the blackberry collaboration service as a trusted service in microsoft active directory (for more information, vis...

  • Page 20

    Item requirement • rtcuniversalserveradmins group, to automatically provision the blackberry collaboration service as a trusted service in microsoft active directory (for more information, visit msdn.Microsoft.Com to read about required microsoft active directory permissions) • rtccomponentuniversal...

  • Page 21

    Item requirement • windows server 2008 r2 • windows server 2008 r2 sp1 rsa® authentication agent to support enhanced network authentication (optional), rsa authentication agent 6.1 for windows server 2003 or rsa authentication agent 7.0.1 for windows server 2008. Memory one of the following: • if yo...

  • Page 22

    • windows server 2008 r2 • windows server 2008 r2 sp1 system requirements for your organization's environment the following system requirements apply when you configure single sign-on authentication for the blackberry® administration service and blackberry® web desktop manager or configure the black...

  • Page 23

    Item requirement • microsoft hotfix 955839 installed on the users' computers to make sure the correct time zones are displayed • the following settings turned on to support microsoft® activex®: • automatic prompting for microsoft activex controls • download signed microsoft activex controls • run mi...

  • Page 24

    • ibm® lotus® domino® 8.0.2 • ibm lotus domino 8.5.1 • ibm lotus domino 8.5.2 system requirements: email applications for users to support the blackberry® enterprise server, any of the following email applications: • ibm® lotus notes® version 7.0.3 or 7.0.4 (to support displaying encrypted email mes...

  • Page 25: Unsupported Environments

    Supported features and environments item description virtual environment the blackberry® enterprise server and blackberry enterprise server components support vmware vsphere® 4, vmware vsphere 4.1, microsoft® hyper-v® server 2008, and microsoft hyper-v server 2008 r2. Enhanced network authentication...

  • Page 26

    Item description email application the blackberry enterprise server and blackberry enterprise server components do not support installation on computers that host email applications such as microsoft® outlook®. Email applications use data files that can cause conflicts with the blackberry enterprise...

  • Page 27: Preupgrade Tasks

    Preupgrade tasks 6 configuring a messaging environment configure a group for the blackberry enterprise server you must configure a group named blackberryadmins in your organization's messaging environment. The blackberryadmins group includes permissions that the blackberry® enterprise server can use...

  • Page 28: Authentication

    The blackberry enterprise server and blackberry monitoring service can connect to their databases on the microsoft® sql server® using windows® authentication or database authentication. By default, the blackberry enterprise server and blackberry monitoring service log in to their databases using the...

  • Page 29

    Server role) microsoft sql server permission to the microsoft sql server account. If you want the setup application to install the blackberry database notification system, you must assign the microsoft sql server permission for the database system administrator (also called the sysadmin server role ...

  • Page 30: Environment

    To avoid conflicts between the blackberry policy service and blackberry administration service in a mixed version environment, the setup application tries to turn off application polling by the blackberry policy service for each blackberry enterprise server instance in the blackberry domain before i...

  • Page 31

    Blackberrydbbackup.Exe -d besmgmt -f c:\db_backup_folder -u sqlusername -p sqlpassword. Blackberry configuration database backup tool parameters the parameters listed in brackets are optional. Parameter description -d this parameter specifies the name of the blackberry® enterprise server database (f...

  • Page 32

    You can remove the blackberry mds integration service using the option for the appropriate blackberry enterprise server version: blackberry enterprise server version option 4.1 sp7 you can choose one of the following options to remove the blackberry mds integration service: • you can perform the fol...

  • Page 33: Service

    Blackberry enterprise server version option • you can run the createdb executable that is included with the blackberry enterprise server 5.0 sp3 installation files for more information about using the setup application to remove the blackberry mds integration service, see "adding or removing blackbe...

  • Page 34

    Verify that you configured the correct permissions on the database server that hosts the blackberry configuration database. 1. Perform one of the following actions: • log in to the computer that hosts the database server as a local administrator or using a windows® account that has sql administrator...

  • Page 35

    Property description by default, this folder is in the same root folder that the createdb.Exe file is located in. Log_dir this property specifies the path to the folder that you want to create log files in. By default, this folder is in the same root folder that the createdb.Exe file is located in. ...

  • Page 36: Delete A Voip Profile

    Delete a voip profile before you begin: verify that the voip profile is not assigned to a user account or associated with a wi-fi® profile. 1. In the blackberry® administration service, on the blackberry solution management menu, expand policy > wi- fi configuration. 2. Click manage voip profiles. 3...

  • Page 37: Service Instance

    If you create a blackberry administration service pool using dns round robin, you can install the blackberry administration service and blackberry web desktop manager on each computer in the pool or you can install the blackberry administration service or blackberry web desktop manager on some of th...

  • Page 38

    • in the ip address1 field, type the ip address of the computer that you want to host a blackberry administration service instance on. • select the create associated pointer (ptr) record check box. 4. Repeat step 3 for each blackberry administration service instance that you want to install. When yo...

  • Page 39: 2010

    Preparing the computer that hosts the blackberry collaboration service for use with microsoft lync server 2010 if you plan to install the blackberry® collaboration service for use with microsoft® lync™ server 2010, you must verify that the computer that you install the blackberry collaboration servi...

  • Page 40: Enterprise Server Components

    Applications that are installed with the blackberry enterprise server components you can use the blackberry® enterprise server installation process to install third-party applications. Application blackberry enterprise server components that the application is installed with jdk® with jre™ 1.6.18 • ...

  • Page 41

    • srp host (for blackberry enterprise server 5.0 and later, the format of the srp host is different from earlier versions) • srp identifier • srp key • computer name and port number of the instant messaging server (use the virtual server name and port number where the ajax service is installed for m...

  • Page 42: Database

    Performing a test upgrade of the blackberry configuration database if you want to make sure that you can upgrade the blackberry® configuration database in your organization's environment without any issues or if you want to find out how long it takes to upgrade the blackberry configuration database,...

  • Page 43

    Property description server this property specifies the name of the database server that hosts the blackberry configuration database. If a database instance hosts the blackberry configuration database, follow the format database_server_name\database_instance_name. Userid if you use database authenti...

  • Page 44: Process

    Upgrading the blackberry enterprise server software by using the in-place upgrade process 7 using the in-place upgrade process, you can upgrade the blackberry® enterprise server software by replacing the existing version and upgrading the blackberry configuration database. You can use the in-place u...

  • Page 45

    • if you upgrade a blackberry enterprise server 4.1 instance, the upgrade process deletes any software configurations that you created. Document the existing software configurations before you start the upgrade process so that you can create the software configurations again after the upgrade proces...

  • Page 46: The Installation Process

    13. In the microsoft® active directory® settings dialog box, in the user password field, type the password for the microsoft active directory account that the blackberry enterprise server uses to authenticate with microsoft active directory (for example, besadmin). If the setup application cannot lo...

  • Page 47

    Upgrade the blackberry enterprise server instances that you configured for disaster recovery if you configured the blackberry® enterprise server instances in your organization's environment for disaster recovery, you configured two blackberry enterprise server instances that use the same srp address...

  • Page 48: Database

    Upgrading the blackberry enterprise server using the cutover upgrade process and upgrade the existing blackberry configuration database 8 you can use the cutover upgrade process to install a blackberry® enterprise server on a new computer and move user accounts and server information from a previous...

  • Page 49: Besmgmt.Cfg Properties

    3. Extract the contents to a folder on the computer. 4. Navigate to \database. 5. Open the besmgmt.Cfg file in a text editor. 6. Change the file to include information that is specific to your organization's environment. 7. Save and close the file. 8. Open a command prompt window. 9. Navigate to \da...

  • Page 50: Database

    Property description backup_dir this property specifies an existing folder where you want to save the database backup in. By default, this folder is located in the same root folder that the createdb.Exe file is located in. Bes_type this property specifies the messaging server that your organization ...

  • Page 51

    7. In the database mirroring options dialog box, if you want to configure database mirroring, select the add support for database mirroring check box and type the name of the database server that hosts the mirror database in the name of the mirror database server field. The setup application does no...

  • Page 52: The Installation Process

    16. In the console addresses dialog box, copy the web addresses for the blackberry enterprise server components and paste them into a document for future reference. You can use the web addresses to log in to the blackberry enterprise server components that you installed. After you finish: if you upg...

  • Page 53

    7. Click manage multiple users. 8. Select the user accounts that you want to move to the new blackberry enterprise server at the same time 9. Click switch blackberry user to different blackberry enterprise server. 10. Select the new blackberry enterprise server from the list. 11. Click save all. Aft...

  • Page 54

    Upgrading the blackberry enterprise server using the cutover upgrade process and create a blackberry configuration database 9 using the cutover upgrade process, you can install the blackberry® enterprise server on a new computer and move user accounts and server information from the previous blackbe...

  • Page 55: Besmgmt.Cfg Properties

    5. Open the besmgmt.Cfg file in a text editor. 6. Change the file to include information that is specific to your organization's environment. 7. Save and close the file. 8. Open a command prompt window. 9. Change to \database. 10. Type createdb.Exe besmgmt.Cfg. Besmgmt.Cfg properties property descri...

  • Page 56

    Property description by default, this folder is located in the same root folder that the createdb.Exe file is located in. Bes_type this property specifies the messaging server that your organization uses. Install the blackberry enterprise server on a new computer and create a new blackberry configur...

  • Page 57

    B. If you configured the database server to use static ports, select the static option. If the static port number is not 1433, in the port field, type the port number. 10. In the database mirroring options dialog box, if you want to configure database mirroring, select the add support for database m...

  • Page 58: The Installation Process

    Specifying a name for the blackberry administration service pool during the installation process during the installation process, the setup application prompts you to specify the name of the blackberry® administration service pool. The blackberry administration service instances use the pool name fo...

  • Page 59: Software In Phases

    Upgrading the blackberry enterprise server software in phases 10 if you use the phased upgrade process, you can maintain previous versions of the blackberry® enterprise server software, install additional blackberry enterprise server instances over time, and move user accounts to the latest blackber...

  • Page 60

    2. If you create a new blackberry configuration database, create roles, administrator accounts, groups, it policies, and software configurations for your organization's environment. 3. If you upgrade an existing blackberry configuration database, remove blackberry manager instances from your organiz...

  • Page 61: Infrastructure

    Test the connection from the blackberry router to the blackberry infrastructure to make sure that the blackberry® router can connect to the blackberry® infrastructure, you can test the connection using the bbsrptest tool that is included with the blackberry® enterprise server installation files. The...

  • Page 62: Postupgrade Tasks

    Postupgrade tasks 11 resend the database mirroring parameters to blackberry enterprise server components if the computers that host blackberry® enterprise server components were not running or connected to the network when you configured the blackberry® enterprise solution to support database mirror...

  • Page 63

    When you upgrade a blackberry® enterprise server, the setup application creates new mdslogin.Conf or krb5.Conf files and creates backup versions of the old blackberry mds connection service configuration files in the same location. If you changed the mdslogin.Conf or krb5.Conf files before you perfo...

  • Page 64

    Best practice: running the blackberry enterprise server best practice description do not change the startup type for the blackberry® enterprise server services. When you install or upgrade the blackberry enterprise server, the setup application configures the startup type for the blackberry enterpri...

  • Page 65: Time

    Configure the blackberry administration service instances in a pool to communicate across network subnets the instances in the blackberry® administration service pool use multicast udp to communicate with each other. If the blackberry administration service instances are located in different network...

  • Page 66: Connection Service Failover

    Add the web address for the blackberry administration service or blackberry monitoring service to the list of trusted web sites in windows internet explorer, and install the certificate for the blackberry administration service or blackberry monitoring service in the certificate store of your comput...

  • Page 67: Attachment Extensions

    • configure the application servers to use a list of ip addresses to find an available central push server. If a central push server does not respond to a request, the application can try to connect to another central push server. • configure a hardware load balancer. The load balancer accepts all r...

  • Page 68: Attachment Service

    3. Click edit instance. 4. In the distiller section, in the allowed column, turn on the attachment distillers that you want the blackberry attachment service to support. 5. If required, in the distiller section, in the attachment size (kb) column, change the attachment size, in kb, for the new attac...

  • Page 69: The Windows Account

    1. In the microsoft® sql server® management console, create a sql login for the windows account or sql authentication account. 2. Assign the account to the rim_db_attachmentserver role in the blackberry configuration database. 3. If you want the blackberry attachment service to use a sql authenticat...

  • Page 70: Account

    Server and database roles description you can remove this role from the windows account that the blackberry enterprise server uses to run after the setup application creates or upgrades the blackberry configuration database. Rim_db_bes_server the blackberry enterprise server requires this role to ru...

  • Page 71: Enterprise Server

    5. On the security tab, in the accepted community names section, add the community name that you typed in step 3. The snmp community name is read-only. 6. Select the accept snmp packets from any host or accept snmp packets from these hosts option, depending on your organization's environment. 7. If ...

  • Page 72: Trusted Application

    Note: you cannot configure the blackberry administration service services to use a local system account. The blackberry administration service console cannot run when you configure the blackberry administration service services to use a local system account. Before you begin: verify that the local s...

  • Page 73: Application

    If you do not add the windows account that runs the blackberry collaboration service to the rtcuniversalserveradmins group, you must manually provision each blackberry collaboration service instance as a trusted application. If you change the listening port number or if the fqdn of the instant-messa...

  • Page 74

    2. In a text editor, open the rimpublic.Property file. 3. At the end of the file, type improxy.Rimmsconnector.Autoprovision=false. 4. Save and close the rimpublic.Property file. 5. In the windows® services, restart the blackberry collaboration service. Related topics manually provision the blackberr...

  • Page 75: Server Upgrade Process

    Troubleshooting the blackberry enterprise server upgrade process 12 failed to write license key to the database this error message appears when you try to add the blackberry® client access license key during the installation process. Possible solution after you restart the computer during the blackb...

  • Page 76: "3"

    1. If you installed the ibm® lotus® domino® server recently but you did not start it yet, start it and stop it. 2. Restart the setup application. Attempt to establish connection failed with security reason "3" this message appears in the ibm® lotus® domino® console after you install and start the bl...

  • Page 77

    3. Complete the instructions on the screen. 4. Restart the blackberry enterprise server setup application. The blackberry monitoring service cannot monitor events possible cause the snmp service was not installed before the blackberry® enterprise server software was installed. Possible solution to p...

  • Page 78: Start

    Various blackberry enterprise server components do not start possible cause possible solution the blackberry® administration service, blackberry mds connection service, or blackberry collaboration service is configured to use a dynamic port when it connects to the blackberry configuration database, ...

  • Page 79: Administration Service

    You cannot create a user account in the blackberry administration service possible cause possible solution the blackberry® administration service is configured to use static ports when it connects to the blackberry configuration database server, but the blackberry configuration database server uses ...

  • Page 80: Replication

    3. On the administration service - high availability tab, in the pool name field, type the name of the blackberry administration service pool. 4. In the windows® services, restart the services for the blackberry administration service. Ibm lotus domino takes a long time to complete cluster replicati...

  • Page 81: Glossary

    Glossary 13 aes advanced encryption standard api application programming interface ajax asynchronous javascript® and xml blackberry cal a blackberry® client access license (blackberry cal) limits how many users you can add to a blackberry® enterprise server. Blackberry domain a blackberry domain con...

  • Page 82

    Https hypertext transfer protocol over secure sockets layer ibm db2 udb ibm® db2® universal database iis internet information services ip internet protocol ip address an internet protocol (ip) address is an identification number that each computer or mobile device uses when it sends or receives info...

  • Page 83

    Raid redundant array of independent (or inexpensive) disks sms short message service snmp simple network management protocol sql structured query language srp server routing protocol ssl secure sockets layer tcp/ip transmission control protocol/internet protocol (tcp/ip) is a set of communication pr...

  • Page 84

    Extensible markup language upgrade guide glossary 82.

  • Page 85: Provide Feedback

    Provide feedback 14 to provide feedback on this deliverable, visit www.Blackberry.Com/docsfeedback . Upgrade guide provide feedback 83.

  • Page 86: Legal Notice

    Legal notice 15 ©2011 research in motion limited. All rights reserved. Blackberry®, rim®, research in motion®, and related trademarks, names, and logos are the property of research in motion limited and are registered and/or used in the u.S. And countries around the world. Safari is a trademark of a...

  • Page 87

    Documentation to the extent they cannot be excluded as set out above, but can be limited, are hereby limited to ninety (90) days from the date you first acquired the documentation or the item that is the subject of the claim. To the maximum extent permitted by applicable law in your jurisdiction, in...

  • Page 88

    Whatsoever, in relation thereto. Your use of third party products and services shall be governed by and subject to you agreeing to the terms of separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a license or other agreement with ri...