Use Mobile Admin with BlackBerry Enterprise Server

This section describes how Mobile Admin works through a BlackBerry Enterprise server.

If you are using a BlackBerry Enterprise server, Mobile Admin Server requires the BlackBerry Enterprise Server and Mobile Data Service (MDS) (also called the MDS Connection Service) to be configured correctly.

If you are not using a BlackBerry Enterprise Server, see Configure network access for BlackBerry smartphones.

How Mobile Admin works with BlackBerry Enterprise Server

The following illustration shows how Mobile Admin connects your BlackBerry smartphone to your network, and how your network data is protected when you use a BlackBerry Enterprise Server.

Mobile Admin Server is connected to the servers and computers that you want to manage with Mobile Admin. Information about these servers and computers is sent to BlackBerry Enterprise Server using an unencrypted connection or encrypted with HyperText Transport Protocol – Secured (HTTPS). BlackBerry Enterprise Server encrypts and transmits the data with TDES and/or AES through the Internet and the wireless network to the IT administrator’s BlackBerry smartphone. The BlackBerry smartphone decrypts the data so that it can be viewed using the Mobile Admin Client.

Similarly, Mobile Admin Client commands from the BlackBerry smartphone are encrypted with TDES and/or AES, as well as HTTPS if you have configured it. The data is sent over the wireless network and the Internet to BlackBerry Enterprise Server. BlackBerry Enterprise Server decrypts the commands from TDES and/or AES and sends them to Mobile Admin Server, which decrypts them from HTTPS (if required) and performs the requested actions.

You can configure BlackBerry Enterprise Server to detect if network capabilities on the device are secured using RSA SecurID authentication. For information about securing network capabilities through BlackBerry Enterprise Server using RSA SecurID, see the BlackBerry Enterprise Solution and RSA SecurID white paper located at www.blackberry.com/products/pdfs/bb_rsa_whitepaper.pdf.

The above diagram shows Mobile Admin Server and BlackBerry Enterprise Server installed on separate servers. However, you can choose to install the Mobile Admin Server on the same computer as BlackBerry Enterprise server. For more information, see Install the Mobile Admin Server.