BlackBerry Enterprise Server Components

BlackBerry Enterprise Server is not a single service. Like many complex application servers, BES is comprised of a

number of services and components that are integrated to deliver the full feature set. Below is a list of the

components and a description of their function.

Component Name Component Function

BlackBerry Attachment Service The BlackBerry Attachment Service converts email

attachments into a format that can be viewed on
BlackBerry devices.

BlackBerry Collaboration Service The BlackBerry Collaboration Service encrypts the

communications between instant messaging servers and
the instant messenger client on client on BlackBerry
devices.

BlackBerry Configuration Database The BlackBerry Configuration Database is a relational

database that stores the configuration information for
the BES components, using either Microsoft SQL
Developer Edition (MSDE) or Microsoft SQL Server.

BlackBerry Controller The BlackBerry Controller monitors BES components

and restarts any stopped services.

BlackBerry Dispatcher The BlackBerry Dispatcher handles compression and

encryption for BlackBerry data.

BlackBerry Manager The BlackBerry Manager is used for administration of

the BES.

BlackBerry MDS Connection Service The BlackBerry MDS Connection Service is used to
connect BlackBerry devices to online content and
applications.

BlackBerry MDS Services The BlackBerry MDS Services provide connectivity

between BlackBerry MDS Studio Applications on
BlackBerry devices and enterprise applications.

BlackBerry MDS Studio Application The BlackBerry MDS Studio Application Repository
Repository stores and manages BlackBerry MDS Studio
Applications.

BlackBerry Messaging Agent The BlackBerry Messaging Agent serves as the

connection between the email server and the other BES
components.

BlackBerry Policy Service The BlackBerry Policy Service manages the IT policies
for the BlackBerry devices.

BlackBerry Router The BlackBerry Router connects to the BlackBerry

Infrastructure and communicates with the BlackBerry
devices.

BlackBerry Synchronization Service The BlackBerry Synchronization Service syncs

organizer data (tasks, calendar, etc.) between the email
server and the BlackBerry devices.

The component-based design of BES provides flexibility and scalability as you plan your implementation. This is due

to the fact that the components can be installed on a single server or distributed among several servers based on

your needs. The BlackBerry Enterprise Server components are integrated to deliver the desired services to your

handheld clients.

BlackBerry Enterprise Server Requirements and Prerequisites

The BlackBerry Enterprise Server system requirements vary based on the number of users supported. Below are the

recommended minimum requirements for a BlackBerry Enterprise Server v4.1 for Microsoft Exchange that supports

500 users. Refer to the BlackBerry Enterprise Server Version 4.1 for Microsoft Exchange Server Capacity Calculator
at the BlackBerry Technical Solution Center (http://www.blackberry.com/btsc/) to calculate the system

requirements for your environment.

• Intel® Pentium® IV, 2 GHz or better.

• 1.5GB RAM.

BES supports specific Microsoft Windows and Exchange environments. Following are the basic software

requirements.

• Microsoft Windows 2000 Server or Windows Server 2003.

• Microsoft Exchange 5.5 (SP4 or better), Microsoft Exchange 2000 (SP2 or better), Microsoft Exchange

2003, Microsoft Exchange 2007.

 • Microsoft Internet Explorer 6.0 or better.

In addition to the basic hardware and software requirements, there are a number of prerequisites for BES. Some of

the prerequisites are installed as a part of the BES setup program, but others must be installed prior to starting the

BES installation. Below is the list of prerequisites.

Prerequisite Required/ Optional Notes

Microsoft Messaging Queue Optional This is required for installations

(MSMQ) Version 3.0 that will use Microsoft Windows
Messenger.

Microsoft .NET Framework Required This may be installed during BES

Version 1.1 installation. SP1 is required to use
Microsoft Windows Messenger.

Microsoft Data Access Required This requires either Security Patch

Components (MDAC) Version MS04-003 (Version
2.8 2000.85.1025.00) or SP2 (Version
2000.86.1830.00) for Microsoft
Windows Server 2003 SP1.

Java® 2 Platform, Standard Required This may be installed during BES

Edition (J2SETM) Runtime installation.
Environment Version 5.0
update 9

Internet Service Manager for Optional This is required for Microsoft

Internet Information Services Exchange 2007 support.

Microsoft Exchange Required The appropriate tools for your

administration tools Exchange version should be
installed.
Microsoft Exchange Version 5.5
Administrator Microsoft Exchange
2000 System Manager
Microsoft Exchange 003 System
Manager
Microsoft Exchange Server MAPI
Client and Collaboration Data
 Objects 1.2.1
For Exchange 2007, Microsoft
Exchange Server MAPI Client and
Collaboration Data Objects 1.2.1,
or Microsoft Exchange Server 2003
System Manager with SP2

Refer to the BlackBerry Enterprise Server for Microsoft Exchange Installation Guide for your version of BES for an

up-to-date list of system requirements, especially if you are planning to implement additional services above and

beyond the basic messaging and collaboration.

What is BIS?
BIS stands for BlackBerry Internet Service. It gives your BlackBerry access to the Internet. It’s like an
ISP, but for your smart-phone instead of your home computer. Every time your BlackBerry gets an
email, or accesses a webpage, it does so through BIS (unless you’re using BES)

What is BES?
BES stands for BlackBerry Enterprise Server. It gives your BlackBerry access to a corporate intranet.
The intranet is the private, internal, network within a company. It’s kind of like a mini-internet that is
cut off from the rest of the world. Many intranets allow you to communicate with the Internet as well,
but with added layers of security.

The Differences
Both BES and BIS allow your BlackBerry to get email, as well as retrieve webpages and use third-
party applications (like WICKSoft Mobile Documents!). All traffic from your phone goes to the BES /
BIS server, and then the BES / BIS server communicates with the world on your behalf.

The difference, ultimately, lies in where the server resides and the level of control and security you
get.

In the case of BIS, your carrier operates the server. Everything from BIS to your handheld is
encrypted, but that’s about the extent of the security features. The carrier can decide what
applications run on your phone, and how applications communicate with the Internet.

For BES, your company operates the server, and usually has it sitting somewhere within the corporate
network. The IT department controls all aspect of the BES server, and it’s likely sitting in a nice and
secure location.
So really, what does this mean?
It’s all about privacy. In the case of BIS, everything operates on a public network. Data from your
phone to your carrier is encrypted, but ultimately your carrier is communicating with the Internet,
which isn’t exactly the pinnacle of a secure environment. The odds of somebody intercepting your
data, or worse, compromising the different systems you access, are much higher. I don’t want to
scare anyone though: BIS is typically more secure than accessing the Internet from home using an
ISP, and is WAY more secure than using WiFi or BlueTooth.

With BES, most of your data remains in a private, closed network. Your BlackBerry has a secure link
directly to the corporate environment, because the BES server is located in the office somewhere. The
only way for someone to monitor or intercept your data would be for them to infiltrate your
organization.

So think of it like this: In the BIS case, a guy with an envelope (your data / email) is running around
New York City trying to deliver the package to you—hopefully you can trust him, and hopefully nobody
thumps him over the head and takes the envelope. For BES, the guy delivering the envelope is
walking around inside a secure compound, among trusted people who have proper security clearance,
and cameras are monitoring his every move as he travels the 50 feet from his desk to your desk.

Wait, there’s more!

I’ve been overly simplistic in my description of BES. BES really does a whole lot more than just fetch
email. For one, it acts just like a VPN in the sense that in makes sure ALL data travelling between
your BlackBerry and your office is encrypted.

Also, BES provides tools to publish applications, and define how those applications can interact with
the phone and the network.

Imagine that you have 500 BlackBerrys in your organization, and you want to install an application
(like WICKSoft Mobile Documents) on each of the phones. BES will let you ‘push’ a copy of the
application to each of the phones without ever having to physically touch a single device. You don’t
have to worry about an end-user making a configuration mistake, or forgetting to install the
application. It’s all done automatically, and securely.

BES also lets you remotely wipe and lock a device. This is very useful for those cases where people
forget their BlackBerrys in the back of a taxi, or have them stolen.

Restrictions
Not all wireless carriers offer the same level of BIS service. Some of you are unlucky enough to be
stuck with one that restricts third-party applications from accessing the Internet. This means that a lot
of excellent third-party applications for the BlackBerry are simply unavailable.

With BES there are no inherent restrictions, because your company gets to decide all of these things.
Want GoogleTalk to work, but not Yahoo! Messenger? No problem: BES lets your company enable one,
and cripple the other.

In conclusion
BIS provides a direct link between your phone and your wireless provider, but after that all traffic
essentially goes out over the Internet. Any and all security becomes the responsibility of the
BlackBerry application in question, so there are no security guarantees. That said, BIS does a good
job at providing Internet and email support and, best of all-- you don’t have to set anything up.

BES provides what is essentially a direct link between your phone and your office environment. It’s
very secure, flexible, and gives your company control over all aspects of the BlackBerry. There is a
certain ‘baseline’ security inherent in all data transactions, and your IT department can always disable
your BlackBerry if it’s been compromised.

Smaller companies, or individuals, are well served by BIS—it provides you with almost everything you
need. Larger organizations, with their own internal mail systems and other infrastructure, should
definitely be using BES.