Welcome!

Welcome to the official BlackBerry Support Community Forums.

This is your resource to discuss support topics with your peers, and learn from each other.

inside custom component

BlackBerry® Enterprise Service 10

Reply
New Contributor
Posts: 8
Registered: ‎02-25-2011
My Device: Not Specified

Searching for BlackBerry Device Software Bundles

Hi,

I'm having problems trying to update device software. I need to be able to control device software updates, rather than allow users to decide.

 

I have configured the necessary option in the BAS. i.e. set "BlackBerry Device Software deployment managed by BlackBerry Administration Service" option to "Yes".

 

When I then select "Search for new wireless BlackBerry Device Software bundles" and populate the search criteria (e.g. Device model = 9700), I get no results, and the error - "The BlackBerry Administration Service cannot find the records you were looking for. Verify the search criteria you specified and try again". There are NO errors in the BBAS log. It doesn't seem to matter what I put in the search criteria, I get the same message each time.

 

Note, we do not use a proxy server.

 

If I select the "Refresh new BlackBerry Device Software bundles list" option, BES says "The BlackBerry Device Software bundles List has been queued to be refreshed", but the BBAS log then contains:

 

(03/24 11:31:25:096):{EJB-Timer-64[target=jboss.j2ee:service=EJB3,jar=100basServerManagementServer.jar,name=TimerManagerBean]} [com.rim.bes.bas.softwareconfigurationmanager.SoftwareConfigurationManagerUtilities] [WARN] [BBAS-2038] {u=SystemUser, t=51062} getAvailableOSBundlesFromNOC Failed to connect to NOC: https://GB.otasl.blackberry.com/pas/pas I/O exception: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed

 

&

 

(03/24 11:31:25:099):{EJB-Timer-64[target=jboss.j2ee:service=EJB3,jar=100basServerManagementServer.jar,name=TimerManagerBean]} [com.rim.bes.bas.timermanager.TimerManagerBean] [WARN] [BBAS-2042] {u=GuestUser, t=51061} _invokeExecuteMethod InvocationTargetException encountered when trying to execute the method: execute on the object: com.rim.bes.bas.softwareconfigurationmanager.UpgradeAvailableOSBundleTimerHandlerTimerData looks like: <timerData><timerId>183</timerId><handlerClassName>com.rim.bes.bas.softwareconfigurationmanager.UpgradeAvailableOSBundleTimerHandler</handlerClassName><nodeName>xxxxxxx.xx.xxx.xxxx</nodeName><handlerParameters>5000</handlerParameters><isRecurring>false</isRecurring><recurrencePeriod>0</recurrencePeriod><isSystemTimer>false</isSystemTimer><timerInitialStartDateTime><timerId>183</timerId><initialStartDateTime>2011-03-24T11:31:23.910Z</initialStartDateTime></timerInitialStartDateTime></timerData>. Exception is: java.lang.reflect.InvocationTargetException

 

It looks like BAS is trying to talk to the RIM NOC, but failing due to a certificate error, possibly an expired certificate?

 

If I browse from the BES server, using Chrome to https://GB.otasl.blackberry.com/pas/pas, I get a page saying "Sorry! Nothing could be found here", and the certificate is verified okay!?! If I look at the certificate information, it is valid until Feb 2012.

 

If I browse from the BES server, using IE8 to https://GB.otasl.blackberry.com/pas/pas it complains that "there is a problem with the website's security certificate" too! I cannot see a way of viewing the corticated details in IE8. There is no "shield" icon to press like there is normally for a secure site.

 

I have disabled IE Enhanced Browser Security for both Admins & Users, as suggested in this thread: http://supportforums.blackberry.com/t5/BlackBerry-Enterprise-Server/Device-Upgrade/m-p/233171, but that doesn't seem to have helped either.

 

Given that it's complaining about timestamps, I've also configured NTP on the relevant servers. Still the problem persists.

 

Can anyone help shed any light on this please?

 

Neal.

Guru III
Posts: 31,254
Registered: ‎06-25-2008
My Device:

I'm rockin the BlackBerry Passport, Z30, Z10, Q10, BlackBerry Mini Stereo Speaker, 64 gig PlayBook, BlackBerry Wireless Headset HS-700

My Carrier: I am on AT&T. Please edit your Personal Profile with your DEVICE TYPE, DEVICE OS and Carrier

Re: Searching for BlackBerry Device Software Bundles

the cert is ok when using www in front of it

https://www.gb.otasl.blackberry.com/pas/pas

 




Click here to Backup the data on your BlackBerry Device! It's important, and FREE!


Click "Accept as Solution" if your problem is solved. To give thanks, click thumbs up
Click to search the Knowledge Base at BTSC and click to Read The Fabulous Manuals

BESAdmin's, please make a signature with your BES environment info.


SIM Free BlackBerry Unlocking FAQ
Follow me on Twitter @knottyrope


Want to thank me? Buy my KnottyRope App here


BES 12 and BES 5.0.4 with Exchange 2010 and SQL 2012 Hyper V


New Contributor
Posts: 8
Registered: ‎02-25-2011
My Device: Not Specified

Re: Searching for BlackBerry Device Software Bundles

Hi,

 

I get "This web page is not available" when browsing to https://www.gb.otasl.blackberry.com/pas/pas

 

Not sure how this helps since the BAS is trying to get to https://gb.otasl.blackberry.com/pas/pas?

 

It's getting a little weirder now. Using Chrome, I sometimes get a valid certificate, and I sometimes get an expired one!

 

The expired certificate is valid from 16/03/2010 to 18/03/2011 (only just expired), and issued by Equifax. The valid certificate is from 06/02/2011 to 09/02/2012, and issued by GeoTrust. 

 

Are the request being handled by different servers, one with a valid certificate & one with an expired certificate?

 

Cheers, Neal.

New Contributor
Posts: 2
Registered: ‎06-09-2011
My Device: 9800
My Carrier: Vodafone

Re: Searching for BlackBerry Device Software Bundles

Hello Neal,

 

Any idea how you finally resolved this issue? I ma experiencing the exact same problem myself. Extremely grateful if you can share some tips.

 

Br,

 

Ronan