BlackBerry® Enterprise Solution

[dresslerc]

I orginally installed the MDS Service with BES 4.1.4.  I developed few applications and published them to my BES.  I was able to deploy the applications no problem.

Recently I upgraded to BES 4.1.6, now when I try to access the MDS console through the BlackBerry Manager it prompts for an SSL Certification.  I installed the Certificate and entered the admin username and password.  Once I've done that the MDS Integration Services panel says the following error:

There are errors in retrieving data from the server.  Please refer to the log for more information.

In the Windows Event Log I see the following error:

CMDSAGView: Bad hResult, -2147467261 - Object reference not set to an instance of an object., from AG web service call MDSAGAdminMgmt(testWsAccess - getServerStatus. Asking user to get SSL certificate.)

Now I did read somewhere (dont remember where) that RIM says to go the MDS web console to install the certificate then you should be able to access the MDS Console from the BlackBerry Manager.  The URL to the MDS web console is:  https://BESSERVER:7443/mds-admin

Now when I go to this web site I get the error saying "There is ap roblem with this websites security certificate" (IE).   I clicked on Continue to this website and it prompts for a username and password.  I tpye it in then I get a 404 Error file not found.  After doing alot of Googling I found this site: http://www.blackberryforums.com.au/forums/blackberry-general-discussion/2511-blackberry-mds-services...

This site states that with the SP5/SP6 4.1.6 that web console doesnt work anymore.   

Now if i go back to the BlackBerry Manager, click on my MDS tab, it prompts that I have to install the Certificate, but again this doesnt work even after I install the certificate.

I am lost.  How I can access the MDS section of the BlackBerry Manager in 4.1.6?

Thanks in advance! 

[AndyDufresne]

Install the certificate into the trusted root store.  Do not let Windows / Internet Explorer automatically install it into the store it wants to.

[dresslerc]

Thanks for the tip.  However it looks like IE automatically put it there in the first place.  I did manually force it to put it back in the Trusted Root but it didnt help any either.

Any other idea?  Maybe? 

[AndyDufresne]

I've not had a problem managing MDSS / MDS-IS when doing it this way.

I would launch the certificate manager on the machine, and remove any of the MDSS/MDS-IS certificates and then try reinstalling them.

[dresslerc]

I looked through the entire list and couldnt find anyhting w/ MDS.  Only one I did find related to this server was one that was called the server name.  If I removed it, then in the Blackberry Manager would prompt me again for hte certificate but still wouldnt get anywhere.

I did try to regenerate a new certificate using the jks-generate.bat file.  I used the standard changeme key...maybe i broke it using this.  I odnt know.  Is there anyway to change the policy so the BB devices can search the repository?  that would be a temporary fix because right now I have it blocked that the users cannot search it. 

[AndyDufresne]

Check these:

KB15493 - Security prompt does not appear when installing the SSL Certificate for BlackBerry MDS Ser...

KB16159 - How to import and use a third-party signed certificate with BlackBerry MDS Integration Ser...

[dresslerc]

The first link wont work because RIM removed the apache all together in SP5/SP6.

I'll try the second link tommorow at work as I need some information from the domain controller expert.  I'll let you know if we get anywhere.

Thanks again for the tips 

[dresslerc]

We found the issue and resolved it:

http://supportforums.blackberry.com/rim/board/message?board.id=BlackBerryEnterpriseSolution&message....

Thanks for the help everyone!