You are on page 1of 1

Upcoming Renewal of SSL Certificates for BlackBerry

Provisioning System
According to the documents provided by BlackBerry (External_SSL_Certificates_FAQ.rtf)
We will need to perform action 2 tasks in order to update the current SSL certificates for
BlackBerry provisioning services:
Action 2: If you or your reseller partners are using a Provisioning System that is
closed from the Internet, or required the attached SSL Server Certificates +
Intermediates, please ensure your Provisioning Systems Certificate Key Stores are
updated manually during the maintenance windows identified in the communication
you received with this document.

Additionally we have to proceed with the following list of tasks, in order to be ready when
BlackBerry launches officially the new secure access to their servers.
1. Try to forecast the activation load for Blackberry Systems around the dates of
BlackBerry maintenance window, May 9 00:00-02:00 (EDT) to be prepared for
possible affectation during that day
2. Verify when is the very last day of provisioning service for BBRY allowing access
with the SHA-1 certificate (May 9 00:00-02:00 (EDT)) and stop the day before the
activation of blackberry services
3. Creation of a detailed guide for SSL certificates update (Containing information
located in the certificates repository on both environments and the keytool
commands to execute the update)
4. Backup BBRY cartridge and certificates repository from JAMU and WASS
5. Update BBRY cartridge in case it is necessary
6. Update of NE configuration for BBRY if needed
7. As soon as the new certificates are online in the BlackBerry provisioning services,
test the access out of the ASAP box
8. Add the new certificate (Already provided by BlackBerry Services Manager)
9. Test access to Blackberry provisioning services from ASAP box
10. Send testing orders
11.Monitor during 2 days the behavior of the BBRY implementation

You might also like