Until you fix the issue, change the service startup type as manual for Blackberry Collaboration service in order to avoid multiple restarts.
If you see below error from the application event log:
The error clearly tells us, there is an issue with the certificate.
1. If any language rather than English is installed on the blackberry server. (Ensure the default language of the operating system is English.)
2. The certificate could have expired. (Request a new certificate from the CA)
3. Verify if the TLS certificate was requested properly. (If there is any entry missed while requesting the certificate, you need to request for new certificate from the CA to meet the required criteria)
Follow the KB24960 for requesting a new certificate
To request and install a certificate, perform the following steps on the server hosting the BlackBerry Collaboration Service:
Log in to the BlackBerry Collaboration Server as an administrator with permission to Enroll for a Web Server Certificate.
Click Start > Run, and type mmc.exe.
Open the File menu and select Add/Remove snap-in.
In the Add or Remove Snap-ins window, select Certificates, and click Add.
Choose Computer Account, and click Next.
Choose Local Computer, and then Finish.
Click OK on the Add or Remove Snap-ins window.
Expand Certificates.
Expand Trusted Root Certification Authorities and click Certificates. Make sure the root certificate is present for the Enterprise Certificate Authority in the domain.
Right-click Personal and select All Tasks > Request New Certificate.
Click Next.
If prompted to select a Certificate Enrollment Policy, select one under the category of Configured by your administrator. Click Next.
Select Web Server (If Web server is unavailable see the Additional Information section), and click the link for More information is required to enroll for this certificate. Click here to configure settings.
Click the Subject tab.
For Microsoft Lync Server 2010/2013:
Under the Subject Name section, change the Type to Common Name, and change the Value of the Fully Qualified Domain Name of the Microsoft Lync Server Pool, and then click Add.
Under the Alternative Name Section, change the Type to DNS, and change the Value to the Fully Qualified Domain Name of the Microsoft Lync Server Pool, and then click Add.
Again, under the Alternative Name Section, leave the Type specified as DNS, and change the Value to the Fully Qualified Domain Name of the server hosting the BlackBerry Collaboration Service.
Click Add.
Click the General tab.
Type OCSConnector for the Friendly Name, then click Apply, and OK.
On the Certificate Enrollment window, click Enroll.
Verify that the STATUS is Succeeded, and click Finish.
Check with your CA, they will receive the request. Once they approve the certificate, they will export the certificate and share the certificate with you.
Import the certificate which you have received from your CA.
Once the import is successful, you can start the service if it is stopped and change the service startup type to automatic.
From application event logs, you will see below event generated.
<2013-06-26 15:02:30.431 CEST>:[7]:<BBIM_ServerName_BBIM_2>:<EVENT>:<LAYER = SCM, BBIM server connects to the database>
Congratulations!!! you have successfully learned to fix the issue.
If you see below error from the application event log:
- <2013-06-24 00:56:30.430
CEST>:[152]:<BBIM_ServerName_BBIM_2>:<ERROR>:<LAYER = BBIM,
[OCSC] Error: No certificates were found matching the required criteria>
- <2013-06-24 00:56:30.446
CEST>:[153]:<BBIM_ServerName_BBIM_2>:<ERROR>:<LAYER = BBIM,
[OCSC] BlackBerry OCSConnector will terminate...>
The error clearly tells us, there is an issue with the certificate.
1. If any language rather than English is installed on the blackberry server. (Ensure the default language of the operating system is English.)
2. The certificate could have expired. (Request a new certificate from the CA)
3. Verify if the TLS certificate was requested properly. (If there is any entry missed while requesting the certificate, you need to request for new certificate from the CA to meet the required criteria)
Follow the KB24960 for requesting a new certificate
To request and install a certificate, perform the following steps on the server hosting the BlackBerry Collaboration Service:
Log in to the BlackBerry Collaboration Server as an administrator with permission to Enroll for a Web Server Certificate.
Click Start > Run, and type mmc.exe.
Open the File menu and select Add/Remove snap-in.
In the Add or Remove Snap-ins window, select Certificates, and click Add.
Choose Computer Account, and click Next.
Choose Local Computer, and then Finish.
Click OK on the Add or Remove Snap-ins window.
Expand Certificates.
Expand Trusted Root Certification Authorities and click Certificates. Make sure the root certificate is present for the Enterprise Certificate Authority in the domain.
Right-click Personal and select All Tasks > Request New Certificate.
Click Next.
If prompted to select a Certificate Enrollment Policy, select one under the category of Configured by your administrator. Click Next.
Select Web Server (If Web server is unavailable see the Additional Information section), and click the link for More information is required to enroll for this certificate. Click here to configure settings.
Click the Subject tab.
For Microsoft Lync Server 2010/2013:
Under the Subject Name section, change the Type to Common Name, and change the Value of the Fully Qualified Domain Name of the Microsoft Lync Server Pool, and then click Add.
Under the Alternative Name Section, change the Type to DNS, and change the Value to the Fully Qualified Domain Name of the Microsoft Lync Server Pool, and then click Add.
Again, under the Alternative Name Section, leave the Type specified as DNS, and change the Value to the Fully Qualified Domain Name of the server hosting the BlackBerry Collaboration Service.
Click Add.
Click the General tab.
Type OCSConnector for the Friendly Name, then click Apply, and OK.
On the Certificate Enrollment window, click Enroll.
Verify that the STATUS is Succeeded, and click Finish.
Check with your CA, they will receive the request. Once they approve the certificate, they will export the certificate and share the certificate with you.
Import the certificate which you have received from your CA.
Once the import is successful, you can start the service if it is stopped and change the service startup type to automatic.
From application event logs, you will see below event generated.
<2013-06-26 15:02:30.431 CEST>:[7]:<BBIM_ServerName_BBIM_2>:<EVENT>:<LAYER = SCM, BBIM server connects to the database>
Congratulations!!! you have successfully learned to fix the issue.
No comments:
Post a Comment