To permit push applications to make trusted connections (SSL) to a BlackBerry MDS Connection Service, some preparation steps are required to be done beforehand. Follow the setup procedure as follows:
1. Enable Push Encryption from the BlackBerry Administration Service
· Open the BlackBerry Administration Service Web Console
· Go to “Servers and Components” section
· Expand “BlackBerry Solution Topology”
· Expand “Component View” under “BlackBerry Domain”
· Expand “MDS Connection Service”
· Click on the MDS instance to which your push application is connected
· In the “Instance information” tab, make sure the port number which the BlackBerry devices open to listen to the push messages is defined under the “Ports enabled for reliable pushes” section
· In the “Instance information” tab, enable “Push Encryption” under the “Access Control” section by setting the value to “Yes”
· Switch to the “General” tab, make sure the “Web server listen port” and “Web server SSL listen port” are defined and there are no conflicts with the port numbers
· Restart the MDS-CS instance
· Notes: More information is available at: http://docs.blackberry.com/en/admin/deliverables/12107/Restricting_push_content_users_receive_on_devices_268662_11.jsp#Restrict_push_apps_from_sending_data_to_devices_547121_11
2. Import the BlackBerry MDS Connection Service to the key store of a push application by following this instruction:
· Notes:
i. For the last part in the instruction, which is to import the certificate to the push application, make sure the certificate is imported to the key store of the Java JRE which is being used by your push application
ii. In the step of adding the certificate to the key store, make sure you have the permission to change the key store file
iii. If the certificate is not correctly imported, a similar error will be thrown as “Unable to find valid certification path to requested target”
Now the push application is able to send SSL push request to the BlackBerry devices through MDS.