Release Notes BlackBerry Enterprise Service 12 Version 12.0 Published: 2014-11-13 SWD-20141113094143108 Contents Fixed issues......................................................................................................................4 Known issues................................................................................................................... 5 Legal notice....................................................................................................................11 Fixed issues Fixed issues 1 Installation and upgrade fixed issues If you installed BES5 and BES10 in your organization's environment and both used the same database, when you upgraded to BES12, which upgraded the database, the upgrade might have failed. (JI 800613) If you migrated an email profile that was assigned to an Android device that had Secure Work Space installed, the device resynchronized because the profile name was different. (JI 786382) When you moved BES10 users to BES12 an unexpected directory error might have occurred. (JI 782994) After you installed BES12 the BlackBerry Gatekeeping Service did not start. (JI 773679) If you upgraded the Java Cryptography Extension (JCE) files, some of the BES12 components such as BES12 Core and the BlackBerry MDS Connection Service, did not work correctly. (JI 772813) User and device management fixed issues After you removed an organization notice from a user's profile, the notice might have still displayed on the user's device. (JI 772343) Management console After you upgraded from BES5 to BES12, in the Edit user page, if you selected the Allow user to activate a BlackBerry OS device checkbox, the Save button moved down the page and you could not use the scroll bar to move to the button and click it. (JI 799701) If you created a VPN profile for iOS devices with the Connection type set to IPSec, the profile appeared as the Connect on Demand profile when a user viewed the VPN profile on iOS 8 devices. However, the device did not connect automatically to the VPN when the user attempted to open a page in the work domain in Safari. (JI 797416) If you created a VPN profile for iOS devices with the Connection type set to IPSec, the profile was pushed to devices but did not appear as the Connect on Demand profile when a user viewed the VPN profile on iOS 7 devices. (JI 791726) When you clicked Company directory in the left menu, a SQLServerException might have displayed in the CORE log file. (JI 715022) 4 Known issues Known issues 2 Installation and upgrade known issues When you upgrade from BES5 to BES12, the Microsoft Active Directory connection for BES5 is migrated automatically. This connection supports all devices that connect to this directory. You do not have to create a new Microsoft Active Directory connection to this directory. After you install BES12, if you stop the BES12 Core service and then stop the BlackBerry MDS Connection Service service, the BlackBerry MDS Connection Service service might not stop. (JI 815036) Workaround: Make sure that the BES12 Core service is running before you stop the BlackBerry MDS Connection Service service. When you migrate BlackBerry 10 devices to BES12, some of the devices might not migrate successfully. (JI 812920) After you migrate an IBM Notes Traveler email profile, if you assign the profile to a user, the user cannot connect to their account. (JI 812914) Workaround: On the Settings tab in the migrated email profile, remove "%UserDomain%" from the domain field. When you migrate BlackBerry 10 devices to BES12, some of the devices might report an error. (JI 811979) Workaround: 1. Navigate to C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Service 10\EMWS\webapps\mdm\WEB-INF \classes. 2. In the PBMS.properties file change the following settings: • pollTime=12 • maximumRequestsPerMinute=2 3. Restart the Enterprise Management Web Service. 4. After device migration is complete, change the PBMS.properties file settings back to their original parameters and restart the Enterprise Management Web Service. If you are migrating multiple devices for the same user, do not select the Activation period expires after the first device is activated checkbox. After you install BES12, if you restart the BES12 Core service in the Windows Services panel, it does not stop. (JI 810133) When you are migrating devices from BES10 to BES12, the CPU might reach 100%. (JI 808263) 5 Known issues Workaround: 1. Navigate to C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Service 10\EMWS\webapps\mdm\WEB-INF \classes. 2. In the PBMS.properties file change the following settings: • pollTime=12 • maximumRequestsPerMinute=2 3. Restart the Enterprise Management Web Service. 4. After device migration is complete, change the PBMS.properties file settings back to their original parameters and restart the Enterprise Management Web Service. When you are upgrading two instances of BES10 to BES12, if the display name of one of the BES10 databases contains special characters, you cannot switch between the BES10 databases. (JI 807294) Workaround: Remove the special character from the display name of the BES10 database. If you use an incorrect SRP host name when you install a router, the installation continues and the router displays in the Windows Control Panel but the router does not work. (JI 807106) Workaround: Uninstall the router and then reinstall it using the correct SRP host name. After upgrading from BES10 to BES12, when you migrate Q5 devices they might remain in a pending state. (JI 799486) When you are using a version of Google Chrome that uses a language other than English, after you upgrade from BES5 to BES12, the BlackBerry OS Settings tab displays in the language that Google Chrome is using. (JI 794513) Workaround: Use a version of Google Chrome that has the language set to English. After you upgrade from BES5 to BES12, if the BlackBerry Administration Service service stops, when you restart the BlackBerry Administration Service service and log in to the console, the log in page keeps reloading. (JI 788051) After you upgrade from BES5 to BES12, if you use the Enterprise Transporter tool to move multiple users, when you click on User Summary > Advanced Settings you cannot assign anything to the users. (JI 787042) User and device management known issues Users cannot establish a VPN connection when they are using PKI profiles that are pushed from BES12. (JI 810523) When the user starts to install the MDM profile on an iOS device, the Safari browser on the device contacts BES12 for the profile. In certain circumstances, instead of being prompted to install the MDM profile, the user is directed to the Settings screen on the device and is unable to install the profile. (JI 801351) Workaround: Stop the BES12 Client and start it again. 6 Known issues The Safari browser on an iOS device can use a VPN profile that is associated with an app with the Enable per-app vpn option enabled to access a URL that is not specified in the Safari domain of the VPN profile. (JI 781621) If your organization's BES5 environment was set up for high availability, and you upgrade to BES12, if one of the servers stops responding, you cannot move users from one server to the other, and you cannot create users on the server that has stopped responding. (JI 746567) When you create an Enterprise Connectivity Profile and assign the profile to a Secure Work Space user, if you deactivate the BES12 Client and then reactivate the client, the user cannot log in to the client. (JI 727103) Workaround: Uninstall and reinstall the BES12 Client. Management console known issues If your organization's environment contains BES5 and BES12, if you restart the BlackBerry Administration Service - Application Server service and then click on a BlackBerry OS user in the BES12 management console and click Advanced Settings for the user, you are redirected to a page that displays an error message. (JI 818494) Workaround: In the browser address bar, type the URL of the management console, log out of the console and then back in. If you click the BlackBerry OS Settings tab, and then leave the console open for fifteen minutes, when you click Specify IT policy distribution settings, an error might display. (JI 815816) Workaround: Log out of the console and then log back in. When you create a Proxy profile, if you use a slash (/) character in the name, the name does not display correctly in the Add an enterprise connectivity profile page. (JI 814775) Workaround: Do not use a slash (/) character in the name of a Proxy profile. On the Users and devices tab, no information displays in the SIM column for Windows Phone devices. (JI 814208) On the dashboard, the Devices by carrier area does not include Windows Phone devices. (JI 813089) When you create an administrator role and set the Directory access for the role to All company directories, after you assign the role to an administrator user, when that administrator user logs in to the console they cannot create directory users. (JI 813022) Workaround: Set the Group management for the role to All groups and users. Or Set the Directory access for the role to Selected company directories only and type the name of the company directory. After you resend an IT policy for BlackBerry OS users, the IT Policy and Advanced Settings do not display in the management console under the User summary and Device model tabs. (JI 811774) 7 Known issues If a user has a BlackBerry 10 device, a Windows Phone device, and an Android device, when you assign a shared certificate to the user, the shared certificate gets reconciled on all three devices when it should only be reconciled on the Android device. (JI 810961) You cannot type "/traveler" in the hostname field of an email profile. (JI 810306) Workaround: Change the IBM Notes Traveler server root website to re-direct to "/traveler". After you upgrade from BES5 to BES12, in the Group settings page you cannot click on the profile name to see details about any policies or profiles that are assigned to the group. (JI 810121) If you have both a Microsoft Active Directory connection and an LDAP connection configured for your company directory connections, adding users by importing a .csv file displays a message that an error was detected in the .csv file and the users are not imported. (JI 809831) Workaround: Remove the LDAP connection. When you replace an Apple profile signing certificate, the message that displays states that users must reactivate their devices, however that is not true. (JI 808620) If you have assigned a user certificate to a user and then edit the user certificate profile to remove the assigned certificate and add a different certificate, the new certificate is not shown in the management console and is not sent to the device. (JI 807990) If you have configured a Microsoft Active Directory company directory connection and you enable directory linked groups and onboarding, when you specify groups from the company directory for onboarding, the drop-down list to select groups may not appear in some browsers. (JI 807986) Workaround: Search for the group by typing the name in the Search field. When you create a BBOS IT policy, if you use Unicode characters in the policy name, when you delete the policy, the name of the policy does not display correctly in the deletion confirmation message. (JI 807527) After you use the Enterprise Transporter tool to move a BlackBerry OS user who is an administrator from one BES12 server to another BES12 server, the administrator account that is associated with the user cannot be deleted. (JI 807474) Workaround: 1. Click Users and Devices . 2. Find the user account. 3. Beside User details, click the edit icon. 4. Select Allow user to activate a BlackBerry OS device. 5. Click Save. 6. In the BlackBerry OS Settings tab, find the user account. 7. Delete the user account. 8 Known issues 8. Under Manage users, select View more criteria. 9. Change the Queued removal of BlackBerry Service option to True. 10. Click Search. 11. If the user displays in the search results, click Immediate removal of BlackBerry services. If you have upgraded from BES5 to BES12, adding users by importing from a .csv file displays an error message that BES12 cannot import the .csv file. If you refresh the browser the users in the .csv file are actually imported. (JI 806794) If you have groups with more than 2000 users and administrators who are assigned roles that allow them to administer only certain groups, those administrators might not be able to successfully perform searches, assign policies and profiles, or perform other large-scale operations on the large groups. (JI 803202) Workaround: Have an administrator who can administer all groups perform the action. If you create a VPN profile and select the Enable per-app VPN option, then add an app to the profile and assign the app to a user, if you later remove the app from the user, in the VPN profile you cannot remove the Enable per-app VPN option. (JI 802642) If you attempt to set the network location for internal apps to a folder with a localized name on a French, German, or Spanish server, you will not be able to save the location. (JI 800979) When you create a directory connection with a long name, after you add one directory group to the directory connection, the Add directory group button disappears. (JI 798557) The bwcn.log and local_host_access.log files are not stored in the same location. (JI 792988) On the Users and devices tab, no information displays in the Free internal storage column for Windows Phone devices and no information displays in the Total and Free internal storage columns for BlackBerry OS devices. (JI 780608) If the database is not accessible, no log files for the BES12 Core are created. (JI 758247) App known issues On the Apps tab, when you try to update the NFL Mobile Canada app, an error displays. (JI 814858) For some VPP accounts, on the Used license page, the app status does not indicate that some apps are installed. (JI 807638) BES12 Self-Service known issues After you upgrade from BES5 to BES12, Active Directory users might not be able to log into the BES12 Self-Service portal using their Active Directory credentials. (JI 810936) 9 Known issues BlackBerry Resource Kit known issues If you use the Enterprise Transporter tool to move users from a BES5 database that has been upgraded to BES12, you cannot fully manage the users. (JI 798529) 10 Legal notice Legal notice 3 ©2014 BlackBerry. All rights reserved. BlackBerry® and related trademarks, names, and logos are the property of BlackBerry Limited and are registered and/or used in the U.S. and countries around the world. iOS is a trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. iOS® is used under license by Apple Inc. Safari is a trademark of Apple Inc. Android, and Google Chrome are trademarks of Google Inc. IBM Notes Traveler is a trademark of International Business Machines Corporation. Microsoft, and Windows Server are trademarks of Microsoft Corporation. Java is a trademark of Oracle and/or its affiliates. All other trademarks are the property of their respective owners. This documentation including all documentation incorporated by reference herein such as documentation provided or made available at www.blackberry.com/go/docs is provided or made accessible "AS IS" and "AS AVAILABLE" and without condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however, BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this documentation to you in a timely manner or at all. This documentation might contain references to third-party sources of information, hardware or software, products or services including components and content such as content protected by copyright and/or third-party websites (collectively the "Third Party Products and Services"). BlackBerry does not control, and is not responsible for, any Third Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by BlackBerry of the Third Party Products and Services or the third party in any way. EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE QUALITY, NONINFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NONPERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL BLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON- 11 Legal notice PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALL HAVE NO OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY. THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED BLACKBERRY DISTRIBUTORS (ALSO INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS. IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR, EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANY AFFILIATES OF BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION. Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with BlackBerry's products and services may require one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any Third Party Products and Services that are provided with BlackBerry's products and services are provided as a convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warranties of any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a license or other agreement with BlackBerry. Certain features outlined in this documentation require a minimum version of BlackBerry Enterprise Server, BlackBerry Desktop Software, and/or BlackBerry Device Software. The terms of use of any BlackBerry product or service are set out in a separate license or other agreement with BlackBerry applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN 12 Legal notice AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRY PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION. Certain features outlined in this documentation might require additional development or Third Party Products and Services for access to corporate applications. BlackBerry Limited 2200 University Avenue East Waterloo, Ontario Canada N2K 0A7 BlackBerry UK Limited 200 Bath Road Slough, Berkshire SL1 3XE United Kingdom Published in Canada 13