System information

4
Configuring your environment
Setting database permissions
When you run the setup program, the account that you use must have permissions on the database server. The
type of permission depends on the setup type that you choose and whether you are creating the BlackBerry
Configuration Database on the same computer as the BlackBerry Enterprise Server or on a remote database
server.
If you create the BlackBerry Configuration Database on the same computer as the BlackBerry Enterprise Server,
you also install a custom event-based notification system that is designed to reduce the number of database
queries made by the BlackBerry Enterprise Server to the BlackBerry Configuration Database. You require a higher
level of permission for this installation because you must register this database notification system.
If you create the BlackBerry Configuration Database on a remote database server, you do not install the database
notification system automatically, so you require a lower level of permission. You can install the database
notification system manually after you complete the setup program.
If you install the BlackBerry MDS Services, you must use a database login instead of a Windows account to create
and access the BlackBerry MDS Services databases. If you are using a database login to create the BlackBerry
Configuration Database, you must use a different login for the BlackBerry MDS Services databases.
The BlackBerry MDS Services store their BlackBerry MDS Service database access credentials in plain text form in
<Installation directory>\BlackBerry MDS Services 4.1.1\jakarta-tomcat-5.5.9\conf\server.xml. To protect the
access credentials in that storage location, you must limit read and write control to that location.
If you install MSDE 2000 during the BlackBerry Enterprise Server installation, you do not need to set additional
permissions. When you select Windows (trusted) authentication during the BlackBerry Enterprise Server
installation, the required permissions are given to the account that you use to run the setup program
.
Visit http://msdn2.microsoft.com/en-us/library/aa905156(SQL.80).aspx for more information about Microsoft
SQL Server security.
Setting database permissions
Configure remote authentication for the local system account
Create Windows groups to support administrative roles