[DaveIsBrave]

Hi
I have BES Express / Exchange 2010 /Win2008k
All latest just completed today, no users so far except me, ready to go live

But ...
I can't access the Admin Console via https //..:3443, I can access it via http //..:18180. And that seems fine, and fully functional ... I guess I'm more concerned it not correct before I go live.

The port (3443) is open, I can telnet to it and something (6 or so smilies characters) comes out. If I change the password, the server stops working until I change it back, so the password seems correct. I have checked the logs and they complete throughout to saying the server has started with a time. BAS-AS is 570 k in memory.

It seems to be something to do with the cert coming out the port ..

The kb articles don't seem to mention this scenario ...

Any ideas appreciated.

[freakinvibe]

The web administration service can be accessed via

https://bas_server/webconsole/login

No need to put any port number, it will use 443 by default.

[DaveIsBrave]

? 443 - the docs refer to 3443.
443 would be the IIS Server and I can't see anything there that refers to webconsole

but I did try it and the server just gives the standard page not found

[freakinvibe]

Go to the "Blackberry Server Configuration" applet and click on the "Administration Service - High Availability" tab. I have the following ports there (using BES and not BES Express):

HTTPS 443
HTTP 18180
HA JNDI 11100
Local JNDI 11099

If you have

HTTPS 3443

there, it should work with:

https://bas_server:3443/webconsole/login

What exact error message do you get in the browser?

[DaveIsBrave]

In the high availability area it refers to:
HTTPS: 3443
HTTP: 18180 etc ...

When using http:...:18180 all is as expected (web page delivered, log in to desktop or admin ...)
When using https:....:3443 nothing in IE (nothing not cert error or anything)

In chrome it says (net::ERR_TUNNEL_CONNECTION_FAILED)
Using plink -raw it delivers 6 characters and closes the port

I guess the first question is where would an error show up ?

I look in the start up log and it finishes with the time - which seems to indicate a clean startup. There are some error logs for the 2 services - they have 0 bytes

The windows event logs show the services start - but are otherwise uneventful.

[nobody7290]

Are other tomcat/java services are running on the host where the BES is running ?
Or, are otherr services are running which use the same port (3443) ?

[DaveIsBrave]

No no other tomcats - java wasn't on machine before blackberry installed it
This machine was built from the ground up - purpose built - very careful with prerequisites

1. Win2008k R2
2. Join Domain
3. Exchange 2010
Pedantic - no errors left in error log ...
4. Blackberry Enterprise Express

Nothing else
* Stop the server the port is closed
* Start it it is open

Thanks for your thoughts to date

[nobody7290]

You could test:
Stop and deacticvate the BAS service on the current machine.
Install BAS on a different server in the domain.
Posted via BlackBerryForums.com Mobile

[DaveIsBrave]

Yes I thought that too, but that's not a desirable solution.

I think I resigned to - it doesn't work - use the http alternative.

It doesn't really matter, the only thing is that currently no-one uses the machine, this is the opportunity to get it right. Once users are on, it causes disruption to fixing it.

Thanks for you help to date

[freakinvibe]

There are some error logs for the 2 services - they have 0 bytes

Which error logs are you referring to? BBAS-AS and BBAS-NC?

They should not be 0 bytes. Even if there are no errors they normally have some informational entries.

[DaveIsBrave]

In
C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\BAS\jboss\ejb\bin

There are two files:
11/04/2011 09:25 AM 0 BAS-AS_err.log
11/04/2011 09:25 AM 0 BAS-NCC_err.log

[nobody7290]

Originally Posted by DaveIsBrave

Yes I thought that too, but that's not a desirable solution.

I think I resigned to - it doesn't work - use the http alternative.

It doesn't really matter, the only thing is that currently no-one uses the machine, this is the opportunity to get it right. Once users are on, it causes disruption to fixing it.

Thanks for you help to date

This was not a suggestion, to use it forever, just, to find out, if there is a problem with the local computer configuration or with the general setup.
If you disable BAS on the server where it currently runs, you can later activate it again without a reinstall.

[freakinvibe]

I never looked at those logs, I don't know if they are useful at all. Have you checked the BBAS-AS and the BBAS-NC logs in the standard log folder of the BES.

[DaveIsBrave]

Yes

They show the server start and finish with the time taken to start up, they also show the two services (http & https) starting, and if I change the port in the High Availability area, they also show that.

They also show me logging in on the http port, but show nothing at all regards access to the https port - not even a mention of failure.

They show no errors

[freakinvibe]

Maybe there is something wrong with the self-signed certificate of BAS, please use the document below to create a new crtificate:

Import a new SSL certificate for the BlackBerry Administration Service and BlackBerry Web Desktop Manager - Administration Guide - BlackBerry Enterprise Server for Microsoft Exchange - 5.0.1

[DaveIsBrave]

Hi
I followed the steps there
- I had tried this, but gave it another shot ..

same result