Skip to content

BlackBerry® Enterprise Service 10 Licensing

In BlackBerry® Enterprise Service 10 version 10.1, a new way of managing Licenses (formerly known as CALs) was introduced. A service named the BlackBerry Licensing Service is now installed, on the local host machine that runs the BlackBerry Administration Service. The BlackBerry Licensing Service is designed to communicate with the BlackBerry Licensing Infrastructure located in the BlackBerry Infrastructure. Communication passes through Port 443 to license.blackberry.com (68.171.242.252) which requires firewall access settings to be set to outbound initiated and bi-directional.

Licensing the BlackBerry Enterprise Service 10 domain and devices

Licenses control how many BlackBerry devices, iOS devices, and Android devices can exist in a BlackBerry Enterprise Service 10 domain at the same time. The license types that your organization uses determine the devices and features that you can manage using BlackBerry Enterprise Service 10. A license is used when you or a user activates a device. A device uses only one type of license at a time. You must use BlackBerry Management Studio to manage licenses. Depending on the licensing activation method that you choose, you can activate licenses in BlackBerry Management Studio or in the BlackBerry Account Center. The BlackBerry Device Service console accepts only BlackBerry Mobile Voice System CAL keys.

The terms 'CAL' and 'License Keys' are often used interchangeably. Here are the differences between the various CAL classes:

License Class

Description

Perpetual CAL

BlackBerry Enterprise Service 10 CALs that remain valid forever and do not expire for the version of the software that they have been issued against. Perpetual CALs have also been known as Permanent CALs in past versions of the BlackBerry Enterprise Server software.

Subscription CAL

BlackBerry Enterprise Service 10 CALs that have an end date embedded in them at the time that the CAL is issued. The end date is determined by when a customer's subscription contract ends. The subscription date may or may not be enforced for disabling the server when the subscription date is reached. Subscription CALs will remain valid against any version of BlackBerry Enterprise Service, as long as the subscription contract has not ended.

Trial/Temporary CAL

Trial licenses for BES 10.x are available to customers, so that they can evaluate the BlackBerry solution for pre-defined periods of time (up to 60 days).

There are a variety of prefixes that are assocated with the different types of licenses:

License Prefix

Description

BESCAL

CAL Key Prefix for Perpetual BES CAL Key

BESELM

License Prefix for BES 10.x and above License Key

BESX35

CAL Key Prefix for Perpetual & Temporary BES CAL Key (BES 5.x)

BPAS50

CAL Key Prefix for Temporary BDS 5.0 Licenses

BDSP60

CAL Key Prefix for Perpetual BDS Licenses (for BDS 10.0 ONLY)

BDSS60

CAL Key Prefix for Subscription BDS Licenses (for BDS 10.0 ONLY)

UDSS60

CAL Key Prefix forBES 10.0 EMM Corporate BlackBerry(for BDS 10.0 ONLY)

UDST60

CAL Key Prefix for Trial BDS License (for BDS 10.0 ONLY)
CAL Key Prefix for Trial BES 10.1 License (for BES 10.1 EMM Corporate)

UDSS60

CAL Key Prefix for Temporary BDS Licenses (for BDS 10.0 ONLY)

BDST60

CAL Key Prefix for Temporary BDS License (for BDS 10.0 ONLY)

BESTSC

CAL Key Prefix for MVS

BlackBerry Enterprise Service 10 License Types

Unless otherwise indicated, you can activate devices that have a service plan or a Wi-Fi connection. BlackBerry Enterprise Service 10.1 (and later) supports the following license types:

License Type

New Name

Description

EMM – Corporate for BlackBerry

N/A

You can activate the following devices and features:

  • BlackBerry 10 devices and BlackBerry PlayBook tablets that use BlackBerry Balance technology
  • Devices that run BlackBerry 10 OS version 10.1 or later and have a service plan that supports work space only devices

If the device has advanced provisioning for BlackBerry, it can be activated in work space only mode

EMM – Corporate

Silver (Annual or Perpetual CAL)

You can activate the following devices and features:

  • BlackBerry 10 devices and BlackBerry PlayBook tablets that use BlackBerry Balance technology
  • Devices that run BlackBerry 10 OS version 10.1 or later and have a service plan that supports work space only devices
  • iOS devices and Android devices

If the device has advanced provisioning for BlackBerry, it can be activated in work space only mode

Secure Work Space (SWS)

Gold - Secure Work Space (Annual or Perpetual)

You can activate the following devices and features:

  • iOS devices and Android devices

EMM - Regulated

Gold - BlackBerry (Annual or Perpetual)

Regulated-level Enterprise Mobility Management (EMM) control options are provided for BlackBerry 10 smartphones to enable compliance for secure, government and highly regulated environments.

  • Pre-BES 10.2: This license type would only allow users to have a corporate perimeter on their devices, effectively making them completely managed and controlled by their internal IT department
  • At BES 10.2: This license type would allow users to have a personal and a corporate perimeter, both of which can be managed by the Administrator.

The license requirements for activating BlackBerry 10 devices have changed in BlackBerry Enterprise Service 10 version 10.2.1. The following table describes the changes for each activation type:

Activation Type

License Requirements (10.2)

License Requirements (10.2.1)

Work and personal - Corporate

One of the following:

  • EMM - Corporate for BlackBerry license
  • EMM - Corporate license
  • EMM - Regulated for BlackBerry license

One of the following:

  • Regulated-level EMM data plan
  • EMM - Corporate for BlackBerry license
  • EMM - Corporate license
  • EMM - Regulated for BlackBerry license

Work and personal - Regulated

One of the following:

  • Regulated-level EMM data plan and an EMM - Corporate for BlackBerry license
  • Regulated-level EMM data plan and an EMM - Corporate license
  • EMM - Regulated for BlackBerry license

One of the following:

  • Regulated-level EMM data plan
  • EMM - Regulated for BlackBerry license

Work space only

One of the following:

  • Regulated-level EMM data plan and an EMM - Corporate for BlackBerry license
  • Regulated-level EMM data plan and an EMM - Corporate license
  • EMM - Regulated for BlackBerry license

One of the following:

  • Regulated-level EMM data plan
  • EMM - Regulated for BlackBerry license

BlackBerry Enterprise Service 10 Licensing Programs and Promotions

During the release of BlackBerry Enterprise Service 10, there have been multiple offers and programs that allowed customers to get their sites prepared for the upgrade. Some of these are still available, while others were offered only on a temporary basis and have since been discontinued. Here is a brief summary of the various offers and programs:

  • BlackBerry 10 Ready Program (still available): www.blackberry.com/blackberry10ready
  • Two Free BES10 Perpetual CAL Promotion (no longer being offered; ended in August 31st and now redirects to the readiness program at www.blackberry.com/blackberry10ready): www.blackberry.com/licenseoffer
  • BlackBerry License Trade Up Program (no longer being offered; ended on Dec 31st): www.blackberry.com/bb10readylicensetradeup
    • The BlackBerry License Trade up Program is no longer available but there’s still a simple and affordable way to upgrade your legacy BlackBerry Enterprise Server (BES) CALs. The BlackBerry Software Assurance program allows you to upgrade your BlackBerry Enterprise Server 5.x (and earlier) perpetual licenses to BlackBerry Enterprise Server 10.1 perpetual licenses. BlackBerry Software Assurance is included with BlackBerry Technical Support (at the Advantage Support level or higher) or you can also subscribe to BlackBerry Software Assurance on an annual basis. To learn more about this offer, review the BlackBerry Software Assurance datasheet. If you wish to purchase BlackBerry Technical Support Services click here.

Managing BlackBerry Enterprise Service 10 Licenses

Licenses are managed from one centralized location called the BlackBerry Account Center. The BlackBerry Account Center communicates directly to the BlackBerry Licensing Infrastructure which allows licenses to be propagated down to the associated BlackBerry Enterprise Service 10 server(s). Only one Licensing Service can be active within the BlackBerry domain. When multiple Licensing Services are present in one BlackBerry domain, conflicts could arise when resolving to the Licensing Infrastructure. The Licensing Service is registered with the BlackBerry Licensing Infrastructure with the Host ID (The Network Interface Card MAC Address). In a case where there are multiple BlackBerry Domains, licenses can be implicitly delegated across multiple servers using the Host ID activation method.

When you install the BlackBerry Enterprise Service 10 administration consoles, you install a BlackBerry Licensing Service instance. You can install more than one instance of the BlackBerry Licensing Service in a BlackBerry Enterprise Service 10 domain but only one instance can be active. The first instance that you install is started by default and is the active instance. Additional instances that you install are disabled. When your organization obtains licenses, you receive one or more license Activation IDs. When you activate licenses, the computer that hosts the active licensing server for the domain is registered. The process registers the MAC address of the licensing server with the Licensing Infrastructure and links the license Activation IDs to the licensing server.
The BlackBerry Licensing Service on the host server stores the licenses for use. If Administrators wish to configure a different instance to be the active one, they can switch to a new licensing server before activating additional licenses. For more information, see KB34147 - How to change Licensing Servers and transfer licenses in BlackBerry Enterprise Service 10 version 10.1.

Note: If you remove the BlackBerry Enterprise Service 10 administration consoles from a computer, the BlackBerry Licensing Service will also be removed. Before you remove any components, you must verify that the computer is not registered as the licensing server for the domain or switch to a new licensing server.

Verifying permissions to manage BlackBerry Enterprise Service 10 Licenses

BlackBerry Management Studio allows administrators with the Security Administrator role to manage licenses for a BlackBerry Enterprise Service 10 domain. Administrators with other roles can view license information but they cannot perform any actions related to licensing (for example, activate licenses). If you want to manage licenses, you should log in to BlackBerry Management Studio using a normalized account. A normalized account is an administrator account that exists in the BlackBerry Device Service and the Universal Device Service and uses the same login information to access both consoles. If your organization's security policies do not allow you to use a normalized account, you must log in to BlackBerry Management Studio using a BlackBerry Device Service administrator account.

Configuring licensing settings in BlackBerry Enterprise Service 10

In BlackBerry Management Studio, on the Licensing settings tab, you can check the licensing configuration for the BlackBerry Enterprise Service 10 domain. You can check the server address to verify the FQDN of the licensing server and test the connection to the BlackBerry Licensing Service on the licensing server. The licensing server polls the Licensing Infrastructure to retrieve the licenses assigned to the domain. You can view the last contact time with the Licensing Infrastructure. If you want to poll the licensing infrastructure before the next scheduled communication or check the connection to the Licensing Infrastructure, you can click the 'Poll now' button.

  • The 'Poll Now' button initiates communication through the customer's firewall to the Enterprise Licensing Management servers located at license.blackberry.com (68.171.242.252)

Activating licenses on BlackBerry Enterprise Service 10

The licensing status displays a warning icon until you activate licenses. You must activate licenses before you can activate devices. You can choose the licensing activation method that is appropriate for your organization's environment.

Note: NIC teaming is not supported in versions of BES older than 10.2 without the binary swap that is available in EFRS#, so if it is configured on the licensing server, you must disable it before you activate licenses. NIC teaming must remain disabled for licensing to function. BES 10.2 includes a permanent fix for this issue.

Activation Method

Description

Steps

License Activation ID

When you use a license Activation ID, you assign all available licenses associated with it to a BlackBerry Enterprise Service 10 domain. If you already assigned some licenses to a domain (for example, using the Host ID), only the remaining licenses are available. For example, if 100 licenses are associated with a license Activation ID and 20 licenses are already assigned to a domain, the 80 available licenses are automatically assigned to the next domain where you use the license Activation ID.

  1. Log in to BlackBerry Management Studio using an administrator account with the Security Administrator role.
  2. On the menu bar, click Licenses.
  3. Click Activate licenses.
  4. In the Licensing activation method drop-down list, click License activation ID.
  5. Type a license activation ID.
  6. Click Activate. Verify that the Activate licenses window displays Activated below the License activation ID field.
  7. Repeat steps 5 and 6 for each license activation ID that you want to assign to the BlackBerry Enterprise Service 10 domain.
  8. Click Close.

Host ID

If you want to distribute the licenses associated with a license Activation ID across multiple BlackBerry Enterprise Service 10 domains, you can use the host ID to register the licensing server for a domain and specify the number of licenses to assign to it. You must log in to the BlackBerry Account Center (BBAC) to use this activation method.

  1. Log in to BlackBerry Management Studio using an administrator account with the Security Administrator role.
  2. On the menu bar, click Licenses.
  3. Click Activate licenses.
  4. In the Licensing activation method drop-down list, click Host ID.
  5. Highlight and right-click the host ID (MAC address of the licensing server). Click Copy.
  6. Visit besc.webapps.blackberry.com/bbac to log in to the BlackBerry Account Center and navigate to the licensing section. You must specify the host ID that you copied to register the licensing server for the BlackBerry Enterprise Service 10 domain and specify the number of licenses to assign to it.
  7. In BlackBerry Management Studio, in the Activate licenses window, click Close.

File-based Activation

If the licensing server does not have access to the Internet to communicate with the Licensing Infrastructure, you can use a license challenge file and license response file to activate licenses manually and assign them to a BlackBerry Enterprise Service 10 domain. You must log in to the BlackBerry Account Center (BBAC) to use this activation method.

  1. Log in to BlackBerry Management Studio using an administrator account with the Security Administrator role.
  2. On the menu bar, click Licenses.
  3. Click Activate licenses.
  4. In the Licensing activation method drop-down list, click File based activation.
  5. Click Generate to create and download the license challenge file. Save the file to a location that you can access from the BlackBerry Account Center.
  6. Visit besc.webapps.blackberry.com/bbac to log in to the BlackBerry Account Center.
  7. Navigate to the licensing section and upload the license challenge file.
  8. Download the license response file. Save the file to a location that you can access from BlackBerry Management Studio.
  9. In BlackBerry Management Studio, in the Activate licenses window, click Choose file and select the license response file (.bin file).
  10. Click Submit.

Upgrading BlackBerry Enterprise Service 10 Licenses

After you upgrade to BlackBerry Enterprise Service 10.1, you must upgrade existing licenses to new licenses that BlackBerry Enterprise Service 10 supports. During the process of upgrading, CAL keys must be converted to license Activation IDs, which are then used to activate devices for BlackBerry Enterprise Service 10. After the upgrade process is complete, BlackBerry Management Studio lists the CAL keys for the product that you upgraded (BlackBerry Device Service or Universal Device Service).

  • In the Universal Device Service console, click Settings > Licensing and copy the CAL keys.
  • In the BlackBerry Device Service console, navigate to the BlackBerry Administration Service component view and copy the CAL keys in the License key section.

The Upgrade licenses button is available in BlackBerry Management Studio if it detects CAL keys for the BlackBerry Device Service or the Universal Device Service. Before you begin: If necessary, verify that you copied the CAL keys from the Universal Device Service console or the BlackBerry Device Service console. Here are the steps that you need to perform an upgrade of your licenses:

  1. Log in to BlackBerry Management Studio using an Administrator account with the Security Administrator role.
  2. On the menu bar, click Licenses.
  3. Click Upgrade licenses (verify where this currently points to).
  4. In the Upgrade licenses window, copy the list of CAL keys.
  5. Click Connect to visit the www.blackberry.com website and upgrade licenses.
  6. Close the Upgrade licenses window.

Activating and Managing BlackBerry Enterprise Service 10 Licenses

In order to activate new devices on BlackBerry Enterprise Service 10.1, the following requirements must be met:

  • The BlackBerry Licensing Service must be started.
  • The BlackBerry Licensing Service must have established communication with the BlackBerry Licensing Infrastructure (If 443 is not an available option, a file-based activation can be performed).
  • Port requirements - BlackBerry Enterprise Service 10 version 10.1 requires communication to the Licensing Infrastructure via Port 443 to license.blackberry.com. For more information regarding firewall requirements, see KB34193.
  • Active BlackBerry Enterprise Service 10 version 10.1 Licenses - If CALs have not been upgraded from BlackBerry Enterprise Server 5.0 or BlackBerry Enterprise Service 10 version 10.0, the BlackBerry Enterprise Service License Trade Up tool must be used. 
  • BlackBerry Account Center credentials - To log in or register a new account, navigate to the BlackBerry Account Center.
  • BlackBerry 10 Data Plan for BlackBerry 10 smartphones, Advanced BlackBerry Data Plan or Add-On for Corporate-liable Activations, and Standard Smartphone Data Plan for iOS/Android smartphones.
  • In order to activate new devices on BlackBerry Enterprise Service 10 version 10.1, the server must be in compliance. For more information regarding compliance, refer to the BlackBerry Licensing Guide.

When you log in to BlackBerry Management Studio, if there is a licensing issue that is occurring on BlackBerry Enterprise Service 10 domain, the menu bar displays a warning icon or an error icon beside Licenses. On the Licensing summary tab, you can check the licensing status for the domain and view detailed information for each license type such as usage and expiration. Activated devices that use EMM Regulated is a separate section that is always displayed. It displays the number of activated devices that have a work space only. You can also check the connection to the licensing infrastructure. If BlackBerry Management Studio is temporarily unavailable, you cannot activate licenses; you can still activate devices if licenses are available to support the devices and features.

Here is a summary of the licensing information that can be viewed in BlackBerry Management Studio:

Items

Description

License Type

The license type is the category of license that your organization uses. EMM – Corporate for BlackBerry and EMM – Corporate are always displayed, even if your organization does not use these license types.

License Usage

You can view the number of total licenses, available licenses, and used licenses for each license type. The information displayed is for all license activation IDs. Usage for some or all license types might change after you activate new licenses. The licensing server automatically optimizes usage by evaluating the available licenses for each license type and the activated devices in the domain.

Expiration

You can view the number of total licenses and, if applicable, the date that licenses expire. The information displayed is for each license activation ID. For licenses that expire, the information is no longer displayed after the expiration date.

Customers who want to trade up (from BlackBerry Enterprise Server 5.x) or upgrade (from BlackBerry Enterprise Service 10 or Blackberry Mobile Fusion 6.x) can use this link to the CAL Trade Up (CTU) 2.0 tool, which will automate the Entitlement creation process. This will issue a BlackBerry Enterprise Service 10.1 ELM Entitlement Activation ID license only.

  • This tool will issue licenses for the following scenarios:
    • BlackBerry Enterprise Server 5.x to BlackBerry Enterprise Service 10.1 Trade Up program (issues EMM - Corporate BlackBerry licenses that expire by March 31, 2014)
    • BlackBerry Enterprise Service 10.0 to BlackBerry Enterprise Service 10.1 CAL migrations (issues EMM - Corporate Perpetual licenses)
    • BlackBerry Mobile Fusion 6.x to BlackBerry Enterprise Service 10.1 CAL migrations (issues EMM - Corporate Perpetual licenses)
  • Customers can then log into the Account Center and put in the Claim Code that was given to them during the trade-up process.

Once CALs have been traded-up and/or migrated, the customer should receive an email with a Claim Code.The Claim Code should be entered into the BlackBerry Account Center (BBAC) which will claim the entitlement for that customer. Trade-ups to 10.1 can be performed here:

Frequently Asked Questions

BlackBerry Enterprise Service 10 Licensing Troubleshooting (Product Guides and KB Articles)

To read the following guides or additional related materials, visit www.blackberry.com/go/serverdocs.

Resource

Description

Introducing BlackBerry Enterprise Service 10

Quick, visual introduction to BlackBerry Enterprise Service 10 at a high level

What's New in BlackBerry Enterprise Service 10 Quick Reference

Summary of new features, enhancements, and updates in BlackBerry Enterprise Service 10

BlackBerry Enterprise Service 10 Product Overview

  • Introduction to BlackBerry Enterprise Service 10 and its features
  • Finding your way through the documentation
  • Architecture

BlackBerry Enterprise Service 10 Release Notes

Descriptions of known issues and potential workarounds

BlackBerry Enterprise Service 10 Installation Guide

  • System requirements
  • Installation instructions

Capacity Calculator for BlackBerry Enterprise Service 10

Tool to estimate the hardware required to support a given workload for BlackBerry Enterprise Service 10 version 10.1

BlackBerry Enterprise Service 10 Compatibility Matrix

Software that is compatible with BlackBerry Enterprise Service 10 version 10.1

BlackBerry Enterprise Service 10 Upgrade Guide

  • System requirements
  • Upgrade instructions

BlackBerry Enterprise Service 10 Licensing Guide

  • Descriptions of different types of licenses
  • Instructions for activating licenses

BlackBerry Enterprise Service 10 Configuration Guide

Instructions for how to configure server components before you start administering users and their devices

BlackBerry Device Service Advanced Administration Guide

  • Advanced administration for BlackBerry 10 devices and BlackBerry PlayBook tablets
  • Instructions for creating user accounts, groups, roles, and administrator accounts
  • Instructions for activating devices
  • nstructions for creating and sending IT policies and profiles
  • Instructions for managing apps on devices

Universal Device Service Advanced Administration Guide

  • Advanced administration for iOS devices and Android devices
  • Instructions for creating user accounts, groups, and administrator accounts
  • Instructions for activating devices
  • Instructions for creating and sending IT policies and profiles
  • Instructions for managing apps on devices
  • Descriptions of IT policy rules for iOS devices and Android devices

BlackBerry Management Studio Basic Administration Guide

  • Basic administration for all supported device types, including BlackBerry 10 devices, BlackBerry PlayBook tablets, iOS devices, Android devices, and BlackBerry 7.1 and earlier devices
  • Instructions for creating and managing user accounts in multiple Services
  • Instructions for managing multiple devices for each user account

BlackBerry Device Service Policy and Profile Reference Guide

Descriptions of IT policy rules and profile settings for BlackBerry 10 devices and BlackBerry PlayBook tablets

BlackBerry Device Service Solution Security Technical Overview

  • Description of the security maintained by the BlackBerry Device Service, BlackBerry Infrastructure, and BlackBerry 10 devices and BlackBerry PlayBook tablets to protect data and connections
  • Description of the BlackBerry 10 OS
  • Description of the BlackBerry PlayBook OS
  • Description of how work data is protected on BlackBerry 10 devices and BlackBerry PlayBook tablets when you use the BlackBerry Device Service

BlackBerry Bridge App Security Technical Overview

  • Description of how work data is protected on devices when you use the BlackBerry Bridge app
  • Description of how work data is protected when it is in transit between a BlackBerry PlayBook tablet and a BlackBerry smartphone
  • Description of attacks that the BlackBerry Bridge pairing process is designed to prevent

The following BlackBerry Enterprise Service 10 Licensing KB Articles are frequently referenced by BlackBerry Technical Support to assist customers with a variety of issues:

Other Resources

Other resources design updates