licensing guide - help.blackberry.com · a blackberry os license is used when you enable blackberry...

Licensing GuideBES12

Version 12.5

Published: 2016-06-30SWD-20160623153818289

ContentsAbout this guide............................................................................................................... 5

Steps to use licenses........................................................................................................ 6

What are value-added services?........................................................................................ 7

About licensing.................................................................................................................8Licensing management models.........................................................................................................................................8

Licensing purchase options...............................................................................................................................................8

Managing licenses for different devices............................................................................................................................. 9

Determining what licenses you need............................................................................... 10Good Secure EMM Suites................................................................................................................................................10

EMM licenses for BES12................................................................................................................................................. 11

BlackBerry OS licenses for BES12...................................................................................................................................14

License requirements..................................................................................................................................................... 14

License requirements: BlackBerry 10 activation types..............................................................................................14

License requirements: iOS activation types.............................................................................................................. 15

License requirements: OS X activation types............................................................................................................ 17

License requirements: Android activation types........................................................................................................18

License requirements: Windows activation types...................................................................................................... 22

License requirements: BlackBerry Secure Connect Plus...........................................................................................23

License requirements: BlackBerry Secure Gateway Service......................................................................................25

License requirements: Good Dynamics.................................................................................................................... 26

License requirements: Strong Authentication by BlackBerry.....................................................................................27

Obtaining licenses.......................................................................................................... 28Using myAccount........................................................................................................................................................... 28

Verifying permissions to manage licenses........................................................................29

Managing licenses for devices.........................................................................................30Communicating with the licensing infrastructure............................................................................................................. 30

View license information................................................................................................................................................. 30

Licensing status..............................................................................................................................................................31

License consumption......................................................................................................................................................32

License expiration...........................................................................................................................................................32

Change the expiration warning period...................................................................................................................... 33

License compliance........................................................................................................................................................ 33

Correcting license compliance issues.......................................................................................................................34

View unlicensed features................................................................................................................................................ 34

Switching devices........................................................................................................................................................... 35

Switching a SIM license and a server license................................................................................................................... 35

Managing licenses for BlackBerry OS devices..................................................................37View information for BlackBerry OS licenses....................................................................................................................37

Add or delete a BlackBerry OS license key.......................................................................................................................37

Glossary......................................................................................................................... 39

Legal notice....................................................................................................................40

About this guide

BES12 helps you manage the devices in your organization. This guide explains how licensing works and describes how to prepare, use, and manage your licenses.

This guide is intended for senior IT professionals who are responsible for setting up and deploying the product. Before using this guide, senior IT professionals should install BES12 as described in the Installation and upgrade content.

1

About this guide

5

http://help.blackberry.com/detectLang/bes12/12.5/installation-and-upgrade/

Steps to use licenses

When you use licenses, you perform the following actions:

Step Action

Learn about licensing.

Determine what licenses you need.

Obtain licenses.

Verify permissions to manage licenses.

Manage licenses.

2

Steps to use licenses

6

What are value-added services?

Beyond the security and productivity features provided by BES12, BlackBerry offers more software that can add value to your BES12 domain by meeting your organization’s unique needs. The following services work in parallel with BES12 or function as plug-ins that provide new features to your existing BES12 software:

Value-added service Description

WatchDox by BlackBerry Allow users to securely access, synchronize, edit, and share files and folders from Windows and Mac OS tablets and computers, or on Android, iOS, and BlackBerry 10 devices. Protect files by applying DRM controls to limit access, even after they are shared with someone outside of your organization.

Enterprise Identity by BlackBerry Give users single sign-on access to service providers such as Box, Concur, Dropbox, Salesforce, WatchDox, and more. You can also add support for custom SaaS services.

Strong Authentication by BlackBerry Protects access to your organization’s critical resources using two-factor authentication, using a password that users enter and a secure prompt on their Android, iOS, and BlackBerry 10 devices each time they attempt to access resources.

SecuSUITE for Enterprise Provide end-to-end encryption for phone calls and text messages to prevent electronic eavesdropping.

WorkLife by BlackBerry Separate work numbers and personal numbers on Android, iOS, and BlackBerry 10 devices, making it easy to separate and split the cost of voice minutes, SMS, and data between an organization and its employees.

BBM Protected Add an extra layer of encryption to the existing BBM security model.

Enterprise IM Connect your organization's instant messaging server and the Enterprise IM app on BlackBerry 10 devices. Users can start and manage secure instant messaging conversations from their devices.

BlackBerry Email Compression for Enterprise

Implement data compression features to help manage and reduce data costs.

3

What are value-added services?

7

http://help.blackberry.com/detectLang/watchdox-by-blackberry/latest/

http://help.blackberry.com/detectLang/enterprise-identity/latest/

http://help.blackberry.com/detectLang/strong-authentication-by-blackberry/current/

http://help.blackberry.com/detectLang/secusuite-for-enterprise/current/

http://help.blackberry.com/detectLang/worklife/current/

http://help.blackberry.com/detectLang/bbm-protected/current/

http://help.blackberry.com/detectLang/enterprise-im-products/latest/

http://help.blackberry.com/detectLang/blackberry-email-compression-for-enterprise/current/

http://help.blackberry.com/detectLang/blackberry-email-compression-for-enterprise/current/

About licensing

Licenses control the number of BlackBerry 10, iOS, OS X, Android, and Windows devices that users can activate in BES12. A license is used when a device is activated. Different license types are available to support the devices and features that you want to manage. A device uses only one type of license at a time.

If a BES12 domain supports BlackBerry OS (version 5.0 to 7.1) devices, BlackBerry OS licenses control the number of users that can activate BlackBerry OS devices. A BlackBerry OS license is used when you enable BlackBerry OS device activation for a user.

Licensing management modelsBES12 supports different licensing models to help you manage licenses for your organization. You can use licenses from either or both models depending on your organization's requirements.

Licensing model Description

User-based licenses Allow a user to activate up to seven devices with one license. A user-based license applies only to the assigned user and cannot be shared between users.

Device-based licenses Allow a user to activate one device with one license.

Licensing purchase optionsYou must obtain licenses to activate BlackBerry 10, iOS, OS X, Android, and Windows devices in BES12. BES12 supports different licensing options to help you purchase licenses for your organization. You can use licenses from either or both options depending on your organization's requirements.

Enhanced SIM-Based Licensing is an alternative licensing option that allows you to purchase licenses from your wireless service provider. This option allows you to pay for licenses as part of your existing plan with your wireless service provider. For pricing and subscription information, you must contact your wireless service provider. To use SIM licenses, devices must have SIM cards that the wireless service provider has provisioned accordingly.

Licensing option Description Category

Server licenses Licenses that you purchase from BlackBerry or a BlackBerry partner.

Trial (for evaluation purposes only)

Subscription

4

About licensing

8

Licensing option Description Category

Term (available with site license agreements)

Perpetual (includes one year of technical support)

SIM licenses Licenses that you purchase from your wireless service provider as part of your existing plan.

—

If you upgrade from BES5 to BES12, you must obtain BlackBerry OS licenses for BES12 to support BlackBerry OS (version 5.0 to 7.1) devices in a BES12 domain.

Managing licenses for different devicesBES12 supports the following devices:

Devices How licenses work Licensing process

BlackBerry 10

iOS

OS X

Android

Windows

SIM and server licenses control the number of devices that users can activate. Different license types are available to support the devices and features that you want to manage.

1. Obtain licenses.

2. Manage licenses using the BES12 management console and the myAccount website.

BlackBerry OS (version 5.0 to 7.1)

BlackBerry OS licenses control the number of users that can activate BlackBerry OS devices.

1. After you upgrade from BES5 to BES12, obtain BlackBerry OS licenses for BES12.

2. Add BlackBerry OS license keys.

3. Delete BES5 CAL keys.

4. Manage BlackBerry OS licenses using the BlackBerry OS Settings in the BES12 management console.

A user can have any combination of devices. For example, if a user has both a BlackBerry OS device and an iOS device, the user account uses a BlackBerry OS license for the BlackBerry OS device and an appropriate SIM or server license for the iOS device.

Related informationObtaining licenses, on page 28Managing licenses for devices, on page 30Managing licenses for BlackBerry OS devices, on page 37

About licensing

9

Determining what licenses you need

To determine what licenses you need, consider the following:

• The devices that you want BES12 to manage (device type)

• How much control you need over your organization's devices (activation type)

• The features that you want devices to use (for example, BlackBerry Secure Connect Plus)

• How you want to manage licenses (user-based or device-based licenses)

• How you plan to purchase licenses (SIM or server licenses)

• If you upgrade from BES5 to BES12 (BlackBerry OS licenses)

Good Secure EMM SuitesGood Secure EMM Suites are user-based licenses that allow your organization to use both BES12 EMM and Good Dynamics features. Some suites also allow you to use BES12 value-added services.

Note: Suite names in BES12 may be different from the SKU names used during the purchasing and fulfillment process.

SIM and server licenses are available for the following suites:

Suite Activation types Features

Good Secure Management Suite

This suite supports the following activation types:

• Work and personal - Corporate, MDM controls, User privacy, Work and personal - user privacy (Android for Work), Work space only (Android for Work)

This suite gives you access to the following features:

• EMM, secure browser, native OS containerization (BlackBerry 10, Android for Work), BlackBerry Secure Connect Plus (BlackBerry 10)

Good Secure Enterprise Suite This suite supports all of the Good Secure Management Suite activation types.

This suite gives you access to all of the Good Secure Management Suite features and the following features:

• Multi-OS containerization for secure email and PIM, BlackBerry Secure Gateway Service (iOS)

5


10

Suite Activation types Features

Good Secure Collaboration Suite

This suite supports all of the Good Secure Enterprise Suite activation types and the following activation types:

• Work and personal - Regulated, Work space only, Work and personal - user privacy (Android for Work - Premium), Work space only (Android for Work - Premium), Work and personal - user privacy (Samsung KNOX), Work and personal - full control (Samsung KNOX), Work space only (Samsung KNOX)

This suite gives you access to all of the Good Secure Enterprise Suite features and the following features:

• Native OS containerization (Samsung KNOX Workspace), BlackBerry Secure Connect Plus (iOS, Android for Work, Samsung KNOX Workspace), multi-OS containerization for secure ISV app distribution, document editing, Enterprise IM, secure access to Microsoft SharePoint and file shares, Docs To Go for Good

Good Secure Mobility Suite This suite supports all of the Good Secure Collaboration Suite activation types.

This suite gives you access to all of the Good Secure Collaboration Suite features and the following features:

• Multi-OS containerization for secure custom app distribution, identity and access management (Enterprise Identity by BlackBerry, Strong Authentication by BlackBerry)

Good Secure Content Suite This suite supports all of the Good Secure Collaboration Suite activation types.

This suite gives you access to all of the Good Secure Mobility Suite features and the following features:

• Enterprise file synchronization and sharing and Document Rights Management (WatchDox by BlackBerry), WatchDox app for Good

EMM licenses for BES12EMM licenses are device-based licenses that allow your organization to use BES12 EMM features. If you also want to use Good Dynamics features or BES12 value-added services, you can obtain Good Secure EMM Suites.

Note: License names in BES12 may be different from the SKU names used during the purchasing and fulfillment process.


11

SIM licenses

License Activation types Features

Silver This license supports the following activation types:


This license gives you access to the following features:


Gold Cross-Platform This license supports all of the Silver activation types and the following activation types:

• Work and personal - Regulated, Work space only, Work and personal - user privacy (Android for Work - Premium), Work space only (Android for Work - Premium), Work and personal - user privacy (Samsung KNOX), Work and personal - full control (Samsung KNOX), Work space only (Samsung KNOX), Work and personal - user privacy, Work and personal - full control, Work and personal - user privacy (Secure Work Space), Work and personal - full control (Secure Work Space)

This license gives you access to all of the Silver features and the following features:

• Native OS containerization (Samsung KNOX Workspace), BlackBerry Secure Connect Plus (iOS, Android for Work, Samsung KNOX Workspace), BlackBerry Secure Gateway Service (iOS), multi-OS containerization for secure email and PIM (iOS, Android)

Server licenses


Silver This license supports the following activation types:





12


Gold This license supports all of the Silver activation types and the following activation types:

• Work and personal - Regulated, Work space only, Work and personal - user privacy (Android for Work - Premium), Work space only (Android for Work - Premium)

This license gives you access to all of the Silver features and the following features:

• BlackBerry Secure Connect Plus (iOS, Android for Work), BlackBerry Secure Gateway Service (iOS)

Gold - Flex This license supports all of the Gold activation types and the following activation types:

• Work and personal - user privacy (Samsung KNOX), Work and personal - full control (Samsung KNOX), Work space only (Samsung KNOX)

This license gives you access to all of the Gold features and the following features:

• Native OS containerization (Samsung KNOX Workspace), BlackBerry Secure Connect Plus (Samsung KNOX Workspace)

Gold - KNOX Workspace This license supports the following activation types:

• Work and personal - user privacy (Samsung KNOX), Work and personal - full control (Samsung KNOX), Work space only (Samsung KNOX)


• EMM, secure browser, native OS containerization (Samsung KNOX Workspace), BlackBerry Secure Connect Plus (Samsung KNOX Workspace)

Gold - Secure Work Space This license supports the following activation types:

• MDM controls, User privacy, Work and personal - user privacy (Android for Work), Work space only (Android for Work), Work and personal - user privacy, Work and personal - full control, Work and personal - user privacy (Secure Work Space), Work and personal - full control (Secure Work Space)


• EMM, secure browser, native OS containerization (Android for Work), BlackBerry Secure Gateway Service (iOS), multi-OS containerization for secure email and PIM (iOS, Android)


13

BlackBerry OS licenses for BES12If you upgrade from BES5 to BES12, you must replace your existing BES5 CAL keys with BlackBerry OS licenses for BES12. BES5 CAL keys are not valid in a BES12 domain. You must use BlackBerry OS licenses to support BlackBerry OS (version 5.0 to 7.1) devices in a BES12 domain.

When you obtain BlackBerry OS licenses, you receive a key that you must enter in the BlackBerry OS Settings in the BES12 management console to make the licenses available for use. If you have perpetual BES5 CAL keys, you must replace them with perpetual BlackBerry OS licenses. If you have subscription BES5 CAL keys, you must replace them with subscription BlackBerry OS licenses.

A BlackBerry OS license is used when you enable BlackBerry OS device activation for a user. Each user can activate one BlackBerry OS device.

License requirementsBefore you obtain licenses, you should review the license requirements for the devices that you want to activate and the features that you want devices to use.

In general, the activation type determines the required license. If a feature also has license requirements (for example, BlackBerry Secure Connect Plus), it takes precedence and determines the required license.

License requirements: BlackBerry 10 activation typesThe following table lists the required SIM or server license for BlackBerry 10 activation types. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.

For more information about activation types, see the Administration content.

Activation type Description Required SIM license Required server license

Work and personal - Corporate

Devices have a personal space and a work space. Administrators have control of the work space only.

One of the following:

1. Silver

2. Gold Cross-Platform

3. Good Secure Management Suite

4. Good Secure Enterprise Suite

Or one of the following:

1. Silver

2. Gold

3. Gold - Flex



14

http://help.blackberry.com/detectLang/bes12/12.5/administration/


5. Good Secure Collaboration Suite

6. Good Secure Mobility Suite

7. Good Secure Content Suite





Work and personal - Regulated

Devices have a personal space and a work space. Administrators have control of both spaces.







1. Gold

2. Gold - Flex




Work space only Devices have a work space only. Administrators have full control of devices.







1. Gold

2. Gold - Flex




Related informationGood Secure EMM Suites, on page 10EMM licenses for BES12, on page 11

License requirements: iOS activation typesThe following table lists the required SIM or server license for iOS activation types. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.



15



MDM controls A separate work space is not created on devices. Administrators have basic management controls using options that are native to iOS and BES12 sends the MDM profile to the device.


1. Silver








1. Silver

2. Gold - Secure Work Space

3. Gold

4. Gold - Flex






User privacy A separate work space is not created on devices. Administrators have limited control of devices. For example, administrators can use location services, but they cannot use IT policies.

To enable SIM-based licensing, you must select "Allow access to SIM card and device hardware information to enable SIM-based licensing" in the activation profile. This setting allows BES12 to send an MDM profile to the device that can access only the SIM card and device hardware information that is required to check if an appropriate SIM license is available (for example, ICCID and IMEI).


1. Silver








1. Silver


3. Gold

4. Gold - Flex






Work and personal - full control

A separate work space is created on devices. Administrators have full control of devices and BES12






16


sends the MDM profile to the device.

Work and personal - user privacy

A separate work space is created on devices. Administrators have control of the work space only.

To enable SIM-based licensing, you must select "Allow access to SIM card and device hardware information to enable SIM-based licensing" in the activation profile. This setting allows BES12 to send an MDM profile to the device that can access only the SIM card and device hardware information that is required to check if an appropriate SIM license is available (for example, ICCID and IMEI).





Strong Authentication by BlackBerry

A separate work space is not created on devices. Administrators have no control of devices.

This activation type supports the Strong Authentication solution for devices that BES12 does not manage. For more information about the license requirements for this solution, see the Strong Authentication by BlackBerry content.

— —


License requirements: OS X activation typesThe following table lists the required SIM or server license for OS X activation types. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM


17

http://help.blackberry.com/detectLang/strong-authentication-by-blackberry/



licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.



MDM controls A separate work space is not created on devices. Administrators have basic management controls using options that are native to OS X.


1. Silver








1. Silver


3. Gold

4. Gold - Flex







License requirements: Android activation typesThe following table lists the required SIM or server license for Android activation types. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.

The Android activation types are organized in the following tables:

• Android devices

• Android for Work devices

• Samsung KNOX Workspace devices



18



Android devices

The following activation types apply to all Android devices, including PRIV.


MDM controls A separate work space is not created on devices. Administrators have basic management controls using options that are native to Android OS or provided by Samsung KNOX. If devices support KNOX MDM, this activation type applies the KNOX MDM IT policy rules.


1. Silver








1. Silver


3. Gold

4. Gold - KNOX Workspace (KNOX devices only)

5. Gold - Flex






User privacy A separate work space is not created on devices. Administrators have limited control of devices. For example, administrators can use location services, but they cannot use IT policies.


1. Silver








1. Silver


3. Gold

4. Gold - KNOX Workspace (KNOX devices only)

5. Gold - Flex







19


Work and personal - full control (Secure Work Space)

A separate work space is created on devices. Administrators have full control of devices. If devices support KNOX MDM, this activation type applies the KNOX MDM IT policy rules.





Work and personal - user privacy (Secure Work Space)

A separate work space is created on devices. Administrators have control of the work space only.





Strong Authentication by BlackBerry

A separate work space is not created on devices. Administrators have no control of devices.

This activation type supports the Strong Authentication solution for devices that BES12 does not manage. For more information about the license requirements for this solution, see the Strong Authentication by BlackBerry content.

— —

Android for Work devices

The following activation types apply only to Android devices that support Android for Work, including PRIV.


Work and personal - user privacy (Android for Work)

A separate work profile is created on devices. Administrators have control of the work profile only.


1. Silver






1. Silver


3. Gold

4. Gold - Flex




20










Work and personal - user privacy (Android for Work - Premium)

A separate work profile is created on devices. Administrators have control of the work profile only.

This activation type supports BlackBerry Secure Connect Plus.







1. Gold

2. Gold - Flex




Work space only (Android for Work)

Devices have a work space only. Administrators have full control of devices.


1. Silver








1. Silver


3. Gold

4. Gold - Flex






Work space only (Android for Work - Premium)


This activation type supports BlackBerry Secure Connect Plus.







1. Gold

2. Gold - Flex





21

Samsung KNOX Workspace devices

The following activation types apply only to Samsung devices that support KNOX Workspace.


Work and personal - full control (Samsung KNOX)

A separate work space is created on devices. Administrators have full control of devices.







1. Gold - KNOX Workspace

2. Gold - Flex




Work and personal - user privacy (Samsung KNOX)

separate work space is created on devices. Administrators have control of the work space only.








2. Gold - Flex




Work space only (Samsung KNOX)









2. Gold - Flex





License requirements: Windows activation typesThe following table lists the required SIM or server license for Windows activation types. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM


22

licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.



MDM controls A separate work space is not created on devices. Administrators have basic management controls using options that are native to Windows Phone or Windows 10.


1. Silver








1. Silver


3. Gold

4. Gold - Flex







License requirements: BlackBerry Secure Connect PlusBlackBerry 10, iOS, Android for Work, and Samsung KNOX Workspace devices can use BlackBerry Secure Connect Plus. BlackBerry Secure Connect Plus must be enabled in the enterprise connectivity profile that you assign to users.

The following tables list the required SIM or server license to use BlackBerry Secure Connect Plus. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.

For more information about BlackBerry Secure Connect Plus, see the Administration content.

BlackBerry 10 devices

Devices that run BlackBerry 10 OS version 10.3.2 or later can use BlackBerry Secure Connect Plus.


23



Activation type Required SIM license Required server license

Work and personal - Corporate One of the following:

1. Silver








1. Silver

2. Gold

3. Gold - Flex






Any of the following activation types:

• Work and personal - Regulated

• Work space only









1. Gold

2. Gold - Flex






iOS devices

Devices that run iOS 9.0 or later can use BlackBerry Secure Connect Plus.


MDM controls One of the following:






1. Gold

2. Gold - Flex





24

Android for Work devices

Devices that run Android 5.1 or later can use BlackBerry Secure Connect Plus.



• Work and personal - user privacy (Android for Work - Premium)

• Work space only (Android for Work - Premium)







1. Gold

2. Gold - Flex




Samsung KNOX Workspace devices

Devices that run Android 5.0 or later and Samsung KNOX 2.3 or later can use BlackBerry Secure Connect Plus.



• Work and personal - user privacy (Samsung KNOX)

• Work and personal - full control (Samsung KNOX)

• Work space only (Samsung KNOX)








2. Gold - Flex





License requirements: BlackBerry Secure Gateway ServiceDevices that run iOS 9.0 or later can use the BlackBerry Secure Gateway Service. The BlackBerry Secure Gateway Service must be enabled in the email profile that you assign to users.


25

The following table lists the required SIM or server license to use the BlackBerry Secure Gateway Service. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.

For more information about the BlackBerry Secure Gateway Service, see the Administration content.


MDM controls One of the following:








2. Gold

3. Gold - Flex






License requirements: Good DynamicsYou can assign a Good Dynamics profile to users to allow iOS and Android devices to access Good Dynamics productivity apps such as Good Work, Good Access, and Good Connect.

The following table lists the required SIM or server license to use the Good Dynamics profile. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.

For more information about Good Dynamics, see the Integrating BES12 and Good Dynamics content.

Profile Required SIM license Required server license

Good Dynamics One of the following:











26


http://help.blackberry.com/detectLang/bes12/12.5/integrating-bes12-and-good-dynamics/


5. Good Secure Content Suite 5. Good Secure Content Suite

Related informationGood Secure EMM Suites, on page 10

License requirements: Strong Authentication by BlackBerryTo use the Strong Authentication by BlackBerry solution with iOS and Android devices that BES12 manages, you can assign a Strong Authentication profile to users.

The following table lists the required license to use the Strong Authentication profile. BES12 checks for available licenses in the order listed. BES12 checks first if an appropriate SIM license is available and if the device's SIM card is provisioned for SIM licensing. If both conditions are met, the device uses a SIM license. If the conditions are not met, the device uses a server license.

For more information about Strong Authentication by BlackBerry, see the Strong Authentication by BlackBerry content.


Strong Authentication One of the following:




1. Strong Authentication by BlackBerry



Related informationGood Secure EMM Suites, on page 10


27


Obtaining licenses

After you determine what licenses you need, you must obtain licenses.

Licenses Purchasing process

Server licenses

BlackBerry OS licenses

1. Purchase licenses using any of the following options:

• Contact your BlackBerry sales representative (required to purchase term licenses).

• Contact a BlackBerry partner.

2. Register and create an account for the myAccount website.

Note: As soon as the order is submitted and the licenses are fulfilled, the trial, subscription, or term period begins and, if applicable, the technical support contract begins.

SIM licenses 1. Contact your wireless service provider.

If you have valid licenses for earlier products (for example, BES5 or BES10), you may be able to claim licenses for BES12. The number and types of licenses that you can claim depend on current licensing offers and your level of technical support. To view the promotions that you are eligible for, log in to myAccount and check the Account Support > Software Assurance section. For more information about license migration programs and qualifying software, visit www.blackberry.com/migrationplanning. For more information about technical support programs, visit www.blackberry.com/btss.

Using myAccountmyAccount is the website that you use to track the server licenses that you purchase from BlackBerry or a BlackBerry partner. You can use the myAccount website to:

• View your organization's licenses and history of purchases

• Check the licensing promotions that you are eligible for

• Manage users on the account

• Manage support agreements

myAccount replaces the BlackBerry Account Center. If you already have a BlackBerry Account Center account, you can use those credentials to log in to myAccount.

For more information, see the myAccount content.

6

Obtaining licenses

28

http://www.blackberry.com/migrationplanning

http://www.blackberry.com/btss

http://help.blackberry.com/en/myaccount/latest/user-guide-pdf/

Verifying permissions to manage licenses

To manage SIM, server, and BlackBerry OS licenses in BES12, the administrator account that you use must be assigned a role with the following permissions:

• View licensing summary

• Edit licensing settings

You can use the administrator account that you used to log in to BES12 for the first time (Security Administrator role), or you can create an administrator by adding a role to a user account or user group.

The preconfigured roles in BES12 have different licensing permissions turned on by default. For more information about setting up administrators, see the Administration content.

Role Licensing permissions

Security Administrator All licensing permissions

Enterprise Administrator All licensing permissions

Senior HelpDesk View licensing summary

Junior HelpDesk No licensing permissions

7

Verifying permissions to manage licenses

29


Managing licenses for devices

You can use the Licensing summary page in the management console to:

• View license information for each license type

• Monitor licensing status and review warnings or errors

• Identify and correct license compliance issues

Communicating with the licensing infrastructureBES12 updates compliance status when it contacts the licensing infrastructure:

• On schedule (by default, once a day)

• On demand (view the Licensing summary page)

On the Licensing settings page, you can view the last contact time with the licensing infrastructure (on schedule or on demand).

View license informationYou can view license information for BES12 on the Licensing summary page and license information for a device in the user's device details. When you view license information for BES12 or a device, the management console displays optimal license usage based on current licensing data.

Note: If the Licensing summary page does not display any license information, the connection to the licensing infrastructure is not available.

1. On the menu bar, click Settings > Licensing > Licensing summary.

2. You can view the following license information for each license type:

• Total in use: The number of SIM and server licenses in use.

• SIM license: The number of licenses in use.

• Server license: The total number of licenses, the number of available licenses, the number of licenses in use, and the license expiration dates.

After you finish: To view license information for a device, go to the appropriate device tab for a user account.

8


30

Licensing statusIf a licensing issue requires your attention, Settings > Licensing on the menu bar displays a warning or error icon. If more than one issue exists, the icon for the most serious issue appears. On the Licensing summary page, you can monitor licensing status and review warnings or errors.

Message Icon Description

Licensing infrastructure

OK

BES12 successfully contacted the licensing infrastructure the last time that it tried to connect. You can view the last contact time on the Licensing settings page.

Licensing infrastructure - Unable to connect Error

BES12 could not contact the licensing infrastructure.

Overall compliance status

OK

There are no licensing issues that require your attention.

In grace period, x days remaining Warning

When usage is exceeded for one or more license types, BES12 starts a grace period for the applicable service to give you time to correct the license compliance issues. The message indicates the number of days that remain until the grace period ends.

Out of compliance

Error

When the grace period ends and one or more license compliance issues still exist, the organization is out of compliance for the applicable service. For EMM, BES12 blocks new device activations until you correct the license compliance issues.

Licenses will expire soon

Warning

Trial, subscription, or term licenses will expire soon. You can view expiration details for each license type.

Trial expires in x days

Warning

When the organization has trial licenses for a single trial period, BES12 indicates the number of days that remain until the trial period ends. BES12 displays this message if the organization has only trial licenses.

Next trial expires in x days

Warning

When the organization has trial licenses for multiple trial periods, BES12 indicates the number of days that remain until the first trial period ends. BES12 displays this message if the organization has only trial licenses.


31

License consumptionBES12 uses the following rules to determine which license to consume:

• SIM licenses are always consumed before server licenses.

• EMM licenses, such as Silver, and value-added services licenses, such as Strong Authentication by BlackBerry, are consumed before Good Secure EMM Suites.

When your organization has both user-based and device-based licenses, the following rules apply to a user:

• If the user has more than one licensed feature associated with a device, a Good Secure EMM Suite license is consumed instead of an EMM license or value-added services license.

• If the user activates more than one device, a Good Secure EMM Suite license is consumed instead of an EMM license or value-added services license.

License expirationBES12 can use a combination of trial, subscription, term, and perpetual licenses. The license category determines how long a license is valid and no category takes precedence over another. When you obtain server licenses, BES12 adds them to the pool of licenses for your organization and uses them as necessary.

The Licensing summary page indicates when trial, subscription, and term licenses expire. When licenses expire, BES12 checks for available licenses. If valid licenses are available, BES12 assigns them to activated devices to replace expired licenses. If BES12 checks a license type and determines that the number of activated devices is greater than the number of valid licenses, usage is exceeded for that license type.

BES12 does not track the expiration of SIM licenses. SIM licenses are valid as long as you maintain the subscription with your wireless service provider.

Category Description

Trial Trial licenses are used to evaluate BES12 and are valid for a trial period (for example, 60 days). When trial licenses expire, you can purchase licenses from another category.

Subscription Subscription licenses are valid for a subscription period (for example, an annual subscription). When subscription licenses expire, you can purchase more subscription licenses or purchase licenses from another category.

Term Term licenses are valid for a specific, limited period of time (for example, two years). Shortly before the term ends, BlackBerry will issue perpetual licenses equal to the number of activated devices.


32

Category Description

Perpetual Perpetual licenses do not expire.

Change the expiration warning periodOn the Licensing summary page, each license type displays a warning to notify you that trial, subscription, or term licenses will expire soon. You can change the expiration warning period to customize when the warning appears. By default, the warning appears 28 days before trial, subscription, or term licenses expire.

1. On the menu bar, click Settings > Licensing > Licensing settings.

2. In the License expiration warning drop-down list, click the appropriate warning period.

3. Click Save.

License complianceBES12 tracks compliance status at the organization level and reports license compliance for each service that you use (for example, EMM). You can check the compliance status for the organization when you log in to any BES12 domain. BES12 tracks usage for each license type and detects when the license requirements are not met. When there is a compliance issue, BES12 allows a grace period to give you time to correct it.

For EMM, usage can be exceeded for a license type if:

• You allow users to activate a number of devices that exceeds the number of valid licenses

• Licenses are in use and they expire

During the grace period for EMM, there are no restrictions for device activation. When the organization is out of compliance for EMM, BES12 blocks new device activations (including Good enabled devices), but activated devices continue to work as expected. BES12 enforces license compliance only for managed devices, so you can continue to activate devices with the "Strong Authentication by BlackBerry" activation type.

The following conditions apply to the compliance status for EMM:

State Description Conditions Actions

In compliance When all license requirements are met, the organization is in compliance.

— Monitor licensing status.

In grace period When usage is exceeded for one or more license types, BES12 starts a grace period and

• BES12 calculates the end date and time based on the

Correct the license compliance issues before the grace period ends.


33

State Description Conditions Actions

indicates the number of days that remain until the grace period ends (for example, 15 days).

start of the grace period. For example, if a 15-day grace period starts at 3:00 PM on July 10, it ends at 3:00 PM on July 25.

Out of compliance When the grace period ends and one or more license compliance issues still exist, the organization is out of compliance.

• You cannot activate devices using SIM or server licenses of any license type, even if licenses are available for some license types.

• If you switch to a BlackBerry 10 device using the replace device option, you cannot choose a higher feature level.

Correct all license compliance issues.

Correcting license compliance issuesTo correct license compliance issues for EMM, you can perform any of the following actions:

• Obtain more SIM or server licenses

• Remove features from users or devices (for example, disable BlackBerry Secure Connect Plus)

• Deactivate devices

BES12 evaluates compliance once a day and when you view the Licensing summary page. After you correct all license compliance issues, the organization remains out of compliance until BES12 recognizes the change in state. You can wait for BES12 to evaluate compliance or you can view the Licensing summary page to force BES12 to evaluate compliance (for example, if you deactivate devices and do not want to wait up to 24 hours).

View unlicensed featuresIf EMM is in a grace period or out of compliance, you can view the list of unlicensed features. BES12 tracks unlicensed features at the organization level, so you can view the list of unlicensed features when you log in to any domain. You can use the list of unlicensed features to help you identify license compliance issues.

1. On the menu bar, click Settings > Licensing > Licensing summary.

2. Click View list of unlicensed features to view the following information:


34

• Activation type or licensed feature: Each row displays a unique feature set which can include activation type, licensed feature, or both.

• Number of violations: The number of devices without a valid license that are associated with a feature set.

Switching devicesTo switch from any device to a BlackBerry 10 device, you or a user can select the replace device option during activation, or use the replace device option in BES12 Self-Service.

If you choose the same or lower feature level for the replacement device (for example, you change the activation type from "Work and personal - Regulated" to "Work and personal - Corporate"), the device can use the same license and BES12 does not need to check for available licenses. If you choose a higher feature level, it is considered a new activation. BES12 checks if the appropriate SIM or server license is available.

If you or a user activates a new iOS, OS X, Android, or Windows device, it is considered a new activation. BES12 checks if the appropriate SIM or server license is available.

Switching a SIM license and a server licenseIf you want to switch a device from using a SIM license to a server license, or a server license to a SIM license, the wireless service provider must change the provisioning of the device's SIM card as necessary. BES12 automatically assigns the appropriate license, and a SIM license takes precedence if it is available and supports the device and features that you want to use. This eliminates any requirement to reactivate the device to switch between a SIM and server license or a server and SIM license. It may take up to 24 hours for BES12 to recognize the license change.

The following table describes how BES12 handles various license switch scenarios, including some exceptions to the rule above:

Scenario Outcome

1) The user removes their SIM card and replaces it with a different SIM card for temporary use when the device is roaming.

The SIM license remains assigned to the device, even if the temporary SIM card is not provisioned for SIM licensing. If the user's SIM card is inserted in another activated device, scenario 2 applies.

2) The user removes the SIM card from one device and inserts it in a second device. Both devices are already activated.

The SIM license is assigned to the second device and BES12 assigns the appropriate server license to the first device.


35

Scenario Outcome

3) The user removes the SIM card from an activated device and inserts it in a device that is not activated on BES12.

The SIM license remains assigned to the activated device.

4) A device's SIM license is no longer valid because you ended the subscription with the wireless service provider.

BES12 checks for a valid SIM license that the device can use. If none are available, BES12 replaces the SIM license with an appropriate server license.

The behavior of a user's activated device is not affected in any of these scenarios. If the device has an Internet connection available through a wireless service provider or Wi-Fi network, any of these scenarios may apply.

In any of these scenarios, BES12 must have available server licenses to replace SIM licenses. If not, usage may be exceeded for some license types.


36

Managing licenses for BlackBerry OS devices

After you upgrade from BES5 to BES12, you must replace your existing BES5 CAL keys with BlackBerry OS licenses for BES12. BES5 CAL keys are not valid in a BES12 domain.

Note: After you add BlackBerry OS license keys, delete any BES5 CAL keys. Do not delete BES5 CAL keys before you add BlackBerry OS license keys. If you do, the BES12 components that manage BlackBerry OS devices will stop responding.

You can use the BlackBerry OS Settings in the BES12 management console to:

• View information for BlackBerry OS licenses

• Add or delete a BlackBerry OS license key

View information for BlackBerry OS licenses1. On the menu bar, click BlackBerry OS Settings.

2. On the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.

3. Click BlackBerry Administration Service.

4. In the BlackBerry OS license key for BES12 section, click beside a license key to view information such as subscription expiry date.

5. In the BES12 - BlackBerry OS license key for BES12 summary section, you can view the total number of BlackBerry OS licenses, the number of licenses in use, and the number of available licenses.

Add or delete a BlackBerry OS license keyYou must replace BlackBerry OS licenses before they expire. If all available BlackBerry OS licenses expire, the BES12 components that manage BlackBerry OS devices stop responding. To start the components again, you must obtain and enter a valid BlackBerry OS license key.

1. On the menu bar, click BlackBerry OS Settings.

2. On the Servers and components menu, expand BlackBerry Solution topology > BlackBerry Domain > Component view.

3. Click BlackBerry Administration Service.

4. Click Edit component.

9


37

5. In the BlackBerry OS license key for BES12 section, perform any of the following actions:

• To add a license key, type the key and click .

• To delete a license key, click .

6. Click Save all.


38

Glossary

BES5 BlackBerry Enterprise Server 5

BES10 BlackBerry Enterprise Service 10

BES12 BlackBerry Enterprise Service 12

CAL Client Access License

EMM Enterprise Mobility Management

ICCID Integrated Circuit Card Identifier

IMEI International Mobile Equipment Identity

MDM mobile device management

SIM Subscriber Identity Module

SKU stock-keeping unit

10

Glossary

39

Legal notice

©2016 BlackBerry Limited. Trademarks, including but not limited to BLACKBERRY, BES, EMBLEM Design, ATHOC, EMBLEM Design, ATHOC & Design and PURPLE GLOBE Design, GOOD, GOOD WORK, LOCK Design, MANYME, MOVIRTU, SECUSMART, SECUSMART & Design, SECUSUITE, SECUVOICE, VIRTUAL SIM PLATFORM, WATCHDOX and WORKLIFE are the trademarks or registered trademarks of BlackBerry Limited, its subsidiaries and/or affiliates, used under license, and the exclusive rights to such trademarks are expressly reserved. All other trademarks are the property of their respective owners.

Android is a trademark of Google Inc. iOS is a trademark of Cisco Systems, Inc. and/or its affiliates in the U.S. and certain other countries. iOS® is used under license by Apple Inc. OS X is a trademark of Apple Inc. Samsung, KNOX, and Samsung KNOX are trademarks of Samsung Electronics Co., Ltd. Wi-Fi is a trademark of the Wi-Fi Alliance. Windows and Windows Phone are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries. All other trademarks are the property of their respective owners.

This documentation including all documentation incorporated by reference herein such as documentation provided or made available on the BlackBerry website provided or made accessible "AS IS" and "AS AVAILABLE" and without condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however, BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this documentation to you in a timely manner or at all.

This documentation might contain references to third-party sources of information, hardware or software, products or services including components and content such as content protected by copyright and/or third-party websites (collectively the "Third Party Products and Services"). BlackBerry does not control, and is not responsible for, any Third Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by BlackBerry of the Third Party Products and Services or the third party in any way.

EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM THAT IS THE SUBJECT OF THE CLAIM.

11

Legal notice

40

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL BLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS, BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALL HAVE NO OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY.

THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT, NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS, AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED BLACKBERRY DISTRIBUTORS (ALSO INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT CONTRACTORS.

IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR, EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANY AFFILIATES OF BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION.

Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with BlackBerry's products and services may require one or more patent, trademark, copyright, or other licenses in order to avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any Third Party Products and Services that are provided with BlackBerry's products and services are provided as a convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees, representations, or warranties of any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a license or other agreement with BlackBerry.

The terms of use of any BlackBerry product or service are set out in a separate license or other agreement with BlackBerry applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRY PRODUCT OR SERVICE OTHER THAN THIS DOCUMENTATION.

Legal notice

41

BlackBerry Enterprise Software incorporates certain third-party software. The license and copyright information associated with this software is available at http://worldwide.blackberry.com/legal/thirdpartysoftware.jsp.

BlackBerry Limited2200 University Avenue EastWaterloo, OntarioCanada N2K 0A7

BlackBerry UK Limited200 Bath RoadSlough, Berkshire SL1 3XEUnited Kingdom

Published in Canada

Legal notice

42

http://worldwide.blackberry.com/legal/thirdpartysoftware.jsp

licensing guide - help.blackberry.com · a blackberry os license is used when you enable blackberry...

Documents