I cam across the following article and option 2 helped me with my issue. We are running 4.1.5 and after a fresh install I could not connect to the MDS portal via the BlackBerry Manager. Here is the article I found:
Unable to connect to BlackBerry MDS Services using HTTPS (Updated)
Doc ID : KB05539
Last Modified : 2007-06-12
Document Type : Support
Environment
• BlackBerry® Enterprise Server software version 4.1 Service Pack 2 (4.1.2) and later
• BlackBerry® Mobile Data System (BlackBerry MDS)
• IBM® Lotus® Domino®
• Microsoft® Exchange
• SDR100044
Problem
In BlackBerry Manager, you are unable to connect to the BlackBerry MDS Services using Hypertext Transfer Protocol over Secure Sockets Layer (HTTPS).
The BlackBerry Manager log displays the following:
[20000] (09/18 14:42:40.678):{0x1EE8} CMDSAGView: Bad hResult, -2147467261 - Object reference not set to an instance of an object., from AG web service call MDSAGAdminMgmt(testWsAccess - getServerStatus. Asking user to get SSL certificate.)
[30000] (09/18 14:42:44.100):{0x2758} Bad hResult 0x80004003, at mdsagview.cpp line 376, from AG call CMDSAGView::PrepareData - getServerStatus, source - MDSAGAdminMgmt, error - Object reference not set to an instance of an object.
[40000] (09/18 14:42:46.350):{0x1A38} [rimdevicemanagementimpl::ThreadProc] Destroying RIMDeviceMonitor
Cause
The following are possible causes for this problem:
1. The default.jks key store does not contain the fully qualified domain name of the BlackBerry MDS Services for the Apache Tomcat™ alias. Note: For BlackBerry Enterprise Server software version 4.1 Service Pack 3 and later, the default.jks key store has been replaced by server.key.
2. The computer running BlackBerry Enterprise Server software version 4.1 Service Pack 2 has more than one hard disk drive and the JKS file was installed on the wrong drive.
3. A proxy server is preventing access to http://<fqdn>:7443/mdss, and allowing access to http://<netbios>:7443/mdss.
Resolution
Complete the appropriate resolution or workaround for your cause.
Cause 1
The default.jks (server.key) key store does not contain the fully qualified domain name of the BlackBerry MDS Services for the Apache Tomcat alias.
Resolution
1. Browse to the following directory from a command prompt: <install directory>:\Program Files\Research In Motion\BlackBerry Enterprise Server\MDSS\bin.
2. Type the following command from this directory (do not include quotes or brackets): >jks-generate.bat <KEYSTORE_PASSWORD> <FQDN> NOTE: <KEYSTORE_PASSWORD> should be replaced with the keystore password, which (by default) is “changeme”.
NOTE: <FQDN> should be replaced with the Fully Qualified Domain Name of the BlackBerry Enterprise Server BlackBerry MDS Services host, (e.g. blackberry.testnet.com)
3. Close the BlackBerry Manager (if open).
4. In Microsoft Internet Explorer®, select Tools > Internet Options.
5. On the Content tab, select Certificates.
6. Click Trusted Root Certification Authorities.
7. Look for any certificates that resemble the computer name or fully qualified domain name of the BlackBerry Enterprise Server, or that reference "MDS Services".
8. Remove those certificates.
9. Restart the BlackBerry MDS Services Apache Tomcat service.
10. Open the BlackBerry Manager and install the certificate.
Cause 2
If the computer running BlackBerry Enterprise Server software version 4.1 Service Pack 2 has more than one hard drive, and the BlackBerry Enterprise Server software was installed on a hard drive other than the default, the setup program installs a JKS file needed by the BlackBerry MDS Services to accept Secure Sockets Layer (SSL) certificates in the default drive.
Workaround
1. Search for the default.jks (server.key) file in the default drive (for example, C:\) of the computer where you installed the BlackBerry Enterprise Server.
2. Copy and paste the file into the following directory: <hard_drive>:\<installation_directory>\BlackBerr y Enterprise Server\MDSS\config\security
This is a previously reported issue that has been escalated internally to our development team. No resolution time frame is currently available.
Cause 3
A proxy server is preventing access to http://<fqdn>:7443/mdss, and allowing access to http://<netbios>:7443/mdss.
For example, you fail to connect using
http://NetBIOS.domain.com:7443/mdss; however, you can connect using
http://NetBIOS:7443/mdss.
Note: The BlackBerry Enterprise Server uses Microsoft Internet Explorer components to access the MDSS page. A proxy server could be blocking accessing the site.
Workaround
Disable the proxy server.
Note: If a proxy server is required, correct the proxy configuration to let Microsoft Internet Explorer connect back to itself.
To disable the proxy server, from Microsoft Internet Explorer perform the following steps:
1. Click on Tools > Internet Options
2. Select the Connections tab and click LAN Settings.
3. Clear the options in LAN Settings.
Additional Information
If you cannot import the certificate using the BlackBerry Manager in BlackBerry Enterprise Server software version 4.1 Service Pack 2, import the certificate using Microsoft Internet Explorer. Open the URL within Microsoft Internet Explorer (go to
https://netBIOS.domain.com:7443/mds). You should be prompted for the BlackBerry Enterprise Server administration account user name and password (as specified during the BlackBerry MDS installation). The user name and password are also accessible through the BlackBerry Configuration Database.
Note: You can only access the BlackBerry MDS link in BlackBerry Manager when you can successfully connect to the BlackBerry MDS link in Microsoft Internet Explorer without being prompted for installing a certificate.
MSD-Admin and MDS Integration Service
