One of the most common issues when dealing with the web based BlackBerry Enterprise Server (5.0-5.0.3) is dealing with the BlackBerry Administration Service not loading and getting that dreadful “Page Cannot be Displayed”.  There are many reasons why this can occur but in this tutorial I will be going through how to fix the error: “Keystore was tampered with, or password was incorrect” (found in the BBAS-AS logs).

IMPORTANT!: First and foremost you will have to make sure that you are logged on to the server under the account that you installed the BES software with.  For example if you signed in as “BBAccount” to install the BES then you would log in as this account to follow this tutorial.  The easiest way to find what account you installed the BES with is to look at “Log On As” column under the services.

Generating New Web.Keystore Password

1. Stop the BlackBerry Administration Services (BAS-AS and NCC)

2. Navigate to C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS\bin and rename the web.keystore file to web.keystore.old

3. Get into the Registry and take a full back-up of the Regsitry.  This is very important as messing around with the registry can do a lot of damage to your server.

4. Navigate to HKEY_CURRENT_USER\Software\Research In Motion\BlackBerry Enterprise Server\Administration Service\KeyStorePass

5. If no value exists for the “Keystore Password” areas then add a random password there

6. Open a command prompt(if running WIN2008 choose run as admin) and type in the following command:

” webGenKey.bat “C:\Program Files\Java\JavaPath\” “C:\Program Files\Research In Motion\BlackBerry Enterprise Server\BAS” NewKeyStorePassword FQDN_of_BAS_or_BAS_Pool_Name”

So as an example on a 64 bit system that installs java under the default settings this command would look something like this:

” webGenKey.bat “C:\Program Files (x86)\Java\jre1.6.0_18\” “C:\Program Files (x86)\Research In Motion\BlackBerry Enterprise Server\BAS” My New Keystore Password fqdn.of.bas.or.bas.pool.name.com (the fqdn or bas pool can be found in the BlackBerry Server Configuration)”

7.  Once run this command will generate a new web.keystore file in the directory that we renamed the original. Verify that the new one is here.

8. Then go into the BlackBerry Server Configuration utility and click on the tab that states Adminitration Service – webKeystore.

9. Type in the old password as the password you entered into the command earlier.  Then type the new password as a new password that you will create right now.

10.  Click “Apply” and it should give you a message saying that it was successful.  This will update the registry keystore password to match the password used in the command.

11. Start your BlackBerry Administration Services and then wait for the BAS-AS process in your task manager to get up to 480,000+.  Then launch the BAS, if this tutorial was done correctly and there are no other underlying issues your BAS should launch without a hitch and you will be good to go.