Blackberry 8700 Series manual MIME-protected messages, MIME-protected message basics

Page 19

S/MIME-protected messages

S/MIME-protected message basics

About signing and encrypting messages

You can digitally sign or encrypt messages to add another level of security to email messages and PIN messages that you send from your BlackBerry® device. Digital signatures are designed to help recipients verify the authenticity and integrity of messages that you send. When you digitally sign a message using your private key, recipients use your public key to verify that the message is from you and that the message has not been changed.

Encryption is designed to keep messages confidential. When you encrypt a message, your device uses the recipient’s public key to encrypt the message. Recipients use their private key to decrypt the message.

To send an encrypted PIN message, you must have a PIN and an email address for the contact in your address book. Your device uses the email address in your address book to locate a PGP® key or certificate for the contact.

Sign or encrypt a message

You can sign or encrypt email messages and PIN messages.

1.When composing a message, change the Encoding field.

2.If necessary, change the Classification field.

Attach a certificate to a message

You can attach a certificate to email messages and PIN messages.

1.When composing a message, click the trackwheel.

2.Click Attach Certificates.

3.Highlight a certificate.

4.Click the trackwheel.

5.Click Continue.

Download the certificate used to sign or encrypt a message

If a certificate is not included in a received message or is not already stored in the key store on your BlackBerry® device, you can download the certificate.

1.In a message, highlight the encryption indicator or a digital signature indicator.

2.Click the trackwheel.

3.Click Fetch Sender’s Certificate.

17

Image 19
Contents User Guide Supplement SWD-327206-0324102627-001 Contents Page View properties for a certificate CertificatesCertificate basics Download a certificate from an Ldap certificate serverSend a certificate View one type of certificate in the certificate listView the certificate chain for a certificate Certificate status indicatorsCertificate status Delete a certificateRevoke a certificate Change the trust status of a certificateCertificate revocation reasons Change the display name for a certificate Certificate optionsAdd an email address to a certificate Certificate shortcuts Cannot download a certificate Certificate troubleshootingPage Connection options for Ldap certificate servers Certificate serversAdd a certificate server Change connection information for a certificate serverSend connection information for a certificate server Connection options for Ocsp and CRL serversDelete a certificate server About the key store Change the key store passwordChange when your device deletes the key store password Key stores Change the refresh rate for certificate revocation lists Turn off automatic backup of key store data Change the Key Store Address Injector field to Enabled Click Key Stores Change the Certificate Service fieldClick the trackwheel Click Save Page MIME-protected message basics MIME-protected messagesMIME-protected message status Change your signing or encryption certificate Encryption status indicatorsMIME-protected message options Check the status of a certificate or certificate chainAbout message classifications Change the default signing and encryption optionChange the default message classification Click Default ServicesChange the Warn about truncated messages field to No Change the size of S/MIME indicators in messagesChange the Message Viewer Icons field Change the Request S/MIME Receipts field to YesCannot open an attachment in an encrypted message MIME-protected message troubleshootingClick Import Smart Card Certs About using a smart card with your deviceSmart cards Import a certificate from a smart card