Blackberry 8100 Series manual Change the trust status of a certificate, Revoke a certificate

Page 8

5.Click Fetch Status or Fetch Chain Status.

Change the trust status of a certificate

1.In the device options, click Security Options.

2.Click Certificates.

3.Highlight a certificate.

4.Press the Menu key.

5.Click Trust or Distrust.

6.If necessary, perform one of the following actions:

To trust the highlighted certificate, click Selected Certificate.

To trust the highlighted certificate and all the other certificates in the chain, click Entire Chain.

Revoke a certificate

If you revoke a certificate, the certificate is revoked only in the key store on your BlackBerry® device. Your device does not update the revocation status on the certificate authority or CRL servers.

1.In the device options, click Security Options.

2.Click Certificates.

3.Highlight a certificate.

4.Press the Menu key.

5.Click Revoke.

6.Click Yes.

7.Change the Reason field.

8.Click OK.

To cancel a certificate hold, highlight the certificate. Press the Menu key. Click Cancel Hold.

Certificate revocation reasons

Unknown:

The revocation reason does not match any of the predefined reasons.

Key Compromise:

A person who is not the key subject might have discovered the private key value.

CA Compromise:

Someone might have revealed the private key of the certificate issuer.

Change in Affiliation:

The certificate subject no longer works for the organization.

6

Image 8
Contents User Guide Supplement SWD-292878-0324093908-001 Contents Page Certificates Certificate basicsDownload a certificate from an Ldap certificate server View properties for a certificateView one type of certificate in the certificate list Send a certificateCertificate status indicators Certificate statusDelete a certificate View the certificate chain for a certificateCertificate revocation reasons Change the trust status of a certificateRevoke a certificate Add an email address to a certificate Certificate optionsChange the display name for a certificate Certificate shortcuts Certificate troubleshooting Cannot download a certificatePage Certificate servers Add a certificate serverChange connection information for a certificate server Connection options for Ldap certificate serversDelete a certificate server Connection options for Ocsp and CRL serversSend connection information for a certificate server Change the key store password Change when your device deletes the key store passwordKey stores About the key storeTurn off automatic backup of key store data Change the Key Store Address Injector field to EnabledClick Key Stores Change the Certificate Service field Change the refresh rate for certificate revocation listsPress the Menu key Click Save Page MIME-protected messages MIME-protected message basicsAttachment indicators in S/MIME-protected messages Add a certificate from a messageAdd a certificate from an attachment View the certificate used to sign or encrypt a messageDigital signature indicators Encryption status indicatorsMIME-protected message status Check the status of a certificate or certificate chainChange the default signing and encryption option Click Default ServicesMIME-protected message options Change your signing or encryption certificateChange the default message classification Change the size of S/MIME indicators in messagesChange the Message Viewer Icons field Change the Request S/MIME Receipts field to YesChange the Warn about truncated messages field to No MIME-protected message troubleshootingCannot open an attachment in an encrypted message About using a smart card with your device Smart cardsImport a certificate from a smart card Click Import Smart Card Certs