Enforcing secure messaging usingclassifications
You can use message classifications to require S/MIME-enabled users or PGP enabled users to sign, encrypt, or sign and
encrypt email messages that they send from the BlackBerry devices.
You use the Message Classification IT policy rule to configure one or more message classifications that users can apply to
email messages. The message classification that the users select when they compose email messages determines the type
of S/MIME message protection or PGP message protection that applies to the email messages.
If a user does not select a message classification, by default, the BlackBerry device applies the first classification in the
message classification list on the BlackBerry device. You can change the order that the BlackBerry device lists the
classifications in.
The message protection options on the BlackBerry device are limited to the types of encryption and digitial signing that the
highly secure messaging packages on the BlackBerry device permit. When a user applies a message classification to an
email message on a BlackBerry device, the user must select one type of message protection that the message
classification permits, or accept the default type of message protection. If a user selects a message classification that
requires signing, encryption, or signing and encryption of the email message, and the user did not install a highly secure
messaging package on the BlackBerry device, the user cannot send the email message.

Create a message classification

1. In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy.
2. Click Manage IT policies.
3. In the list of IT policies, click an IT policy.
4. Click Edit IT policy.
5. On the Security tab, at the bottom of the screen, in the Message Classification Display Name field, type a display
name that you want to appear in the Classifications list on BlackBerry devices.
6. Type a subject suffix that you want to append to the message subject in parentheses . For example, type the subject
suffix (U) for a classification that is named Unclassified.
7. In the Minimum Actions drop-down list, click an action that a BlackBerry device user can perform to encode the
message. For example, to permit users to select all of the encoding types for the secure messaging packages that
they install on their BlackBerry devices, click Signed.
8. Click the Add icon.
9. Click Save all.
Administration Guide Configuring security options
65