Administration Guide

Configuring security options

Delete a message classification

1.In the BlackBerry Administration Service, on the BlackBerry solution management menu, expand Policy.

2.Click Manage IT policies.

3.In the list of IT policies, click an IT policy.

4.Click Edit IT policy.

5.On the Security tab, at the bottom of the screen, click the Delete icon beside the message classification.

6.Click Save all.

Generating organization-specific encryption keys for PIN-message encryption

By default, all BlackBerry devices store a common PIN encryption key that they use to protect PIN messages. To limit the number of devices that can decrypt PIN messages that BlackBerry device users in your organization send from their devices, you can generate a new PIN encryption key that is stored on and known only to devices in your organization. A device that has a PIN encryption key that is specific to your organization can perform the following actions:

can only encrypt PIN messages sent to other devices on your organization's network that use the same PIN encryption key

can only decrypt PIN messages that are sent from devices that use the global PIN encryption key or PIN messages from other devices on your organization's network that use the same PIN encryption key

cannot decrypt PIN messages sent from devices that use a PIN encryption key from another organization

You should generate a new PIN encryption key if you know that your current organization-specific PIN encryption key is compromised.

Generate a PIN encryption key

You can generate a PIN encryption key to make the BlackBerry devices in your organization use a PIN encryption key that is specific to your organization for PIN messaging.

1.In the BlackBerry Administration Service, on the Servers and components menu, expand BlackBerry Solution topology.

2.Click BlackBerry Domain.

67

Page 67
Image 67
Blackberry SWD-20120924140022907 Delete a message classification, Generate a PIN encryption key, Click BlackBerry Domain