Blackberry 9788 Smartphone 6 0 User Guide

							OptionDescriptionServer URLType the web address of the certificate server.
Connection options for LDAP-enabled servers and DSML-enabled servers
OptionDescriptionFriendly NameType a display name for the server.Server NameType the network address of the server.Base QueryType the base query information for the server using X.509 certificate syntax (for example, o=test.rim.net).PortType the port number for your organization’s network. The default port number is 389.Authentication TypeSpecify whether you must log in to the server.Connection TypeSpecify whether your BlackBerry® device uses an SSL connection or a TLS connection to 
connect to the server.
Send connection information for a certificate server
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Servers.
3.Highlight a certificate server.
4.Press the  key > Email Server or PIN Server.
Delete a certificate server
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Servers.
3.Highlight a certificate server.
4.Press the  key > Delete.
Key store
User GuideSecurity289 
						

							About the key store
The key store on your BlackBerry® device might store the following items. To access these items in the key store, you must type a key store password.
•Personal certificates (certificate and private key pairs)
•Certificates that you download using the certificate synchronization tool of the BlackBerry® Desktop Software
•Certificates that you download from an LDAP-enabled server or DSML-enabled server
•Certificates that you download from a certificate authority profile
•Certificates that you import from your device or a media card
•Certificates that you add from a message
•Root certificates that are included in the BlackBerry Desktop Software
•Personal PGP® keys (public and private key pairs)
•PGP public keys that you download from an LDAP-enabled server
•PGP public keys that you import from your device or a media card
•PGP public keys that you add from a message
Change the key store password
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Press the  key > Change Key Store Password.
Synchronize the key store password with the device password
If you synchronize the key store password with your BlackBerry® device password, when you change your device password, the 
key store password changes to match it automatically.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Change the Use Device Password as Key Store Password field to Yes.
4.Press the  key > Save.
Change when your device deletes the key store password
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Change the Key Store Password Timeout field.
4.Press the  key > Save.
To access private keys after your BlackBerry® device deletes the key store password, you must type your key store password.
User GuideSecurity290 
						

							Add contacts to your Contacts application automatically when you add 
items to the key store
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Select the Add Certificate Email to Contacts check box.
4.Press the  key > Save.
Change the service that your device uses to download certificates
Depending on your organization, you might not be able to change the service that your BlackBerry® device uses to download 
certificates. For more information, contact your administrator.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Change the Certificate Service field.
4.Press the  key > Save.
Turn off automatic backup and restore of key store data
By default, items in the key store on your BlackBerry® device are backed up or restored when you back up or restore your 
device data. For security reasons, If you do not want to back up your private key to your computer or restore your private key 
from your computer, you can turn off automatic backup and restore of key store data.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Clear the Allow Key Store Backup/Restore check box.
4.Press the  key > Save.
To turn on automatic backup and restore of key store data, select the Allow Key Store Backup/Restore check box.
Change the refresh rate for certificate revocation lists
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.In the Certificate Status section, change the Expires After field.
4.Press the  key > Save.
Your BlackBerry® device downloads a new revocation status automatically when your device uses a key store item with a status  that is older than the time limit that you set.
Reject certificate revocation lists from unverified CRL servers
1.On the Home screen or in a folder, click the Options icon.
User GuideSecurity291 
						

							2.Click Security > Advanced Security Settings > Key Stores.
3.Clear the Accept Unverified CRLs check box.
4.Press the  key > Save.
Your BlackBerry® device rejects certificate revocation lists from CRL servers that the BlackBerry® MDS Connection Service cannot verify.
Smart cards
About using a smart card with your device
Smart cards store certificates and private keys. You can use a smart card reader to import certificates from a smart card to the key store on your BlackBerry® device, but you cannot import private keys. As a result, private key operations such as signing 
and decryption use the smart card, and public key operations such as verification and encryption use the public certificates on 
your device.
If you use a smart card certificate to authenticate with your device, after you connect your smart card reader to your device, 
your device requests authentication from the smart card each time that you unlock your device.
You can install multiple smart card drivers on your device, including drivers for microSD smart cards, but you can only 
authenticate to one smart card at a time. If you are authenticating using a microSD smart card and you want to transfer media 
files between your microSD smart card and your computer in mass storage mode, you must temporarily turn off two-factor 
authentication or select a different authentication option.
If the S/MIME Support Package for BlackBerry® devices is installed on your device, you can use smart card certificates to send 
S/MIME-protected messages.
Turn on two-factor authentication
To perform this task, you must have set a password for your BlackBerry® device and have the smart card password that you  received with your smart card.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
•To use a smart card and your device password to unlock your device, set the Authentication Type field to Smart Card.
•To use your connected smart card reader (even if the smart card is not inserted) and your device password to unlock 
your device, set the 
Authentication Type field to Proximity. Select the Prompt for Device Password check box.
3.Press the  key > Save.
Import a certificate from a smart card
1.On the Home screen or in a folder, click the Options icon.
User GuideSecurity292 
						

							2.Click Security > Advanced Security Settings > Certificates.
3.Press the  key > Import Smart Card Certs.
4.Type your smart card password.
5.Select the check box beside a certificate.
6.Click OK.
7.Type your key store password.
8.Click OK.
Lock your device when you remove your smart card from your smart card 
reader
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
3.If necessary, change the User Authenticator field to Smart card.
4.Change the Lock On Card Removal field to Enabled.
5.Press the  key > Save.
About smart password entry
If you use advanced authentication and your BlackBerry® device password or smart card password is numeric, you might be 
able to use smart password entry in some password fields. When smart password entry is turned on, your device is designed to 
remember the format of a password that you type in a password field. When you type the password again, your device applies 
a smart password filter to the password field. If the password is numeric, a 123 indicator appears beside the password field and 
you do not have to press the Alt key to type numbers. If the password is alphanumeric, an ABC indicator appears beside the 
password field.
To use smart password entry, advanced authentication must be turned on and the correct smart card driver and smart card 
reader must be installed on your device.
Turn off smart password entry
To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
You can turn off smart password entry to reduce the chance that someone might guess your device password or smart card 
password based on the smart password filter that your device applies to password fields.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
3.If necessary, change the User Authenticator field to Smart Card.
4.Set the Smart Password Entry field to Disabled.
5.Press the  key > Save.
To turn on smart password entry again, set the Smart Password Entry field to Enabled.
User GuideSecurity293 
						

							Switch smart password filters
In a blank password field, press the Enter key.
The indicator for the new smart password filter appears beside the password field.
Prerequisites: Using authentication certificates
•Your BlackBerry® device must have the correct smart card driver and smart card reader driver installed.
•You must have imported a certificate from your smart card that you can use for signing and verification.
•You must turn on advanced authentication.
•You must have set a device password.
•You must have the smart card password that you received with your smart card.
Use a certificate to authenticate your smart card
To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
If you use a certificate to authenticate your smart card, the certificate authenticates your smart card whenever you use your 
smart card to unlock your device.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
3.If necessary, change the User Authenticator field to Smart card.
4.Change the Authentication Certificate field.
5.Press the  key > Save.
To stop using a certificate to authenticate your smart card, set the Authentication Certificate field to None.
Check the status of your authentication certificate automatically
To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
1.On the Home screen or in a folder, click the Options icon.
2.Click Password.
3.If necessary, change the User Authenticator field to Smart Card.
4.Change the Certificate Status Check field.
5.Press the  key > Save.
If your device checks the status of your authentication certificate and finds that it is revoked or expired, your device locks.
User GuideSecurity294 
						

							Store the passphrase for your smart card on your device
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Smart Card.
3.Select the PIN Caching check box.
4.Press the  key > Save.
Your BlackBerry® device stores the passphrase for the same length of time as it stores your key store password.
Turn off notification for smart card connections
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Smart Card.
3.Clear the LED Session Indicator check box.
4.Press the  key > Save.
To turn on notification for smart card connections, select the LED Session Indicator check box.
VPN settings
Depending on the options that your administrator has set for you, this feature might not be supported.
About VPN profiles
A VPN profile contains the information that you require to log in to your organization's network over VPN. Depending on your organization, you might have more than one VPN profile on your BlackBerry® device. For more information about VPN profiles, 
contact your administrator.
Log in to a VPN
•Your email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact  your administrator.
•If you use a software token to log in to a VPN, the software token must be on your device and the software token 
information that appears in the VPN profile must be correct.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > VPN.
3.To connect to your organization's network, click Log in.
User GuideSecurity295 
						

							Change the user name and password for a VPN profile
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > VPN.
3.Highlight a VPN profile.
4.Press the  key > Edit.
5.In the Username field, type a new user name.
6.In the Password field, type a new password.
7.Press the  key > Save.
About software tokens
You might need a software token to log in to a VPN. A software token includes a token code that your device regenerates periodically and a PIN. For more information about software tokens, contact your administrator.
Change the software token for a VPN profile
To perform this task, the software token that you want to use must be installed on your BlackBerry® device. For more  information, contact your administrator.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > VPN.
3.Highlight a VPN profile.
4.Press the  key > Edit.
5.Change the Software Token Serial Number field.
6.Press the  key > Save.
Change the PIN for a software token on your device
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Software Tokens.
3.Click a software token > Specify PIN.
Verify security software manually
Security self-tests are designed to verify that security software is implemented correctly on your BlackBerry® device. The tests 
should run automatically after you restart your device, but you can also verify security software manually.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Security Status Information.
3.Press the  key > Verify Security Software.
User GuideSecurity296 
						

							Third-party application control
About permissions for third-party applications
You can set permissions that control how third-party applications on your BlackBerry® device interact with the other applications on your device. For example, you can control whether third-party applications can access data or the Internet, 
make calls, or use Bluetooth® connections.
If you have added third-party applications to your device, your device is designed to prevent these applications from sending or 
receiving data without your knowledge. Before a third-party application sends or receives data, a dialog box prompts you to 
accept or deny the connection request. For a selected application, you can turn off this prompt for a specific location or 
resource.
Reset connection permissions for third-party applications
1.On the Home screen or in a folder, click the Options icon.
2.Click Device > Application Management.
3.Press the  key > Edit Default Permissions.
4.Press the  key > Reset All Firewall Prompts.
5.Press the  key > Apply Defaults to All.
About direct Internet connections for third-party applications
Some third-party applications that you add to your BlackBerry® device might require a direct TCP or HTTP connection to the  Internet. For example, a stock price application might need to connect to the Internet to retrieve the latest stock prices. You might have to set the APN that the third-party application uses for this connection.
Set up a direct Internet connection for a third-party application
To get the user name and password for the APN, contact your wireless service provider.
1.On the Home screen or in a folder, click the Options icon.
2.Click Device > Advanced System Settings > TCP IP.
3.Type the APN information.
4.Press the  key > Save.
Turn on safe mode
When you start your BlackBerry® device, you can turn on safe mode to prevent third-party applications from running 
automatically. This safe mode enables you to troubleshoot or remove any unwanted applications.
User GuideSecurity297 
						

							1.Remove and reinsert the battery.
2.When the red LED light goes out, press and hold the Escape key as the device is loading.
3.When the dialog appears, click OK.
When safe mode is on, a safe mode indicator appears in the device status section of the Home screen.
To turn off safe mode, repeat step 1.
Set permissions for a third-party application
Note: Changing permissions for third-party applications can significantly affect the operation of applications on your 
BlackBerry® device. For more information about how changing these permissions might affect the operation of the applications  on your device, contact your wireless service provider or administrator.
1.On the Home screen or in a folder, click the Options icon.
2.Click Device > Application Management.
•To set permissions for a specific third-party application, highlight the application. Press the  key > Edit 
Permissions
.
•To set permissions for all third-party applications, press the  key > Edit Default Permissions.
3.Expand Connections, Interactions, or User Data.
4.Change the permission fields.
5.Press the  key > Save.
Turn off a prompt for a third-party application connection
1.On the Home screen or in a folder, click the Options icon.
2.Click Device > Application Management.
3.Highlight a third-party application.
4.Press the  key > Edit Permissions > Prompt Exceptions.
•To allow the application to connect to a specific location or resource without displaying a prompt, click Add Allow. 
Specify a protocol and, if necessary, the domain.
•To prevent the application from connecting to a specific location or resource without displaying a prompt, click Add 
Deny
. Specify a protocol and, if necessary, the domain.
5.Press the  key > Save.
Interaction permissions for third-party applications
PermissionDescriptionCross Application CommunicationSpecify whether third-party applications can communicate and share data 
with other applications on your BlackBerry® device.Device SettingsSpecify whether third-party applications can turn on or turn off your device  or change device options, such as display options.User GuideSecurity298