Blackberry Bold 5 User Manual

							About smart password entryIf you use advanced authentication and your  BlackBerry® device password or smart card password is numeric, you might be able to use smart
password entry in some password fields. When smart password entry is turned on, your device is designed to remember the format of a password
that you type in a password field. When you type the password again, your device applies a smart password filter to the password field. If the
password is numeric, a 123 indicator appears beside the password field and you do not have to press the Alt key to type numbers. If the password
is alphanumeric, an ABC indicator appears beside the password field.
To use smart password entry, advanced authentication must be turned on and the correct smart card driver and smart card reader must be
installed on your device.
Turn off smart password entry To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
You can turn off smart password entry to reduce the chance that someone might guess your device password or smart card password based
on the smart password filter that your device applies to password fields.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. If necessary, change the  User Authenticator field to Smart Card .
4. Set the  Smart Password Entry  field to Disabled .
5. Press the  Menu key.
6. Click  Save.
To turn on smart password entry again, set the  Smart Password Entry field to Enabled .
Switch smart password filters In a blank password field, press the  Enter key.
The indicator for the new smart password filter appears beside the password field.
Prerequisites: Using authentication certificates • Your BlackBerry® device must have the correct smart card driver and smart card reader driver installed.
• You must have imported a certificate from your smart card that you can use for signing and verification.
• You must turn on advanced authentication.
• You must have set a device password.
• You must have the smart card password that you received with your smart card.
User GuideSecurity299 
						

							Use a certificate to authenticate your smart cardTo perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
If you use a certificate to authenticate your smart card, the certificate authenticates your smart card whenever you use your smart card to
unlock your device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. If necessary, change the  User Authenticator field to Smart card .
4. Set the  Authentication Certificate  field.
5. Press the  Menu key.
6. Click  Save.
To stop using a certificate to authenticate your smart card, set the  Authentication Certificate field to None.
Check the status of your authentication certificate automatically To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. If necessary, change the  User Authenticator field to Smart Card .
4. Change the  Certificate Status Check  field.
5. Press the  Menu key.
6. Click  Save.
If your device checks the status of your authentication certificate and finds that it is revoked or expired, your device locks.
Use a certificate to encrypt the encryption keys on your device To perform this task, your email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact
your administrator.
If you have encryption for data in the BlackBerry device memory turned on and your smart card reader supports this feature, you might be able
to use a certificate from the smart card to encrypt the encryption keys on your device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Encryption .
4. Change the  Two-Factor Protection  field to Enabled .
5. Press the  Menu key.
6. Click  Save.
User GuideSecurity300 
						

							Store the pass phrase for your smart card in the application memory1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Smart Card .
4. Change the  PIN Caching field to Enabled .
5. Press the  Menu key.
6. Click  Save.
Your BlackBerry® device stores the pass phrase for the same length of time as it stores your key store password.
Turn off notification for smart card connections 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Smart Card .
4. Change the  LED Session Indicator  field to Disabled .
5. Press the  Menu key.
6. Click  Save.
To turn on notification for smart card connections, change the  LED Session Indicator field to Enabled .
Software tokens
About software tokens You might need a software token to log in to a VPN. If you have a Wi-Fi® enabled BlackBerry® device, you might also need a software token
to connect to your organization's network using a Wi-Fi network. A software token includes a token code that your device regenerates periodically
and a PIN. For more information about software tokens, contact your administrator.
Change the PIN for a software token on your device 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Software Tokens .
5. Click a software token.
6. Click  Specify PIN .
User GuideSecurity301 
						

							VPN settingsDepending on the options that your administrator has set for you, this feature might not be supported.
About VPN profiles A VPN profile contains the information that you require to log in to a VPN. If you have a Wi-Fi® enabled BlackBerry® device and if your
organization uses a VPN to control access to its network, you might be able to log in to the VPN and access your organization's network using
a Wi-Fi network. Depending on your organization, you might have more than one VPN profile on your device. For more information about VPN
profiles, contact your administrator.
Prerequisites: Logging in to a VPN • Your email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact your administrator.
• If you have a Wi-Fi® enabled BlackBerry device, the Wi-Fi network that your device is connected to must support connections to a VPN. For more information, contact your administrator.
• If you use a software token to log in to a VPN, the software token must be on your device and the software token information that appears
in the VPN profile must be correct.
Log in to a VPN 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  VPN.
5. Select the  Enable VPN check box.
6. Click  Log in.
Change the user name and password for a VPN profile 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  VPN.
5. Highlight a VPN profile.
6. Press the  Menu key.
7. Click  Edit.
8. In the  User name  field, type a new user name.
9. In the  User password  field, type a new password.
User GuideSecurity302 
						

							10. Press the Menu key.
11. Click  Save.
Change the software token for a VPN profile To perform this task, the software token that you want to use must be installed on your  BlackBerry® device. For more information, contact your
administrator.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  VPN.
5. Highlight a VPN profile.
6. Press the  Menu key.
7. Click  Edit.
8. Set the  Token serial number  field.
9. Press the  Menu key.
10. Click  Save.
About security self-tests Security self-tests are designed to verify that security software is implemented correctly on your BlackBerry® device. The tests should run
automatically when your device restarts.
Verify security software 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Information .
4. Press the  Menu key.
5. Click  Verify Security Software .
Third-party application control
About permissions for third-party applications You can set permissions that control how third-party applications on your BlackBerry® device interact with the other applications on your
device. For example, you can control whether third-party applications can access data or the Internet, make calls, or use  Bluetooth® connections.User GuideSecurity303 
						

							If you have added third-party applications to your device, your device is designed to prevent these applications from sending or receiving data
without your knowledge. Before a third-party application sends or receives data, a dialog box prompts you to accept or deny the connection
request. For a selected application, you can turn off this prompt for a specific location or resource.
Reset connection permissions for third-party applications 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Firewall.
4. Press the  Menu key.
5. Click  Reset Settings .
About direct Internet connections for third-party applications Some third-party applications that you add to your BlackBerry® device might require a direct TCP or HTTP connection to the Internet. For
example, a stock price application might need to connect to the Internet to retrieve the latest stock prices. You might have to set the APN that
the third-party application uses for this connection.
Set up a direct Internet connection for a third-party application To obtain the user name and password for the APN, contact your wireless service provider.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Advanced Options .
3. Click  TCP.
4. Type the APN information.
5. Press the  Menu key.
6. Click  Save.
Turn on safe mode When you start your BlackBerry® device, you can turn on safe mode to prevent third-party applications from running automatically. This safe
mode enables you to troubleshoot or remove any unwanted applications.
1. Remove and reinsert the battery.
2. When the red LED light goes out, press and hold the  Escape key as the device is loading.
3. When the dialog appears, click  OK.
When safe mode is on, a safe mode indicator appears in the device status section of the Home screen.
To turn off safe mode, repeat step 1.User GuideSecurity304 
						

							Set permissions for a third-party applicationNote:   Changing permissions for third-party applications can significantly affect the operation of applications on your  BlackBerry® device. For
more information about how changing these permissions might affect the operation of the applications on your device, contact your wireless
service provider or administrator.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Applications .
3. Perform one of the following actions: • To set permissions for a specific third-party application, highlight the application. Press the  Menu key. Click  Edit Permissions .
• To set permissions for all third-party applications, press the  Menu key. Click  Edit Default Permissions .
4. Expand  Connections , Interactions , or User Data .
5. Change the permission fields.
6. Press the  Menu key.
7. Click  Save.
Turn off a prompt for a third-party application connection 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Applications .
3. Highlight a third-party application.
4. Press the  Menu key.
5. Click  Edit Permissions .
6. Click  Prompt Exceptions .
7. Perform one of the following actions: •To allow the application to connect to a specific location or resource without displaying a prompt, click  Add Allow. Specify a protocol
and, if necessary, the domain.
• To prevent the application from connecting to a specific location or resource without displaying a prompt, click  Add Deny. Specify a
protocol and, if necessary, the domain.
8. Press the  Menu key.
9. Click  Save.
Connection permissions for third-party applications USB: Set whether third-party applications can use physical connections, such as a USB cable or RS-232 cable, that you have set up for your
BlackBerry® device.
Bluetooth: Set whether third-party applications can use Bluetooth® connections.
Phone: Set whether third-party applications can make calls or access call logs.
User GuideSecurity305 
						

							Location Data:Set whether third-party applications can use your GPS location information.
Server Network: Set whether third-party applications can access the Internet or your organization's intranet using your organization's network.
Internet: Set whether third-party applications can access the Internet through your wireless service provider (for example, using a direct Internet
connection or a WAP gateway).
Wi-Fi (if supported): Set whether third-party applications can use Wi-Fi® connections.
Interaction permissions for third-party applications Cross Application Communication: Specify whether third-party applications can communicate and share data with other applications on your BlackBerry® device.
Device Settings: Specify whether third-party applications can turn on or turn off your device or change device options, such as display options.
Media: Specify whether third-party applications can access media files on your device.
Application Management: Specify whether third-party applications can add or delete application modules or access module information such as an application name
or version.
Themes: Specify whether your device can use third-party applications as a source for customized themes.
Input Simulation: Specify whether third-party applications can simulate actions, such as pressing a key on your device.
Browser Filtering: Specify whether third-party applications can register browser filters with the browser on your device to add, change, or delete web site
content before it appears in your browser.
Screen Capturing: Specify whether third-party applications can take screen shots of the device screen.
Security Timer Reset: Specify whether third-party applications can reset the duration that your device remains unlocked after you stop using it.User GuideSecurity306 
						

							Data permissions for third-party applicationsEmail: Set whether third-party applications can access email messages, SMS text messages, MMS messages, or PIN messages on your
BlackBerry® device.
Organizer Data: Set whether third-party applications can access organizer data such as contacts, calendar entries, tasks, or memos.
Files: Set whether third-party applications can access files that you store on your device. For example, you can set whether third-party applications
can access files that you transfer to your device using the media manager tool of the BlackBerry® Desktop Manager or Bluetooth®
technology.
Security Data: Set whether third-party applications can access certificates or keys in the key store on your device.
Security troubleshooting
I cannot download a certificate If you changed the connection type that your BlackBerry®  device uses to connect to the LDAP or DSML certificate server, try switching to the
default connection type.
I cannot unlock my device using my smart card Try performing the following actions: • Verify that the correct smart card is inserted in the smart card reader.
• Verify that the smart card is inserted in the smart card reader correctly.
• Verify that you typed the smart card password correctly. You should have received this password when you received your smart card.
• If you use a certificate to authenticate your smart card, verify that the certificate is not revoked or expired.
I cannot connect to a Wi-Fi network or log in to a VPN using a software token Depending on your BlackBerry® device model, this feature might not be supported.
Verify that the time on your BlackBerry device is synchronized with the network time.
Related topics
Get the date and time from the wireless network automatically, 150
User GuideSecurity307 
						

							My device prompts me to make an emergency call when I type a passwordIf your BlackBerry® device password contains a combination of letters that corresponds to an emergency access number, your device might
prompt you to make an emergency call when you type your device password.
To continue typing your device password, press the  Escape key.
User GuideSecurity308