Blackberry Dx1 Manual

							Security
Security basics
About the device password If you type your BlackBerry® device password incorrectly, you might be prompted to type  blackberry before you can continue. When you try
to type your password again, the characters that you type appear on the screen.
If you exceed the number of allowed password attempts, your device deletes all your device data for security reasons.
Set a device password 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. Set the  Password field to Enabled .
4. Click  Set Password .
5. Type a password.
6. Press the  Menu key.
7. Click  Save.
To turn off the BlackBerry® device password, set the  Password field to Disabled .
Change the device password 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. Click  Change Password .
Lock your device To perform this task, you must have set a password for your BlackBerry® device.
On the Home screen or in a folder, click the  Password Lock icon.
To unlock your device, type your device password. Press the  Enter key.
Lock your device when you insert it in the holster 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
User GuideSecurity259 
						

							3. Change the Lock Handheld Upon Holstering  field to Yes.
4. Press the  Menu key.
5. Click  Save.
Lock the keyboard If you are not on a call, you can lock the keyboard to avoid pressing keys accidentally when you are playing a song or when you are not using
your BlackBerry® device. If your email account uses a BlackBerry® Enterprise Server, depending on the options that your administrator sets,
you might not be able to perform this task. For more information, contact your administrator.
Press and hold the  Play/Pause/Mute key on the top of your device.
To unlock the keyboard, press and hold the  Play/Pause/Mute key again.
Set a limit for device password attempts 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. Set the  Number of Password Attempts  field.
4. Press the  Menu key.
5. Click  Save.
Delete device data, third-party applications, or media card files Before you delete your  BlackBerry® device data or media card files, consider backing up these items so that you have a copy on your computer.
CAUTION:   If you have turned on encryption, the process for deleting all device data can take up to an hour to complete. You cannot stop the
process after you start it. If you reset your device, the process restarts after the device restarts.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Security Wipe .
4. Perform any of the following actions: • To delete data from the messages application, contacts application, and other applications, select the  Emails, Contacts, Etc check
box.
• To delete all third-party applications that you have added, select the  User Installed Applications check box.
• To delete all files from your media card, select the  Media Card check box.
5. Type  blackberry .
6. Click  Wipe.
If you are preparing your device for resale and you have an email account that uses the BlackBerry® Internet Service, to prevent messages from
this account from being sent to your device, contact your wireless service provider to disassociate the account from your device.User GuideSecurity260 
						

							Password keeper
About the password keeper Use the password keeper to store all your passwords in one place. The password keeper is designed to protect your passwords with a password
keeper password. When you type this password, the password keeper decrypts your passwords.
You can also use the password keeper to generate random passwords that contain numbers, letters, and symbols.
Add a password to the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  New.
4. Type the password information.
5. Press the  Menu key.
6. Click  Save.
Generate a random password 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  New.
4. Press the  Menu key.
5. Click  Random Password .
6. Type the password information.
7. Press the  Menu key.
8. Click  Save.
Set criteria for randomly generated passwords 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  Options.
4. Set the random password fields.
5. Press the  Menu key.
6. Click  Save.
User GuideSecurity261 
						

							View a password in the password keeperIn the password keeper, click a password.
Change a password in the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Highlight a password.
3. Press the  Menu key.
4. Click  Open.
5. Change the password information.
6. Press the  Menu key.
7. Click  Save.
Hide passwords in the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  Options.
4. Set the  Show Password  field to No.
5. Press the  Menu key.
6. Click  Save.
To show passwords in the password keeper again, set the  Show Password field to Yes.
Turn off the prompt that appears before you delete items You can turn off the prompt that appears before you delete messages, call logs, contacts, calendar entries, tasks, memos, or passwords.
1. On the Home screen, click an application icon.
2. In an application, press the  Menu key.
3. Click  Options.
4. If necessary, click  General Options.
5. Change the  Confirm Delete field to No.
6. Press the  Menu key.
7. Click  Save.
Delete a password from the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Highlight a password.
3. Press the  Menu key.
4. Click  Delete.
User GuideSecurity262 
						

							Change the password keeper password1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  Change Password .
Copy a password 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Highlight a password.
3. Press the  Menu key.
4. Click  Copy Username  or Copy Password .
To clear the clipboard, press the  Menu key. Click  Clear Clipboard .
Note:   Passwords are not encrypted when they are on the clipboard.
Prevent password copying 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  Options.
4. Set the  Allow Clipboard Copy  field to No.
5. Press the  Menu key.
6. Click  Save.
Set a limit for password attempts in the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the  Menu key.
3. Click  Options.
4. Set the  Password Attempts  field.
5. Press the  Menu key.
6. Click  Save.
Encryption
About encrypting data in the device memory When encryption for the device memory is turned on, your  BlackBerry® device uses a private key to encrypt data as it is stored on your device,
including data that your device receives when it is locked. Your device decrypts data as you access it.
User GuideSecurity263 
						

							You can set encryption to include or exclude your contacts. If you turn on encryption for contacts and you receive a call when your device is
locked, the caller name does not appear on the screen.
If you use a smart card certificate for authentication, depending on the smart card, you might also be able to use one of your smart card
certificates to provide two-factor encryption. In order to access the encrypted content, you must provide your device password and also connect
your device to your smart card reader.
When you lock your device, an open lock indicator appears at the top of the screen to indicate that your device is in the process of securing
your data, which includes deleting a copy of the private key from the temporary device memory. A lock indicator appears at the top of the
screen when your device has deleted the key.
About file encryption File encryption is designed to protect files that you store in the BlackBerry® device memory and on a media card that can be inserted in your
device. You can encrypt the files in the device memory and on your media card using an encryption key that your device generates, your device
password, or both.
If you encrypt the files using an encryption key that your device generates, you can only access the files on your media card when the media
card is inserted in your device. If you encrypt the files using your device password, you can access the files on your media card in any device
that you insert your media card into, as long as you know the password for the device.
Turn on encryption To encrypt data in the device memory, you must have set a password for your BlackBerry® device.
Depending on the amount of memory available for storing files in the device memory, you might not be able to encrypt files in the device
memory.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Encryption .
4. Change the  Encryption field to Enabled .
5. To encrypt data in the device memory, set the  Device Memory field to Enabled .
6. To encrypt files stored on a media card and on your device, set the  Media Card field to Enabled  and perform one of the following actions:
• To encrypt files using an encryption key that your device generates, change the  Mode field to  Device.
• To encrypt files using your device password, change the  Mode field to  Security Password .
• To encrypt files using an encryption key and your device password, change the  Mode field to  Security Password & Device .
7. To also encrypt media files such as pictures, songs, and videos, set the  Include Media Files field to Yes.
8. Press the  Menu key.
9. Click  Save.
To stop encrypting data in the device memory, change the  Device Memory field to Disabled . To stop encrypting files, change the  Media
Card  field to  Disabled .
Related topics
Set a device password, 259User GuideSecurity264 
						

							Set encryption strengthIf encryption of data in the device memory is turned on, you can set the strength of the encryption that your  BlackBerry® device uses to protect
data that you receive when your device is locked.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Encryption .
4. Set the  Strength field.
5. Press the  Menu key.
6. Click  Save.
Use a certificate to encrypt the encryption keys on your device To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact
your administrator.
If you have encryption for data in the BlackBerry device memory turned on and your smart card reader supports this feature, you might be able
to use a certificate from the smart card to encrypt the encryption keys on your device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Encryption .
4. Change the  Two-Factor Protection  field to Enabled .
5. Press the  Menu key.
6. Click  Save.
About encryption keys If your BlackBerry® device is associated with an email account that uses a BlackBerry® Enterprise Server or BlackBerry® Desktop Redirector,
your device is designed to use an encryption key to protect data as it travels between the BlackBerry Enterprise Server or BlackBerry Desktop
Redirector and your device.
You should generate a new encryption key every 2 weeks.
Generate an encryption key To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact
your administrator.
If your BlackBerry device is associated with an email account that uses a BlackBerry Enterprise Server that does not support this feature, you
can generate an encryption key using the BlackBerry® Desktop Manager, if it includes the email settings tool. For more information, see the
online help that is available in the BlackBerry Desktop Manager.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Information .
User GuideSecurity265 
						

							4. Highlight a service.
5. Press the  Menu key.
6. Click  Regenerate Encryption Key .
Memory cleaning
About memory cleaning Memory cleaning is designed to delete sensitive data from the temporary memory on your BlackBerry® device. Examples of sensitive data
include sensitive data in the cache for the key store browser, unencrypted data from email messages, LDAP authentication passwords, and
data from certificate and key searches.
When memory cleaning is turned on, the memory cleaning application is designed to delete sensitive data automatically in the following
situations:
• when you insert your device in a holster
• when you do not use your device for a specified period of time
• when you synchronize with your computer
• when you change the time or the time zone for your device
• when you lock your device
Turn on memory cleaning 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Memory Cleaning .
5. Change the  Status field to  Enabled .
6. Press the  Menu key.
7. Click  Save.
Change when your device deletes sensitive data from the temporary device memory 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Memory Cleaning .
5. Perform any of the following actions: • To prevent your BlackBerry® device from deleting sensitive data when you insert your device in a holster, change the  Clean When
Holstered  field to No.
• To prevent your device from deleting sensitive data when your device remains idle for a specified period of time, change the  Clean
When Idle  field to No.User GuideSecurity266 
						

							• To change how long your device waits after you stop using it before it deletes sensitive data, change the Idle Timeout field.
6. Press the  Menu key.
7. Click  Save.
Delete sensitive application data from the temporary device memory 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Memory Cleaning .
5. To delete sensitive data for all applications, press the  Menu key. Click  Clean Now .
View the icon for the memory cleaning application on the Home screen 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Memory Cleaning .
5. Change the  Show Icon on Home Screen  field to Yes.
6. Press the  Menu key.
7. Click  Save.
Certificates
Certificate basics Download a certificate from an LDAP or DSML certificate server
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Press the  Menu key.
6. Click  Fetch Certificates .
7. Specify the search criteria.
8. Press the  Menu key.
9. Click  Search.
10. Click a certificate.
11. Click  Add Certificate to Key Store .User GuideSecurity267 
						

							About certificate authority profiles
If your email account uses a  BlackBerry® Enterprise Server  that supports this feature, you can download certificates over the wireless network
from a certificate authority profile provided by your administrator. Depending on your organization, enrollment for a certificate might be required
and might also occur automatically.
When you enroll with a certificate authority profile, the latest certificate is downloaded to your BlackBerry device and added to your certificate
list. The certificate authority profiles shows the status of the certificate. If the certificate is scheduled to expire soon you can re-enroll with the
certificate authority profile to receive an updated certificate.
Download a certificate from a certificate authority
To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact
your administrator.
If your administrator has provided you with a certificate authority profile, you can enroll with the profile to download a certificate to your
BlackBerry device. If the certificate is scheduled to expire soon you can re-enroll to receive an updated certificate.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificate Authority Profile .
5. Click  Enroll or Re-enroll .
6. If necessary, type the credentials that you use to connect to your organization's network.
To hide the screen for the certificate authority profile while the request is being processed, press the  Menu key. Click  Hide. To return to this
screen, on the Home screen, click the  Certificate Authority Profile icon.
Import a certificate or PGP key from the device memory
1. On the Home screen or in a folder, click the  Media icon or the  Files icon.
2. Navigate to a certificate or PGP® key.
3. Highlight the certificate or PGP key.
4. Press the  Menu key.
5. Click  Import Certificate  or Import PGP Key .
To view the certificate or PGP key, press the  Menu key. Click  Display Certificate  or Display PGP Key .
Import a certificate or PGP key from a media card
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates  or PGP Keys .
5. Press the  Menu key.
User GuideSecurity268