Blackberry Dx1 Manual
Have a look at the manual Blackberry Dx1 Manual online for free. It’s possible to download the document as PDF or print. UserManuals.tech offer 57 Blackberry manuals and user’s guides for free. Share the user manual or guide on Facebook, Twitter or Google+.
6. Click Show Media Card Certificates or Show Media Card PGP Keys . To view the certificate or PGP® key, press the Menu key. Click Display Certificate or Display PGP Key . View properties for a certificate 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Click a certificate. Certificate properties Revocation Status: This field displays the revocation status of the certificate at a specified date and time. Trust Status: This field displays the trust status of the certificate chain. A certificate can be explicitly trusted (the certificate itself is trusted), implicitly trusted (the root certificate in the certificate chain is trusted on your BlackBerry® device), or not trusted (the certificate is not explicitly trusted and the root certificate in the certificate chain is not trusted or does not exist on your device). Expiration Date: This field displays the date that the certificate issuer specified as the expiration date of the certificate. Certificate Type: This field displays the certificate format. Your device supports X.509 and WTLS certificate formats. Public Key Type: This field displays the standard to which the public key complies. Your device supports RSA®, DSA, Diffie-Hellman, and ECC keys. Subject: This field displays information about the certificate subject. Issuer: This field displays information about the certificate issuer. Serial Number: This field displays the certificate serial number in hexadecimal format. Key Usage: This field displays approved uses of the public key. Subject Alt Name: This field displays an alternate email address for the certificate subject, if an alternate email address is available.User GuideSecurity269
SHA1 Thumbprint:This field displays the SHA-1 digital thumbprint of the certificate. MD5 Thumbprint: This field displays the MD5 digital thumbprint of the certificate. View one type of certificate in the certificate list 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Press the Menu key. 6. Click one of the following menu items: •Show My Certs • Show Others Certs • Show CA Certs • Show Root Certs To view all the certificates on your BlackBerry® device, press the Menu key. Click Show All Certs . Send a certificate When you send a certificate, your BlackBerry® device sends the public key, but does not send the corresponding private key. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Send via Email or Send via PIN . Delete a certificate 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Delete. View the certificate chain for a certificate 1. On the Home screen or in a folder, click the Options icon.User GuideSecurity270
2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Show Chain . Certificate status Status indicators for certificates and certificate authority profiles Status indicators for certificates : The certificate has a corresponding private key that is stored on your BlackBerry® device or a smart card. :The certificate chain is trusted and valid, and the revocation status of the certificate chain is good. : The revocation status of the certificate chain is unknown, or a public key for a certificate in the certificate chain is weak. :The certificate is untrusted or revoked, or a certificate in the certificate chain is untrusted, revoked, expired, not valid, or cannot be verified. Status indicators for certificate authority profiles : A valid certificate is associated with the certificate authority profile. : A new certificate is being fetched because the current certificate is scheduled to expire soon. :The enrollment request is pending approval from the certificate authority. : Enrollment with the certificate authority profile is pending because an action from the user is required to continue, or because enrollment is scheduled to occur later. : Enrollment with the certificate authority profile is required and will occur automatically. User GuideSecurity271
Check the revocation status of a certificate or certificate chain 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Fetch Status or Fetch Chain Status . Change the trust status of a certificate Depending on the types of certificates that your administrator allows, you might not be able to trust some types of certificates. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Trust or Distrust . 8. If you are trusting a certificate, perform one of the following actions: • To trust the highlighted certificate, click Selected Certificate. • To trust the highlighted certificate and all the other certificates in the chain, click Entire Chain. Revoke a certificate If you revoke a certificate, the certificate is revoked only in the key store on your BlackBerry® device. Your device does not update the revocation status on the certificate authority or CRL servers. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Revoke. 8. Click Yes. 9. Change the Reason field. 10. Click OK. To cancel a certificate hold, highlight the certificate. Press the Menu key. Click Cancel Hold . User GuideSecurity272
Certificate revocation reasons Unknown: The revocation reason does not match any of the predefined reasons. Key Compromise: A person who is not the key subject might have discovered the private key value. CA Compromise: Someone might have revealed the private key of the certificate issuer. Change in Affiliation: The certificate subject no longer works for the organization. Superseded: A new certificate is replacing an existing certificate. Cessation of Operation: The certificate subject no longer requires the certificate. Certificate Hold: You want to revoke the certificate temporarily. Certificate options Change the display name for a certificate 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Highlight a certificate. 6. Press the Menu key. 7. Click Change Label . 8. Type a display name for the certificate. 9. Click OK. Add an email address to a certificate 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . User GuideSecurity273
5. Highlight a certificate. 6. Press the Menu key. 7. Click Associate Addresses . 8. Press the Menu key. 9. Click Add Address . 10. Perform one of the following actions: • Click a contact. • Click Use Once . Type an email address. Press the Enter key. 11. Press the Menu key. 12. Click Save. Turn off the display name prompt that appears when you add a certificate to the key store 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Press the Menu key. 6. Click Fetch Certificates . 7. Press the Menu key. 8. Click Options. 9. Change the Prompt for Label field to No. 10. Press the Menu key. 11. Click Save. When you add a certificate, your BlackBerry® device uses the certificate subject as the name for the certificate. Turn off the fetch status prompt that appears when you add a certificate to the key store 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates . 5. Press the Menu key. 6. Click Fetch Certificates . 7. Press the Menu key. 8. Click Options. 9. Perform one of the following actions: • To download the revocation status of a certificate when you add it to the key store, change the Fetch Status field to Yes. • To add a certificate to the key store without downloading the revocation status, change the Fetch Status field to No. 10. Press the Menu key. 11. Click Save.User GuideSecurity274
Change how often a certificate authority profile checks certificate status Depending on your organization, you might be able to change how often a certificate authority profile checks the status of its certificate. If the certificate is scheduled to expire soon you can re-enroll with the certificate authority profile to receive an updated certificate. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificate Authority Profile . 5. Change the Certificate Status Check Interval field. 6. Press the Menu key. 7. Click Save. Certificate shortcuts • To view the label and issuer of a certificate, press the Space key. • To view the properties of a certificate, press the Enter key. • To view the security level of a personal certificate, press the Alt key and L. • To view the serial number of a certificate, press the Alt key and S. • To view certificates for certificate authorities, press the Alt key and C. • To view personal certificates and certificates for other people, press the Alt key and E. • To view personal certificates, press the Alt key and P. • To view certificates for other people, press the Alt key and O. • To view root certificates, press the Alt key and R. • To view all certificates, press the Alt key and A. PGP keys PGP key basics Download a PGP key from an LDAP certificate server If you use the PGP® Universal Server, you might not be able to download PGP keys from an LDAP certificate server. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click PGP keys . 5. Press the Menu key. 6. Click Fetch PGP Keys . 7. Specify the search criteria. User GuideSecurity275
8. Press the Menu key. 9. Click Search. 10. Click a PGP key. 11. Click Add PGP Key to Key Store . Download a personal PGP key from the PGP Universal Server 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click PGP. 4. Press the Menu key. 5. Click Download Keys . Download an updated PGP key from an LDAP certificate server 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click PGP keys . 5. Highlight a PGP® key. 6. Press the Menu key. 7. Click Fetch Updated PGP Key . Import a certificate or PGP key from the device memory 1. On the Home screen or in a folder, click the Media icon or the Files icon. 2. Navigate to a certificate or PGP® key. 3. Highlight the certificate or PGP key. 4. Press the Menu key. 5. Click Import Certificate or Import PGP Key . To view the certificate or PGP key, press the Menu key. Click Display Certificate or Display PGP Key . Import a certificate or PGP key from a media card 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click Certificates or PGP Keys . 5. Press the Menu key. 6. Click Show Media Card Certificates or Show Media Card PGP Keys . To view the certificate or PGP® key, press the Menu key. Click Display Certificate or Display PGP Key .User GuideSecurity276
View properties for a PGP key 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click PGP keys . 5. Click a PGP® key. 6. Click View Subkey . PGP key properties Revocation Status: This field displays the revocation status of the PGP® key at a specified date and time. Trust Status: This field displays the trust status of the PGP key. A PGP key can be explicitly trusted (the PGP key itself is trusted), implicitly trusted (the PGP key is associated with a private key on your BlackBerry® device), or not trusted (the PGP key is not explicitly trusted and is not associated with a trusted PGP key on your device, and a chain of digital signatures to a trusted key does not exist). Creation Date: This field displays the date that the PGP® Universal Server generated the PGP key. Expiration Date: This field displays the date that the PGP Universal Server specified as the expiration date of the PGP key. Email Address: This field displays the email address that is associated with the PGP key. Multiple Email Address fields might appear. Public Key Type: This field displays the standard to which the public key complies. Your device supports RSA®, DSA, and Diffie-Hellman keys. Key Usage: This field displays approved uses of the PGP key. Fingerprint: This field displays the PGP key fingerprint in hexadecimal format. Send a PGP key When you send a PGP® key, your BlackBerry® device sends the public key, but does not send the corresponding private key. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click PGP Keys . User GuideSecurity277
5. Highlight a PGP key. 6. Press the Menu key. 7. Click Send via Email or Send via PIN . Delete a PGP key 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click Advanced Security Options . 4. Click PGP Keys . 5. Highlight a PGP® key. 6. Press the Menu key. 7. Click Delete. Clear the PGP data cache The PGP® data cache contains cached PGP public keys and the PGP® Universal Server policy that your BlackBerry® device downloads from the PGP Universal Server. 1. On the Home screen or in a folder, click the Options icon. 2. Click Security Options . 3. Click PGP. 4. Press the Menu key. 5. Click Clear Universal Cache . The next time that you send a PGP protected message, your device downloads an updated PGP Universal Server policy and updated PGP public keys from the PGP Universal Server. PGP key status PGP key status indicators : The PGP® key has a corresponding private key that is stored on your BlackBerry® device. :The PGP key is trusted and valid, and the revocation status of the PGP key is good. : The revocation status of the PGP key is unknown or the key is weak. :The PGP key is untrusted, revoked, expired, not valid, or cannot be verified. User GuideSecurity278