Blackberry Storm 1 Manual

							9. Click Save.
When you add a  PGP® key, your BlackBerry®  device uses the name that the  PGP® Universal Server set for the key when it generated the
key.
Turn off the fetch status prompt that appears when you add a PGP key to the key store 1. In the device options, click  Security Options.
2. Click  PGP Keys .
3. Press the  Menu key.
4. Click  Fetch PGP Keys .
5. Press the  Menu key.
6. Click  Options.
7. Perform one of the following actions: • To download the revocation status of a PGP® key when you add it to the key store, change the  Fetch Status field to Yes.
• To add a PGP key to the key store without downloading the revocation status, change the  Fetch Status field to No.
8. Press the  Menu key.
9. Click  Save.
PGP key troubleshooting
I cannot download a PGP key from an LDAP certificate server Try performing the following actions: •Verify that your organization permits you to download  PGP® keys from an LDAP certificate server. For more information, contact
your administrator.
• If you changed the connection type that your BlackBerry® device uses to connect to an LDAP certificate server, try using the default connection type.
Certificate servers
Add a certificate server 1. In the device options, click  Security Options.
2. Click  Certificate Servers .
3. Press the  Menu key.
4. Click  New Server .
5. Specify information for the certificate server.
6. Press the  Menu key.
7. Click  Save.User GuideCertificate servers219 
						

							Change connection information for a certificate server1. In the device options, click  Security Options.
2. Click  Certificate Servers .
3. Highlight a certificate server.
4. Press the  Menu key.
5. Click  Edit.
6. Change connection information for the certificate server.
7. Press the  Menu key.
8. Click  Save.
Connection options for LDAP certificate servers Friendly Name: Type a display name for the certificate server.
Server Name: Type the network address of the certificate server.
Base Query: Type the base query information for the certificate server using X.509 certificate syntax (for example, o=test.rim.net).
Port: Type the port number for your organization’s network. The default port number is 389.
Authentication Type: Specify whether you must log in to the certificate server.
Connection Type: Specify whether your BlackBerry® device uses an SSL connection or a TLS connection to connect to the certificate server.
Connection options for OCSP and CRL servers Friendly Name: Type a display name for the certificate server.
Server URL: Type the web address of the certificate server.
Send connection information for a certificate server 1. In the device options, click  Security Options.
2. Click  Certificate Servers .
User GuideCertificate servers220 
						

							3. Highlight a certificate server.
4. Press the  Menu key.
5. Click  Email Server  or PIN Server .
Delete a certificate server 1. In the device options, click  Security Options.
2. Click  Certificate Servers .
3. Highlight a certificate server.
4. Press the  Menu key.
5. Click  Delete.
Key stores
About the key store The key store on your  BlackBerry® device might store the following items. To access these items in the key store, you must type a key store
password.
• personal certificates (certificate and private key pairs)
• certificates that you download using the certificate synchronization tool of the BlackBerry® Desktop Manager
• certificates that you download from an LDAP certificate server
• certificates that you add from a message
• personal PGP® keys (public and private key pairs)
• PGP public keys that you download from an LDAP certificate server
• PGP public keys that you add from a message
• root certificates that are included in the BlackBerry® Desktop Software
Change the key store password 1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Press the  Menu key.
4. Click  Change Password .
Synchronize the key store password with the device password If you synchronize the key store password with the device password, when you change the device password, the key store password changes
to match it automatically.
1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Synchronize Key Store Password to Device Password  field to Yes.
4. Press the  Menu key.User GuideKey stores221 
						

							5. Click Save.
Change when your device deletes the key store password 1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Private Key Password Timeout  field.
4. Press the  Menu key.
5. Click  Save.
To access private keys after your BlackBerry® device deletes the key store password, you must type your key store password.
Add contacts to your contact list automatically when you add items to the key store 1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Key Store Address Injector  field to Enabled .
4. Press the  Menu key.
5. Click  Save.
Change the service that your device uses to download certificates Depending on your organization, you might not be able to change the service that you use to download certificates. For more information,
contact your administrator.
1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Certificate Service  field.
4. Press the  Menu key.
5. Click  Save.
Turn off automatic backup of key store data By default, items in the key store on your BlackBerry® device are backed up or restored when you back up or restore your device data. If
you do not want to back up your private key to or restore your private key from your computer for security reasons, you can turn off
automatic backup and restore of key store data.
1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Allow Key Store Backup/Restore  field to No.
4. Press the  Menu key.
5. Click  Save.
To turn on automatic backup of key store data, change the  Allow Key Store Backup/Restore field to Yes.User GuideKey stores222 
						

							Change the refresh rate for certificate revocation lists1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Certificate Status Expires After  field.
4. Press the  Menu key.
5. Click  Save.
Your BlackBerry® device downloads a new revocation status automatically when your device uses a key store item with a status that is
older than the time limit that you set.
Reject certificate revocation lists from unverified CRL servers 1. In the device options, click  Security Options.
2. Click  Key Stores .
3. Change the  Accept Unverified CRLs  field to No.
4. Press the  Menu key.
5. Click  Save.
Your BlackBerry®  device rejects certificate revocation lists from CRL servers that the BlackBerry® MDS Connection Service cannot verify.
Smart cards
About using a smart card with your device Smart cards store certificates and private keys. You can use a smart card reader to import certificates from a smart card to the key store
on your BlackBerry® device, but you cannot import private keys. As a result, private key operations such as signing and decryption use
the smart card, and public key operations such as verification and encryption use the public certificates on your device.
If you use a smart card certificate to authenticate to your device, after you connect your smart card reader to your device, your device
requests authentication from the smart card each time that you unlock your device.
If the S/MIME Support Package for  BlackBerry® devices is installed on your device, you can use smart card certificates to send S/MIME-
protected messages.
About two-factor authentication Two-factor authentication, which requires an item that you have (for example, a smart card) and an item that you know (for example, a
pass phrase), is designed to provide additional security for your  BlackBerry® device. You can use a smart card for two-factor authentication
when you log in to your device, or you can use a software token for two-factor authentication when you use your device with  RSA® software
as a hardware token.
If you use two-factor authentication, you must type your pass phrase when you
User GuideSmart cards223 
						

							• unlock your device
• change a general security option on your device
• change a smart card option
• use your device with RSA software
Turn on two-factor authentication You must have set a BlackBerry® device password and have the smart card password that you received with your smart card.
1. In the device options, click  Password.
2. Change the  User Authenticator  field to Smart Card .
3. Press the  Menu key.
4. Click  Save.
5. Complete the instructions on the screen.
Import a certificate from a smart card 1. In the device options, click  Security Options.
2. Click  Certificates .
3. Press the  Menu key.
4. Click  Import Smart Card Certs .
5. Type your smart card password.
6. Select the check box beside a certificate.
7. Click  OK.
8. Type your key store password.
9. Click  OK.
Lock your device when you remove your smart card from your smart card reader 1. In the device options, click  Security Options.
2. Click  Smart Card .
3. Change the  Lock On Card Removal  field to Enabled .
4. Press the  Menu key.
5. Click  Save.
About smart password entry If you use two-factor authentication and your BlackBerry® device password or smart card password is numeric, you might be able to use
smart password entry in some password fields. When smart password entry is turned on, your device is designed to remember the format
of a password that you type in a password field. When you type the password again, your device applies a smart password filter to the
password field. If the password is numeric, a 123 indicator appears beside the password field. If the password is alphanumeric, an ABC
indicator appears beside the password field.
To use smart password entry, two-factor authentication must be turned on and the correct smart card driver and smart card reader must
be installed on your device.User GuideSmart cards224 
						

							Turn off smart password entryYou can turn off smart password entry to reduce the chance that someone might guess your BlackBerry® device password or smart card
password based on the smart password filter that your device applies to password fields.
1. In the device options, click  Security Options.
2. Click  General Settings .
3. Set the  Smart Password Entry  field to Disabled .
4. Press the  Menu key.
5. Click  Save.
To turn on smart password entry again, set the  Smart Password Entry field to Enabled .
Switch smart password filters In a blank password field, press the  Enter key.
The indicator for the new smart password filter appears beside the password field.
Prerequisites: Using authentication certificates • Your BlackBerry® device must have the correct smart card driver and smart card reader driver installed.
• You must have imported a certificate from your smart card that you can use for signing and verification.
• You must turn on two-factor authentication.
• You must have set a device password.
• You must have the smart card password that you received with your smart card.
Use a certificate to authenticate your smart card If you use a certificate to authenticate your smart card, the certificate authenticates your smart card whenever you use your smart card
to unlock your BlackBerry® device.
1. In the device options, click  Security Options.
2. Click  General Settings .
3. Set the  Authentication Certificate  field.
4. Press the  Menu key.
5. Click  Save.
To stop using a certificate to authenticate your smart card, set the  Authentication Certificate field to None.
Check the status of your authentication certificate automatically 1. In the device options, click  Security Options.
2. Click  General Settings .
3. Change the  Certificate Status Check  field.
User GuideSmart cards225 
						

							4. Press the Menu key.
5. Click  Save.
If your BlackBerry® device checks the status of your authentication certificate and finds that it is revoked or expired, your device locks.
Store the pass phrase for your smart card in the application memory 1. In the device options, click  Security Options.
2. Click  Smart Card .
3. Change the  PIN Caching field to Enabled .
4. Press the  Menu key.
5. Click  Save.
Your BlackBerry® device stores the pass phrase for the same length of time as it stores your key store password.
Turn off notification for smart card connections 1. In the device options, click  Security Options.
2. Click  Smart Card .
3. Change the  LED Session Indicator  field to Disabled .
4. Press the  Menu key.
5. Click  Save.
To turn on notification for smart card connections, change the  LED Session Indicator field to Enabled .
Software tokens
About software tokens You might need a software token to log in to a VPN. A software token includes a token code that your BlackBerry® device regenerates
periodically and a PIN. For more information about software tokens, contact your administrator.
Change the PIN for a software token on your device 1. In the device options, click  Security Options.
2. Click  Software Tokens .
3. Click a software token.
4. Click  Specify PIN .
About security self-tests Security self-tests are designed to verify that security software is implemented correctly on your BlackBerry® device. The tests should run
automatically when your device restarts.User GuideSoftware tokens226 
						

							Verify security software1. In the device options, click  Security Options.
2. Click  General Settings .
3. Press the  Menu key.
4. Click  Verify Security Software .
Third-party application control
About permissions for third-party applications You can set permissions that control how third-party applications on your BlackBerry® device interact with the other applications on your
device. For example, you can control whether third-party applications can access data or the Internet, make calls, or use Bluetooth®
connections.
If you have added third-party applications to your device, the device firewall is designed to prevent these applications from sending or
receiving data without your knowledge. Before a third-party application sends or receives data, a dialog box prompts you to accept or
deny the connection request. If you turn off the prompt, you can reset the firewall options to receive the connection prompt again.
Reset connection permissions for third-party applications 1. In the device options, click  Security Options.
2. Click  Firewall.
3. Press the  Menu key.
4. Click  Reset Settings .
About direct Internet connections for third-party applications Some third-party applications that you add to your BlackBerry® device might require a direct TCP or HTTP connection to the Internet. For
example, a stock price application might need to connect to the Internet to retrieve the latest stock prices. You might have to set the APN
that the third-party application uses for this connection.
Set up a direct Internet connection for a third-party application To obtain the user name and password for the APN, contact your wireless service provider.
1. In the device options, click  Advanced Options.
2. Click  TCP.
3. Type the APN information.
4. Press the  Menu key.
5. Click  Save.
User GuideVerify security software227 
						

							Turn on safe modeWhen you start your BlackBerry® device, you can turn on safe mode to prevent third-party applications from running automatically. This
safe mode enables you to troubleshoot or remove any unwanted applications.
1. Remove and reinsert the battery.
2. When the red LED light goes out, press and hold the  Escape key as the device is loading.
3. When the dialog appears, click  OK.
When safe mode is on, a safe mode indicator appears in the device status section of the Home screen.
To turn off safe mode, repeat step 1.
Set permissions for a third-party application Note:   Changing permissions for third-party applications can significantly affect the operation of applications on your  BlackBerry® device.
For more information about how changing these permissions might affect the operation of the applications on your device, contact your
wireless service provider or administrator.
1. In the device options, click  Advanced Options.
2. Click  Applications .
3. Highlight a third-party application.
4. Press the  Menu key.
5. Perform one of the following actions: • To set permissions for the highlighted third-party application, click  Edit Permissions.
• To set permissions for all third-party applications, click  Edit Default Permissions.
6. Expand  Connections , Interactions , or User Data .
7. Change the permission fields.
8. Press the  Menu key.
9. Click  Save.
Connection permissions for third-party applications USB: Set whether third-party applications can use physical connections, such as a USB cable or RS-232 cable, that you have set up for
your BlackBerry® device.
Bluetooth: Set whether third-party applications can use Bluetooth® connections.
Phone: Set whether third-party applications can make calls or access call logs.
Location Data: Set whether third-party applications can use your GPS location information.
User GuideThird-party application control228