Blackberry Torch 9800 6 0 User Guide

							3. Highlight a certificate.
4. Press the 
 key >  Associate Addresses .
5. Press the 
 key >  Add Address .
6. Do one of the following: • Click a contact.
• Click  Use Once . Type an email address. Press the 
 key on the keyboard.
7. Press the 
 key >  Save.
Turn off the display name prompt that appears when you add a certificate to the key store 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Press the 
 key >  Fetch Certificates .
4. Press the 
 key >  Options .
5. Change the  Prompt for Label  field to No.
6. Press the 
 key >  Save.
When you add a certificate, your BlackBerry® device uses the certificate subject as the name for the certificate.
Turn off the fetch status prompt that appears when you add a certificate to the key store 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Press the 
 key >  Fetch Certificates .
4. Press the 
 key >  Options .
• To download the revocation status of a certificate when you add it to the key store, change the  Fetch Status field to
Yes .
• To add a certificate to the key store without downloading the revocation status, change the  Fetch Status field to No.
5. Press the 
 key >  Save.
Change how often a certificate authority profile checks certificate status Depending on your organization, you might be able to change how often a certificate authority profile checks the status of its certificate. If the certificate is scheduled to expire soon you can re-enroll with the certificate authority profile to receive anupdated certificate.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Change the  Certificate Status Check Interval  field.
4. Press the 
 key >  Save.
User GuideSecurity279 
						

							Certificate shortcuts
View the label and issuer of a certificatePress the Space key.View the properties of a certificatePress the  key.View the security level of a personal certificatePress the  Alt key and  L.View the serial number of a certificatePress the  Alt key and  S.View certificates for certificate authoritiesPress the  Alt key and  CView personal certificates and certificates for other peoplePress the  Alt key and  E.View personal certificatesPress the  Alt key and  P.View certificates for other peoplePress the  Alt key and  O.View root certificatesPress the  Alt key and  R.View all certificatesPress the  Alt key and  A.
PGP keys
About PGP keys If your email account uses a BlackBerry® Enterprise Server that supports this feature, you can download PGP® keys over thewireless network from a certificate server provided by your administrator. Depending on your organization, enrollment for a
certificate might be required and might also occur automatically.
PGP keys allow you to send and receive PGP messages using your BlackBerry® device if you are already sending and receiving PGP messages on your computer.
PGP key basics Download a PGP key from an LDAP-enabled server
If you use the PGP® Universal Server, you might not be able to download PGP keys from an LDAP-enabled server.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > PGP Keys .
3. Press the 
 key >  Fetch PGP Keys .
4. Specify the search criteria.
5. Press the 
 key >  Search .
6. Click a PGP key.
User GuideSecurity280 
						

							7. Click Add PGP Key to Key Store .
Download a personal PGP key from the PGP Universal Server 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Press the 
 key >  Download Keys .
Download an updated PGP key from an LDAP-enabled server 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP® key.
4. Press the 
 key >  Fetch Updated PGP Key .
Import a certificate or PGP key that is saved on your device
1. On the Home screen or in a folder, click the  Media icon or  Files icon.
2. Find and highlight a certificate or PGP® key.
3. Press the 
 key >  Import Certificate  or Import PGP Key .
To view the certificate or PGP key, press the 
 key >  Display Certificate  or Display PGP Key .
Import a certificate or PGP key from a media card 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security  > Advanced Security Settings  > Certificates  or PGP .
3. Press the 
 key >  Show Media Card Certificates  or Show Media Card PGP Keys .
To view the certificate or PGP® key, press the 
 key >  Display Certificate  or Display PGP Key .
View properties for a PGP key 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Click a PGP® key.
4. Click  View Subkey .
PGP key properties
PropertyDescriptionRevocation StatusThis field displays the revocation status of the PGP® key at a specified date and time.User GuideSecurity281 
						

							PropertyDescriptionTrust StatusThis field displays the trust status of the PGP key. A PGP key can be explicitly trusted (thePGP key itself is trusted), implicitly trusted (the PGP key is associated with a private key on
your BlackBerry® device), or not trusted (the PGP key is not explicitly trusted and is not associated with a trusted PGP key on your device, and a chain of digital signatures to atrusted key does not exist).Creation DateThis field displays the date that the PGP® Universal Server generated the PGP key.Expiration DateThis field displays the date that the PGP Universal Server specified as the expiration date
of the PGP key.Email AddressThis field displays the email address that is associated with the PGP key. Multiple Email
Address fields might appear.Public Key TypeThis field displays the standard to which the public key complies. Your device supports
RSA®, DSA, and Diffie-Hellman keys.Key UsageThis field displays approved uses of the PGP key.FingerprintThis field displays the PGP key fingerprint in hexadecimal format.
Send a PGP key
When you send a PGP® key, your BlackBerry® device sends the public key, but does not send the corresponding private key.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP key. 4. Press the 
 key >  Send via Email  or Send via PIN .
Delete a PGP key
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP® key.
4. Press the 
 key >  Delete .
Clear the PGP data cache The PGP® data cache contains cached PGP public keys and the PGP® Universal Server policy that your BlackBerry® device
downloads from the PGP Universal Server.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
User GuideSecurity282 
						

							3.Press the  key >  Clear Universal Cache .
The next time that you send a PGP protected message, your device downloads an updated PGP Universal Server policy and updated PGP public keys from the PGP Universal Server.
PGP key status PGP key status indicatorsIndicatorDescriptionThe PGP® key has a corresponding private key that is stored on your BlackBerry® device.The PGP key is trusted and valid, and the revocation status of the PGP key is good.The revocation status of the PGP key is unknown or the key is weak.The PGP key is untrusted, revoked, expired, not valid, or cannot be verified.
Check the revocation status of a PGP key
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP® key.
4. Press the 
 key >  Fetch Status .
Change the trust status of a PGP key
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP® key.
4. Press the 
 key >  Trust or Distrust .
Revoke a PGP key If you revoke a PGP® key, the PGP key is revoked only in the key store on your BlackBerry® device. Your device does not updatethe revocation status on the PGP® Universal Server.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP® key.
4. Press the 
 key >  Revoke  > Yes .
5. Change the  Reason field.
6. Click  OK.
User GuideSecurity283 
						

							PGP key revocation reasons
ReasonDescriptionUnknownThe revocation reason does not match any of the predefined reasons.SupersededA new PGP® key is replacing an existing PGP key.Key CompromiseA person who is not the key subject might have discovered the private key value.Key RetiredThe PGP key is no longer used.User ID InvalidThe user information for the PGP key is not valid.
PGP key optionsChange the display name for a PGP key1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Highlight a PGP® key.
4. Press the 
 key >  Change Label .
5. Type a display name for the PGP key.
6. Click  OK.
Turn off the display name prompt that appears when you add a PGP key to the key store
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Press the 
 key >  Fetch PGP Keys .
4. Press the 
 key >  Options .
5. Change the  Prompt for Label  field to No.
6. Press the 
 key >  Save.
When you add a PGP® key, your BlackBerry® device uses the name that the PGP® Universal Server set for the key when it
generated the key.
Turn off the fetch status prompt that appears when you add a PGP key to the key store 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > PGP .
3. Press the 
 key >  Fetch PGP Keys .
4. Press the 
 key >  Options .
• To download the revocation status of a PGP® key when you add it to the key store, change the  Fetch Status field to Yes.
User GuideSecurity284 
						

							• To add a PGP key to the key store without downloading the revocation status, change the Fetch Status field to No.
5. Press the 
 key >  Save.
PGP key shortcuts
View the label of a PGP® keyPress the  Space key.View the properties of a PGP keyPress the  key.View the security level of a PGP private keyPress the  Alt key and  L.View personal PGP keysPress the  Alt key and  P.View PGP keys for other peoplePress the  Alt key and  O.View all PGP keysPress the  Alt key and  A.
Troubleshooting: PGP keys
I cannot download a PGP key from an LDAP-enabled server
Try the following actions: • Verify that your organization permits you to download PGP® keys from an LDAP-enabled server. For more information,contact your administrator.
• If you changed the connection type that your BlackBerry® device uses to connect to an LDAP-enabled server, try using the default connection type.
Certificate servers Add a certificate server 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificate Servers .
3. Press the 
 key >  New Server .
4. Specify information for the certificate server.
5. Press the 
 key >  Save.
Change connection information for a certificate server 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificate Servers .
User GuideSecurity285 
						

							3. Highlight a certificate server.
4. Press the 
 key >  Edit.
5. Change the connection information for the certificate server.
6. Press the 
 key >  Save.
Connection options for OCSP and CRL servers
OptionDescriptionFriendly NameType a display name for the certificate server.Server URLType the web address of the certificate server.
Connection options for LDAP-enabled servers and DSML-enabled servers
OptionDescriptionFriendly NameType a display name for the server.Server NameType the network address of the server.Base QueryType the base query information for the server using X.509 certificate syntax (for example, o=test.rim.net).PortType the port number for your organization’s network. The default port number is 389.Authentication TypeSpecify whether you must log in to the server.Connection TypeSpecify whether your BlackBerry® device uses an SSL connection or a TLS connection toconnect to the server.
Send connection information for a certificate server
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificate Servers .
3. Highlight a certificate server. 4. Press the 
 key >  Email Server  or PIN Server .
Delete a certificate server 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificate Servers .
3. Highlight a certificate server.
4. Press the 
 key >  Delete .
User GuideSecurity286 
						

							Key store
About the key store The key store on your BlackBerry® device might store the following items. To access these items in the key store, you must
type a key store password.
• Personal certificates (certificate and private key pairs)
• Certificates that you download using the certificate synchronization tool of the BlackBerry® Desktop Software
• Certificates that you download from an LDAP-enabled server or DSML-enabled server
• Certificates that you download from a certificate authority profile • Certificates that you import from your device or a media card• Certificates that you add from a message• Root certificates that are included in the BlackBerry Desktop Software
• Personal PGP® keys (public and private key pairs)
• PGP public keys that you download from an LDAP-enabled server
• PGP public keys that you import from your device or a media card
• PGP public keys that you add from a message
Change the key store password 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Press the 
 key >  Change Key Store Password .
Synchronize the key store password with the device password If you synchronize the key store password with your BlackBerry® device password, when you change your device password, the
key store password changes to match it automatically.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Change the  Use Device Password as Key Store Password  field to Yes.
4. Press the 
 key >  Save.
Change when your device deletes the key store password 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Change the  Key Store Password Timeout  field.
User GuideSecurity287 
						

							4.Press the  key >  Save.
To access private keys after your BlackBerry® device deletes the key store password, you must type your key store password.
Add contacts to your Contacts application automatically when you add items to the key store 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Select the  Add Certificate Email to Contacts  check box.
4. Press the 
 key >  Save.
Change the service that your device uses to download certificates Depending on your organization, you might not be able to change the service that your BlackBerry® device uses to download
certificates. For more information, contact your administrator.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Change the  Certificate Service  field.
4. Press the 
 key >  Save.
Turn off automatic backup and restore of key store data By default, items in the key store on your BlackBerry® device are backed up or restored when you back up or restore your
device data. For security reasons, If you do not want to back up your private key to your computer or restore your private key from your computer, you can turn off automatic backup and restore of key store data.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Clear the  Allow Key Store Backup/Restore  check box.
4. Press the 
 key >  Save.
To turn on automatic backup and restore of key store data, select the  Allow Key Store Backup/Restore check box.
Change the refresh rate for certificate revocation lists 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. In the  Certificate Status  section, change the  Expires After field.
4. Press the 
 key >  Save.
Your BlackBerry® device downloads a new revocation status automatically when your device uses a key store item with a status that is older than the time limit that you set.
User GuideSecurity288