Blackberry Torch 9800 6 0 User Guide

							Reject certificate revocation lists from unverified CRL servers1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Key Stores .
3. Clear the  Accept Unverified CRLs  check box.
4. Press the 
 key >  Save.
Your BlackBerry® device rejects certificate revocation lists from CRL servers that the BlackBerry® MDS Connection Service
cannot verify.
Smart cards
About using a smart card with your device Smart cards store certificates and private keys. You can use a smart card reader to import certificates from a smart card to the
key store on your BlackBerry® device, but you cannot import private keys. As a result, private key operations such as signing
and decryption use the smart card, and public key operations such as verification and encryption use the public certificates on
your device.
If you use a smart card certificate to authenticate with your device, after you connect your smart card reader to your device, your device requests authentication from the smart card each time that you unlock your device.
You can install multiple smart card drivers on your device, including drivers for microSD smart cards, but you can only
authenticate to one smart card at a time. If you are authenticating using a microSD smart card and you want to transfer media files between your microSD smart card and your computer in mass storage mode, you must temporarily turn off two-factor
authentication or select a different authentication option.
If the S/MIME Support Package for BlackBerry® devices is installed on your device, you can use smart card certificates to send
S/MIME-protected messages.
Turn on two-factor authentication To perform this task, you must have set a password for your BlackBerry® device and have the smart card password that you
received with your smart card.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Password .
• To use a smart card and your device password to unlock your device, set the  Authentication Type field to Smart Card .
• To use your connected smart card reader (even if the smart card is not inserted) and your device password to unlock your device, set the  Authentication Type  field to Proximity . Select the  Prompt for Device Password  check box.
3. Press the 
 key >  Save.
User GuideSecurity289 
						

							Import a certificate from a smart card1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Press the 
 key >  Import Smart Card Certs .
4. Type your smart card password.
5. Select the check box beside a certificate.
6. Click  OK.
7. Type your key store password.
8. Click  OK.
Lock your device when you remove your smart card from your smart card reader 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Password .
3. If necessary, change the  User Authenticator field to Smart card .
4. Change the  Lock On Card Removal  field to Enabled .
5. Press the 
 key >  Save.
About smart password entry If you use advanced authentication and your BlackBerry® device password or smart card password is numeric, you might be
able to use smart password entry in some password fields. When smart password entry is turned on, your device is designed to
remember the format of a password that you type in a password field. When you type the password again, your device applies a smart password filter to the password field. If the password is numeric, a 123 indicator appears beside the password field and
you do not have to press the Alt key to type numbers. If the password is alphanumeric, an ABC indicator appears beside the password field.
To use smart password entry, advanced authentication must be turned on and the correct smart card driver and smart card
reader must be installed on your device.
Turn off smart password entry To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.You can turn off smart password entry to reduce the chance that someone might guess your device password or smart card
password based on the smart password filter that your device applies to password fields.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Password .
3. If necessary, change the  User Authenticator field to Smart Card .
4. Set the  Smart Password Entry  field to Disabled .
User GuideSecurity290 
						

							5.Press the  key >  Save.
To turn on smart password entry again, set the  Smart Password Entry field to Enabled .
Switch smart password filters In a blank password field, press the  Enter key.
The indicator for the new smart password filter appears beside the password field.
Prerequisites: Using authentication certificates • Your BlackBerry® device must have the correct smart card driver and smart card reader driver installed.• You must have imported a certificate from your smart card that you can use for signing and verification.
• You must turn on advanced authentication.
• You must have set a device password.
• You must have the smart card password that you received with your smart card.
Use a certificate to authenticate your smart card To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
If you use a certificate to authenticate your smart card, the certificate authenticates your smart card whenever you use your
smart card to unlock your device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Password .
3. If necessary, change the  User Authenticator field to Smart card .
4. Change the  Authentication Certificate  field.
5. Press the 
 key >  Save.
To stop using a certificate to authenticate your smart card, set the  Authentication Certificate field to None.
Check the status of your authentication certificate automatically To perform this task, you must be using a smart card and a password to unlock your BlackBerry® device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Password .
3. If necessary, change the  User Authenticator field to Smart Card .
4. Change the  Certificate Status Check  field.
5. Press the 
 key >  Save.
If your device checks the status of your authentication certificate and finds that it is revoked or expired, your device locks.
User GuideSecurity291 
						

							Store the passphrase for your smart card on your device1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Smart Card .
3. Select the  PIN Caching check box.
4. Press the 
 key >  Save.
Your BlackBerry® device stores the passphrase for the same length of time as it stores your key store password.
Turn off notification for smart card connections 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Smart Card .
3. Clear the  LED Session Indicator  check box.
4. Press the 
 key >  Save.
To turn on notification for smart card connections, select the  LED Session Indicator check box.
VPN settings Depending on the options that your administrator has set for you, this feature might not be supported.
About VPN profiles A VPN profile contains the information that you require to log in to your organization's network over VPN. Depending on yourorganization, you might have more than one VPN profile on your BlackBerry® device. For more information about VPN profiles,
contact your administrator.
Log in to a VPN • Your email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact your administrator.
• If you use a software token to log in to a VPN, the software token must be on your device and the software token information that appears in the VPN profile must be correct.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > VPN .
3. To connect to your organization's network, click  Log in.
User GuideSecurity292 
						

							Change the user name and password for a VPN profile1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > VPN .
3. Highlight a VPN profile. 4. Press the 
 key >  Edit.
5. In the  Username  field, type a new user name.
6. In the  Password field, type a new password.
7. Press the 
 key >  Save.
About software tokens You might need a software token to log in to a VPN. A software token includes a token code that your device regenerates
periodically and a PIN. For more information about software tokens, contact your administrator.
Change the software token for a VPN profile To perform this task, the software token that you want to use must be installed on your BlackBerry® device. For moreinformation, contact your administrator.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > VPN .
3. Highlight a VPN profile. 4. Press the 
 key >  Edit.
5. Change the  Software Token Serial Number  field.
6. Press the 
 key >  Save.
Change the PIN for a software token on your device 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Software Tokens .
3. Click a software token >  Specify PIN.
Verify security software manually Security self-tests are designed to verify that security software is implemented correctly on your BlackBerry® device. The testsshould run automatically after you restart your device, but you can also verify security software manually.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Security Status Information .
3. Press the 
 key >  Verify Security Software .
User GuideSecurity293 
						

							Third-party application controlAbout permissions for third-party applications You can set permissions that control how third-party applications on your BlackBerry® device interact with the otherapplications on your device. For example, you can control whether third-party applications can access data or the Internet,
make calls, or use Bluetooth® connections.
If you have added third-party applications to your device, your device is designed to prevent these applications from sending or
receiving data without your knowledge. Before a third-party application sends or receives data, a dialog box prompts you to
accept or deny the connection request. For a selected application, you can turn off this prompt for a specific location or
resource.
Reset connection permissions for third-party applications 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Device > Application Management .
3. Press the 
 key >  Edit Default Permissions .
4. Press the 
 key >  Reset All Firewall Prompts .
5. Press the 
 key >  Apply Defaults to All .
About direct Internet connections for third-party applications Some third-party applications that you add to your BlackBerry® device might require a direct TCP or HTTP connection to the
Internet. For example, a stock price application might need to connect to the Internet to retrieve the latest stock prices. You
might have to set the APN that the third-party application uses for this connection.
Set up a direct Internet connection for a third-party application To get the user name and password for the APN, contact your wireless service provider.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Device > Advanced System Settings  > TCP IP .
3. Type the APN information. 4. Press the 
 key >  Save.
Turn on safe mode When you start your BlackBerry® device, you can turn on safe mode to prevent third-party applications from runningautomatically. This safe mode enables you to troubleshoot or remove any unwanted applications.
User GuideSecurity294 
						

							1. Remove and reinsert the battery.
2. When the red LED light goes out, press and hold the  Escape key as the device is loading.
3. When the dialog appears, click  OK.
When safe mode is on, a safe mode indicator appears in the device status section of the Home screen. To turn off safe mode, repeat step 1.
Set permissions for a third-party application Note:  Changing permissions for third-party applications can significantly affect the operation of applications on your
BlackBerry® device. For more information about how changing these permissions might affect the operation of the applications on your device, contact your wireless service provider or administrator.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Device > Application Management .
• To set permissions for a specific third-party application, highlight the application. Press the 
 key >  Edit Permissions .
• To set permissions for all third-party applications, press the 
 key >  Edit Default Permissions .
3. Expand  Connections , Interactions , or User Data .
4. Change the permission fields.
5. Press the 
 key >  Save.
Turn off a prompt for a third-party application connection 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Device > Application Management .
3. Highlight a third-party application.
4. Press the 
 key >  Edit Permissions  > Prompt Exceptions .
• To allow the application to connect to a specific location or resource without displaying a prompt, click  Add Allow.
Specify a protocol and, if necessary, the domain.
• To prevent the application from connecting to a specific location or resource without displaying a prompt, click  Add
Deny . Specify a protocol and, if necessary, the domain.
5. Press the 
 key >  Save.
Interaction permissions for third-party applications
PermissionDescriptionCross Application CommunicationSpecify whether third-party applications can communicate and share data
with other applications on your BlackBerry® device.Device SettingsSpecify whether third-party applications can turn on or turn off your device
or change device options, such as display options.User GuideSecurity295 
						

							PermissionDescriptionMediaSpecify whether third-party applications can access media files on yourdevice.Application ManagementSpecify whether third-party applications can add or delete application
modules or access module information such as an application name or
version.ThemesSpecify whether your device can use third-party applications as a source for
customized themes.Input SimulationSpecify whether third-party applications can simulate actions, such as pressing a key on your device.Browser FilteringSpecify whether third-party applications can register browser filters with the browser on your device to add, change, or delete website contentbefore it appears in your browser.RecordingSpecify whether third-party applications can take screen shots of yourdevice screen or use other applications on your device to take pictures or
recordings.Security Timer ResetSpecify whether third-party applications can reset the duration that your
device remains unlocked after you stop using it.
Data permissions for third-party applications
PermissionDescriptionEmailSet whether third-party applications can access email messages, text messages, or PIN messages on your BlackBerry® device.Organizer DataSet whether third-party applications can access organizer data such as contacts, calendar entries, tasks, or memos.FilesSet whether third-party applications can access files that you store on your device. For example, you can set whether third-party applications can access files that you transfer to your device
using  Bluetooth®  technology or the media manager tool of the BlackBerry® Desktop Software .Security DataSet whether third-party applications can access certificates or keys in the key store on your
device.User GuideSecurity296 
						

							Troubleshooting: Security
I cannot download a certificate If you changed the connection type that your BlackBerry® device uses to connect to the LDAP-enabled server or DSML-enabledserver, try switching to the default connection type.
I cannot unlock my device using my smart card Try performing the following actions: • Verify that the correct smart card is inserted in the smart card reader.
• Verify that the smart card is inserted in the smart card reader correctly.
• Verify that you typed the smart card password correctly. You should have received this password when you received your smart card.
• If you use a certificate to authenticate your smart card, verify that the certificate is not revoked or expired.
My device prompts me to make an emergency call when I type a password If your BlackBerry® device password contains a combination of letters that corresponds to an emergency access number, yourdevice might prompt you to make an emergency call when you type your device password.
To continue typing your device password, press the  Escape key.
User GuideSecurity297 
						

							Service books and diagnostic reportsAccept, delete, or restore a service book Your wireless service provider or administrator might send a service book to your BlackBerry® device over the wireless networkto add an additional service or application to your device.
If your email account uses a BlackBerry® Enterprise Server, you can also receive service books on your device using the BlackBerry® Desktop Software. For more information, see the Help in the BlackBerry Desktop Software.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Device > Advanced System Settings  > Service Book .
3. Highlight a service book.
4. Press the 
 key.
• To accept a service book, click  Accept.
• To delete a service book, click  Delete.
• To restore a service book, click  Undelete.
Run a diagnostic report If you cannot connect to the wireless network or access services such as email messaging, your wireless service provider or
administrator might ask you to run and submit a diagnostic report. Your wireless service provider or administrator can use the
report to help you troubleshoot the issue.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Networks and Connections  > Mobile Network .
3. Press the 
 key >  Diagnostics Test .
4. Press the 
 key >  Run.
View, submit, or delete a diagnostic report 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Networks and Connections  > Mobile Network .
3. Press the 
 key >  Diagnostics Test .
4. Highlight a report.
5. Press the 
 key.
• To view the diagnostic report, click  View Report.
• To submit the diagnostic report, click  Email Report or PIN Report .
• To delete the diagnostic report, click  Delete.
User GuideService books and diagnostic reports298