Blackberry 9788 Smartphone 6 0 User Guide

							Security
Security basics
About the device password
If you set a BlackBerry® device password, you'll be prompted to enter your password to unlock your device.
If you forget your password, it can't be recovered. If you exceed the number of allowed password attempts, your device 
deletes all your device data for security reasons and you'll be prompted to set a new password. If your device uses a 
BlackBerry® Enterprise Server, depending on the IT policies that have been set by your administrator, data on your media card 
might be deleted as well. For more information, contact your administrator.
Research In Motion recommends that you regularly create and save a backup file on your computer, especially before you 
update any software. Maintaining a current backup file on your computer might allow you to recover device data if your device 
is lost, stolen, or corrupted by an unforeseen issue.
Set a device password
If you forget your BlackBerry® device password, it can't be recovered. You can reset your password without knowing your 
current password by deleting all your device data.
Research In Motion recommends that you regularly create and save a backup file on your computer, especially before you 
update any software. Maintaining a current backup file on your computer might allow you to recover device data if your device  is lost, stolen, or corrupted by an unforeseen issue.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
3.Click Set Password.
4.Type a password.
5.Press the  key > Save.
To turn off your BlackBerry® device password, clear the Enable check box.
Change the device password
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password > Change Password.
User GuideSecurity269 
						

							Lock your device
If you are not on a call, you can lock the keyboard to avoid pressing keys accidentally when you are not using your BlackBerry® device. If your email account uses a BlackBerry® Enterprise Server, depending on the options that your administrator sets, you 
might not be able to perform this task. For more information, contact your administrator.
Do one of the following:
•To lock your BlackBerry device, if you have set a device password, on the Home screen or in a folder, click the Password 
Lock
 icon.
•To lock the keyboard, press the  key on the top left of your device.
To unlock your device, type your device password. Press the Enter key. To unlock the keyboard, press the  key again.
Lock your device when you insert it in the holster
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
3.Select the Lock Handheld Upon Holstering check box.
4.Press the  key > Save.
Set a limit for device password attempts
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Password.
3.Change the Number of Password Attempts field.
4.Press the  key > Save.
Delete device data, third-party applications, or media card files
Before you delete your BlackBerry® device data or media card files, consider backing up these items so that you have a copy on 
your computer.
CAUTION: If you have turned on encryption, the process for deleting all device data can take up to an hour to complete. You 
cannot stop the process after you start it. If you reset your device, the process restarts after the device restarts.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Security Wipe.
•To delete data from the messages application, contacts application, and other applications, select the Emails, Contacts, 
Etc
 check box.
•To delete all third-party applications that you have added, select the User Installed Applications check box.
•To delete all files from your media card, select the Media Card check box.
3.Type blackberry.
4.Click Wipe Data.
User GuideSecurity270 
						

							If you are preparing your device for resale and you have an email account that uses the BlackBerry® Internet Service, to 
prevent messages from this account from being sent to your device, contact your wireless service provider to disassociate the 
account from your device.
Password Keeper
About the Password Keeper
Use the Password Keeper to store all your passwords in one place. The Password Keeper is designed to protect your passwords 
with a Password Keeper password. When you type this password, the Password Keeper decrypts your passwords.
You can also use the Password Keeper to generate random passwords that contain numbers, letters, and symbols.
Change a password in the password keeper
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Highlight a password.
3.Press the  key > Open.
4.Change the password information.
5.Press the  key > Save.
Add a password to the password keeper
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > New.
3.Type the password information.
4.Press the  key > Save.
Generate a random password
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > New.
3.Press the  key > Random Password.
4.Press the  key > Save.
Set criteria for randomly generated passwords
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > Options.
3.Set the random password fields.
User GuideSecurity271 
						

							4.Press the  key > Save.
Change the Password Keeper password
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > Change Password.
Delete a password from the password keeper
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Highlight a password.
3.Press the  key > Delete.
Copy a password
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Highlight a password.
3.Press the  key > Copy Username or Copy Password.
To clear the clipboard, press the  key > Clear Clipboard.
Note: Passwords are not encrypted when they are on the clipboard.
Prevent password copying
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > Options.
3.Clear the Allow Clipboard Copy check box.
4.Press the  key > Save.
Set a limit for password attempts in the Password Keeper
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > Options.
3.Change the Password Attempts field.
4.Press the  key > Save.
Hide or show passwords in the Password Keeper
1.On the Home screen or in the Applications folder, click the Password Keeper icon.
2.Press the  key > Options.
•To hide passwords in the Password Keeper, clear the Show Password checkbox.
•To show passwords in the Password Keeper again, select the Show Password checkbox.
User GuideSecurity272 
						

							3.Press the  key > Save.
Encryption
About encrypting data on your device
When encryption for data on your BlackBerry® device is turned on, your device uses a private key to encrypt data as it is stored 
on your device, including data that your device receives when it is locked. Your device decrypts data as you access it.
You can set encryption to include or exclude your contacts. If you turn on encryption for contacts and you receive a call when  your device is locked, the caller name does not appear on the screen.
If you use a smart card certificate for authentication, depending on the smart card, you might also be able to use one of your smart card certificates to provide two-factor encryption. In order to access the encrypted content, you must provide your 
device password and also connect your device to your smart card reader.
When you lock your device, an open lock indicator appears at the top of the screen to indicate that your device is in the  process of securing your data, which includes deleting a copy of the private key from the temporary device memory. A lock 
indicator appears at the top of the screen when your device has deleted the key.
About file encryption
File encryption is designed to protect files that you store on your BlackBerry® device and on a media card that can be inserted 
in your device. You can encrypt the files on your device and on your media card using an encryption key that your device 
generates, your device password, or both.
If you encrypt the files using an encryption key that your device generates, you can only access the files on your media card  when the media card is inserted in your device. If you encrypt the files using your device password, you can access the files on your media card in any device that you insert your media card into, as long as you know the password for the device.
Turn on encryption
To encrypt data on your BlackBerry® device, you must have set a password for your device.
Depending on the amount of storage space available for storing files on your device, you might not be able to encrypt files on 
your device.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Encryption.
3.To encrypt data on your device, in the Device Memory section, select the Encrypt check box.
4.To encrypt files that are stored on a media card and on your device, in the Media Card section, select the Encrypt check 
box and do one of the following:
•To encrypt files using an encryption key that your device generates, change the Mode field to Device Key.
•To encrypt files using your device password, change the Mode field to Device Password.
User GuideSecurity273 
						

							•To encrypt files using an encryption key and your device password, change the Mode field to Device Password & 
Device Key
.
5.To also encrypt media files such as pictures, songs, and videos, select the Include Media Files check box.
6.Press the  key > Save.
To stop encrypting data on your device, in the Device Memory section, clear the Encrypt check box. To stop encrypting files, in 
the 
Media Card section, clear the Encrypt check box.
Set encryption strength
If encryption of data that is stored on your BlackBerry® device is turned on, you can set the strength of the encryption that 
your device uses to protect data that you receive when your device is locked.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Encryption.
3.Change the Strength field.
4.Press the  key > Save.
Use a certificate to encrypt the encryption keys on your device
To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more 
information, contact your administrator.
If you have encryption for data that is stored on your BlackBerry device turned on and your smart card reader supports this 
feature, you might be able to use a certificate from the smart card to encrypt the encryption keys on your device.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Encryption.
3.Select the Two-factor Protection check box.
4.Press the  key > Save.
About encryption keys
If your BlackBerry® device is associated with an email account that uses a BlackBerry® Enterprise Server or BlackBerry® Desktop  Redirector, your device is designed to use an encryption key to protect data as it travels between the BlackBerry Enterprise Server or BlackBerry Desktop Redirector and your device.
You should generate a new encryption key every 2 weeks.
Generate an encryption key
To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact your administrator.
User GuideSecurity274 
						

							If your email account uses a BlackBerry Enterprise Server that does not support this feature, you can generate an encryption key using the BlackBerry® Desktop Software, if it includes the email settings tool. For more information, see the Help in the 
BlackBerry Desktop Software.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Security Status Information.
3.Highlight a service.
4.Press the  key.
5.Click Regenerate Encryption Key.
Memory cleaning
About memory cleaning
Memory cleaning is designed to delete sensitive data from the temporary memory on your BlackBerry® device. Examples of  sensitive data include sensitive data in the cache for the key store browser, unencrypted data from email messages, LDAP  authentication passwords, and data from certificate and key searches.
When memory cleaning is turned on, the memory cleaning application is designed to delete sensitive data automatically in the 
following situations:
•when you insert your device in a holster
•when you do not use your device for a specified period of time
•when you synchronize with your computer
•when you change the time or the time zone for your device
•when you lock your device
Turn on memory cleaning
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Memory Cleaning.
3.Select the Enable check box.
4.Press the  key > Save.
Change when your device deletes sensitive data from the temporary 
device memory
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Memory Cleaning.
•To prevent your BlackBerry® device from deleting sensitive data when you insert your device in a holster, clear the 
Clean When Holstered check box.
User GuideSecurity275 
						

							•To prevent your device from deleting sensitive data when your device remains idle for a specified period of time, clear 
the 
Clean When Idle check box.
•To change how long your device waits after you stop using it before it deletes sensitive data, change the Idle Timeout 
field.
3.Press the  key > Save.
Delete sensitive application data from the temporary device memory
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Memory Cleaning.
3.To delete sensitive data for all applications, click Clean.
View the icon for the memory cleaning application on the Home screen
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Memory Cleaning.
3.Select the Place Memory Cleaner Shortcut on Homescreen check box.
4.Press the  key > Save.
Certificates
About certificates
A certificate is a digital document that binds the identity and public key of a certificate subject. If your email account uses a  BlackBerry® Enterprise Server that supports this feature, you can download certificates over the wireless network from a 
certificate authority profile that is provided by your administrator. The certificate authority signs the certificate to verify that it 
can be trusted.
Depending on your organization, enrollment for a certificate might be required and might also occur automatically.
Certificate basics
Download a certificate from an LDAP-enabled server or DSML-enabled server
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates.
3.Press the  key > Fetch Certificates.
4.Specify the search criteria.
5.Press the  key > Search.
6.Click a certificate.
User GuideSecurity276 
						

							7.Click Add Certificate to Key Store.
About certificate enrollment
If your email account uses a BlackBerry® Enterprise Server that supports this feature, you can download certificates over the wireless network from a certificate authority profile provided by your administrator. Depending on your organization, 
enrollment for a certificate might be required and might also occur automatically.
When you enroll with a certificate authority profile, the latest certificate is downloaded to your BlackBerry device and added to 
your certificate list. The certificate authority profile shows the status of the certificate. If the certificate is scheduled to expire  soon you can re-enroll with the certificate authority profile to receive an updated certificate.
Download a certificate from a certificate authority
To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact your administrator.
If your administrator has provided you with a certificate authority profile, you can enroll with the profile to download a 
certificate to your BlackBerry device. If the certificate is scheduled to expire soon, you can re-enroll to receive an updated certificate.
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Enrollment > Enroll or Re-enroll.
3.If necessary, type the credentials that you use to connect to your organization's network.
To hide the screen for the certificate authority profile while the request is being processed, press the  key > Hide. To 
return to this screen, on the Home screen, click the 
Certificate Authority Profile icon.
Import a certificate or PGP key that is saved on your device
1.On the Home screen or in a folder, click the Media icon or Files icon.
2.Find and highlight a certificate or PGP® key.
3.Press the  key > Import Certificate or Import PGP Key.
To view the certificate or PGP key, press the  key > Display Certificate or Display PGP Key.
Import a certificate or PGP key from a media card
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP.
3.Press the  key > Show Media Card Certificates or Show Media Card PGP Keys.
To view the certificate or PGP® key, press the  key > Display Certificate or Display PGP Key.
User GuideSecurity277 
						

							View properties for a certificate
1.On the Home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates.
3.Click a certificate.
Certificate properties
PropertyDescriptionRevocation StatusThis field displays the revocation status of the certificate at a specified date and time.Trust StatusThis field displays the trust status of the certificate chain. A 
certificate can be explicitly trusted (the certificate itself is 
trusted), implicitly trusted (the root certificate in the  certificate chain is trusted on your  BlackBerry® device), or not 
trusted (the certificate is not explicitly trusted and the root 
certificate in the certificate chain is not trusted or does not 
exist on your device).Expiration DateThis field displays the expiration date of the certificate, as  specified by the certificate issuer.Certificate TypeThis field displays the certificate format. Your device supports 
X.509 and WTLS certificate formats.Public Key TypeThis field displays the standard to which the public key  complies. Your device supports  RSA®, DSA, Diffie-Hellman, and 
ECC keys.SubjectThis field displays information about the certificate subject.IssuerThis field displays information about the certificate issuer.Serial NumberThis field displays the certificate serial number in hexadecimal  format.Key UsageThis field displays approved uses of the public key.Subject Alt NameThis field displays an alternate email address for the certificate 
subject, if an alternate email address is available.Signature AlgorithmThis field displays the algorithm that the certificate issuer used  to generate the digital signature.User GuideSecurity278