Blackberry Dx1 Manual

							6. Click Show Media Card Certificates  or Show Media Card PGP Keys .
To view the certificate or PGP® key, press the  Menu key. Click  Display Certificate  or Display PGP Key .
View properties for a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Click a certificate.
Certificate properties
Revocation Status: This field displays the revocation status of the certificate at a specified date and time.
Trust Status: This field displays the trust status of the certificate chain. A certificate can be explicitly trusted (the certificate itself is trusted), implicitly
trusted (the root certificate in the certificate chain is trusted on your BlackBerry® device), or not trusted (the certificate is not explicitly
trusted and the root certificate in the certificate chain is not trusted or does not exist on your device).
Expiration Date: This field displays the date that the certificate issuer specified as the expiration date of the certificate.
Certificate Type: This field displays the certificate format. Your device supports X.509 and WTLS certificate formats.
Public Key Type: This field displays the standard to which the public key complies. Your device supports RSA®, DSA, Diffie-Hellman, and ECC keys.
Subject: This field displays information about the certificate subject.
Issuer: This field displays information about the certificate issuer.
Serial Number: This field displays the certificate serial number in hexadecimal format.
Key Usage: This field displays approved uses of the public key.
Subject Alt Name: This field displays an alternate email address for the certificate subject, if an alternate email address is available.User GuideSecurity269 
						

							SHA1 Thumbprint:This field displays the SHA-1 digital thumbprint of the certificate.
MD5 Thumbprint: This field displays the MD5 digital thumbprint of the certificate.
View one type of certificate in the certificate list
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Press the  Menu key.
6. Click one of the following menu items: •Show My Certs
• Show Others Certs
• Show CA Certs
• Show Root Certs
To view all the certificates on your BlackBerry® device, press the  Menu key. Click  Show All Certs .
Send a certificate
When you send a certificate, your BlackBerry® device sends the public key, but does not send the corresponding private key.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Send via Email  or Send via PIN .
Delete a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Delete.
View the certificate chain for a certificate
1. On the Home screen or in a folder, click the  Options icon.User GuideSecurity270 
						

							2. Click Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Show Chain .
Certificate status Status indicators for certificates and certificate authority profiles
Status indicators for certificates
: The certificate has a corresponding private key that is stored on your BlackBerry® device or a smart card.
:The certificate chain is trusted and valid, and the revocation status of the certificate chain is good.
: The revocation status of the certificate chain is unknown, or a public key for a certificate in the certificate chain is weak.
:The certificate is untrusted or revoked, or a certificate in the certificate chain is untrusted, revoked, expired, not valid, or cannot be verified.
Status indicators for certificate authority profiles
:
A valid certificate is associated with the certificate authority profile.
: A new certificate is being fetched because the current certificate is scheduled to expire soon.
:The enrollment request is pending approval from the certificate authority.
: Enrollment with the certificate authority profile is pending because an action from the user is required to continue, or because enrollment
is scheduled to occur later.
:
Enrollment with the certificate authority profile is required and will occur automatically.
User GuideSecurity271 
						

							Check the revocation status of a certificate or certificate chain
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Fetch Status  or Fetch Chain Status .
Change the trust status of a certificate
Depending on the types of certificates that your administrator allows, you might not be able to trust some types of certificates.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Trust or Distrust .
8. If you are trusting a certificate, perform one of the following actions: • To trust the highlighted certificate, click  Selected Certificate.
• To trust the highlighted certificate and all the other certificates in the chain, click  Entire Chain.
Revoke a certificate
If you revoke a certificate, the certificate is revoked only in the key store on your  BlackBerry® device. Your device does not update the revocation
status on the certificate authority or CRL servers.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Revoke.
8. Click  Yes.
9. Change the  Reason field.
10. Click  OK.
To cancel a certificate hold, highlight the certificate. Press the  Menu key. Click  Cancel Hold .
User GuideSecurity272 
						

							Certificate revocation reasons
Unknown: The revocation reason does not match any of the predefined reasons.
Key Compromise: A person who is not the key subject might have discovered the private key value.
CA Compromise: Someone might have revealed the private key of the certificate issuer.
Change in Affiliation: The certificate subject no longer works for the organization.
Superseded: A new certificate is replacing an existing certificate.
Cessation of Operation: The certificate subject no longer requires the certificate.
Certificate Hold: You want to revoke the certificate temporarily.
Certificate options Change the display name for a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Change Label .
8. Type a display name for the certificate.
9. Click  OK.
Add an email address to a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
User GuideSecurity273 
						

							5. Highlight a certificate.
6. Press the  Menu key.
7. Click  Associate Addresses .
8. Press the  Menu key.
9. Click  Add Address .
10. Perform one of the following actions: • Click a contact.
• Click  Use Once . Type an email address. Press the  Enter key.
11. Press the  Menu key.
12. Click  Save.
Turn off the display name prompt that appears when you add a certificate to the key store
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Press the  Menu key.
6. Click  Fetch Certificates .
7. Press the  Menu key.
8. Click  Options.
9. Change the  Prompt for Label  field to No.
10. Press the  Menu key.
11. Click  Save.
When you add a certificate, your BlackBerry® device uses the certificate subject as the name for the certificate.
Turn off the fetch status prompt that appears when you add a certificate to the key store
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates .
5. Press the  Menu key.
6. Click  Fetch Certificates .
7. Press the  Menu key.
8. Click  Options.
9. Perform one of the following actions: • To download the revocation status of a certificate when you add it to the key store, change the  Fetch Status field to Yes.
• To add a certificate to the key store without downloading the revocation status, change the  Fetch Status field to No.
10. Press the  Menu key.
11. Click  Save.User GuideSecurity274 
						

							Change how often a certificate authority profile checks certificate status
Depending on your organization, you might be able to change how often a certificate authority profile checks the status of its certificate. If the
certificate is scheduled to expire soon you can re-enroll with the certificate authority profile to receive an updated certificate.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificate Authority Profile .
5. Change the  Certificate Status Check Interval  field.
6. Press the  Menu key.
7. Click  Save.
Certificate shortcuts • To view the label and issuer of a certificate, press the  Space key.
• To view the properties of a certificate, press the  Enter key.
• To view the security level of a personal certificate, press the  Alt key and  L.
• To view the serial number of a certificate, press the  Alt key and  S.
• To view certificates for certificate authorities, press the  Alt key and  C.
• To view personal certificates and certificates for other people, press the  Alt key and  E.
• To view personal certificates, press the  Alt key and  P.
• To view certificates for other people, press the  Alt key and  O.
• To view root certificates, press the  Alt key and  R.
• To view all certificates, press the  Alt key and  A.
PGP keys
PGP key basics Download a PGP key from an LDAP certificate server
If you use the PGP® Universal Server, you might not be able to download PGP keys from an LDAP certificate server.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  PGP keys .
5. Press the  Menu key.
6. Click  Fetch PGP Keys .
7. Specify the search criteria.
User GuideSecurity275 
						

							8. Press the Menu key.
9. Click  Search.
10. Click a PGP key.
11. Click  Add PGP Key to Key Store .
Download a personal PGP key from the PGP Universal Server
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  PGP.
4. Press the  Menu key.
5. Click  Download Keys .
Download an updated PGP key from an LDAP certificate server
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  PGP keys .
5. Highlight a PGP® key.
6. Press the  Menu key.
7. Click  Fetch Updated PGP Key .
Import a certificate or PGP key from the device memory
1. On the Home screen or in a folder, click the  Media icon or the  Files icon.
2. Navigate to a certificate or PGP® key.
3. Highlight the certificate or PGP key.
4. Press the  Menu key.
5. Click  Import Certificate  or Import PGP Key .
To view the certificate or PGP key, press the  Menu key. Click  Display Certificate  or Display PGP Key .
Import a certificate or PGP key from a media card
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  Certificates  or PGP Keys .
5. Press the  Menu key.
6. Click  Show Media Card Certificates  or Show Media Card PGP Keys .
To view the certificate or PGP® key, press the  Menu key. Click  Display Certificate  or Display PGP Key .User GuideSecurity276 
						

							View properties for a PGP key
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  PGP keys .
5. Click a PGP® key.
6. Click  View Subkey .
PGP key properties
Revocation Status: This field displays the revocation status of the PGP® key at a specified date and time.
Trust Status: This field displays the trust status of the PGP key. A PGP key can be explicitly trusted (the PGP key itself is trusted), implicitly trusted (the
PGP key is associated with a private key on your BlackBerry® device), or not trusted (the PGP key is not explicitly trusted and is not
associated with a trusted PGP key on your device, and a chain of digital signatures to a trusted key does not exist).
Creation Date: This field displays the date that the PGP® Universal Server generated the PGP key.
Expiration Date: This field displays the date that the PGP Universal Server specified as the expiration date of the PGP key.
Email Address: This field displays the email address that is associated with the PGP key. Multiple Email Address fields might appear.
Public Key Type: This field displays the standard to which the public key complies. Your device supports RSA®, DSA, and Diffie-Hellman keys.
Key Usage: This field displays approved uses of the PGP key.
Fingerprint: This field displays the PGP key fingerprint in hexadecimal format.
Send a PGP key
When you send a PGP® key, your BlackBerry® device sends the public key, but does not send the corresponding private key.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  PGP Keys .
User GuideSecurity277 
						

							5. Highlight a PGP key.
6. Press the  Menu key.
7. Click  Send via Email  or Send via PIN .
Delete a PGP key
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  Advanced Security Options .
4. Click  PGP Keys .
5. Highlight a PGP® key.
6. Press the  Menu key.
7. Click  Delete.
Clear the PGP data cache
The PGP® data cache contains cached PGP public keys and the PGP® Universal Server policy that your BlackBerry® device downloads from
the PGP Universal Server.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security Options .
3. Click  PGP.
4. Press the  Menu key.
5. Click  Clear Universal Cache .
The next time that you send a PGP protected message, your device downloads an updated PGP Universal Server policy and updated PGP public
keys from the PGP Universal Server.
PGP key status PGP key status indicators
: The PGP® key has a corresponding private key that is stored on your BlackBerry® device.
:The PGP key is trusted and valid, and the revocation status of the PGP key is good.
: The revocation status of the PGP key is unknown or the key is weak.
:The PGP key is untrusted, revoked, expired, not valid, or cannot be verified.
User GuideSecurity278