Blackberry Storm 1 Manual

							3. Perform any of the following actions:•To prevent your  BlackBerry® device from deleting sensitive data when you insert your device in a holster, change the  Clean When
Holstered  field to No.
• To prevent your device from deleting sensitive data when your device remains idle for a specified period of time, change the  Clean
When Idle  field to No.
• To change how long your device waits after you stop using it before it deletes sensitive data, change the  Idle Timeout field.
4. Press the  Menu key.
5. Click  Save.
Delete sensitive application data from the temporary device memory 1. In the device options, click  Security Options.
2. Click  Memory Cleaning .
3. In the  Registered Cleaners  section, click an application.
4. Perform one of the following actions: • To delete sensitive data for the highlighted application, click  Clean  . Click OK.
• To delete sensitive data for all applications, click  Clean Now.
View the icon for the memory cleaning application on the Home screen 1. In the device options, click  Security Options.
2. Click  Memory Cleaning .
3. Change the  Show Icon on Home Screen  field to Yes.
4. Press the  Menu key.
5. Click  Save.
Certificates
Certificate basics Download a certificate from an LDAP certificate server
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Press the  Menu key.
4. Click  Fetch Certificates .
5. Specify the search criteria.
6. Press the  Menu key.
7. Click  Search.
8. Click a certificate.
9. Click  Add Certificate to Key Store .User GuideCertificates209 
						

							View properties for a certificate
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Click a certificate.
Certificate properties
Revocation Status: This field displays the revocation status of the certificate at a specified date and time.
Trust Status: This field displays the trust status of the certificate chain. A certificate can be explicitly trusted (the certificate itself is trusted),
implicitly trusted (the root certificate in the certificate chain is trusted on your BlackBerry® device), or not trusted (the certificate is
not explicitly trusted and the root certificate in the certificate chain is not trusted or does not exist on your device).
Expiration Date: This field displays the date that the certificate issuer specified as the expiration date of the certificate.
Certificate Type: This field displays the certificate format. Your device supports X.509 and WTLS certificate formats.
Public Key Type: This field displays the standard to which the public key complies. Your device supports RSA®, DSA, Diffie-Hellman, and ECC keys.
Subject: This field displays information about the certificate subject.
Issuer: This field displays information about the certificate issuer.
Serial Number: This field displays the certificate serial number in hexadecimal format.
Key Usage: This field displays approved uses of the public key.
Subject Alt Name: This field displays an alternate email address for the certificate subject, if an alternate email address is available.
SHA1 Thumbprint: This field displays the SHA-1 digital thumbprint of the certificate.
MD5 Thumbprint: This field displays the MD5 digital thumbprint of the certificate.
User GuideCertificates210 
						

							View one type of certificate in the certificate list
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Press the  Menu key.
4. Click one of the following menu items: •Show My Certs
• Show Others Certs
• Show CA Certs
• Show Root Certs
To view all the certificates on your BlackBerry® device, press the  Menu key. Click  Show All Certs .
Send a certificate
When you send a certificate, your BlackBerry® device sends the public key, but does not send the corresponding private key.
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Send via Email  or Send via PIN .
Delete a certificate
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Delete.
View the certificate chain for a certificate
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Show Chain .
Certificate status Certificate status indicators
: The certificate has a corresponding private key that is stored on your BlackBerry® device or a smart card.
User GuideCertificates211 
						

							:The certificate chain is trusted and valid, and the revocation status of the certificate chain is good.
: The revocation status of the certificate chain is unknown, or a public key for a certificate in the certificate chain is weak.
:The certificate is untrusted or revoked, or a certificate in the certificate chain is untrusted, revoked, expired, not valid, or cannot be
verified.
Check the revocation status of a certificate or certificate chain
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Fetch Status  or Fetch Chain Status .
Change the trust status of a certificate
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Trust or Distrust .
6. If necessary, perform one of the following actions: • To trust the highlighted certificate, click  Selected Certificate.
• To trust the highlighted certificate and all the other certificates in the chain, click  Entire Chain.
Revoke a certificate
If you revoke a certificate, the certificate is revoked only in the key store on your BlackBerry® device. Your device does not update the
revocation status on the certificate authority or CRL servers.
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Revoke.
6. Click  Yes.
7. Change the  Reason field.
8. Click  OK.
To cancel a certificate hold, highlight the certificate. Press the  Menu key. Click  Cancel Hold .
User GuideCertificates212 
						

							Certificate revocation reasons
Unknown: The revocation reason does not match any of the predefined reasons.
Key Compromise: A person who is not the key subject might have discovered the private key value.
CA Compromise: Someone might have revealed the private key of the certificate issuer.
Change in Affiliation: The certificate subject no longer works for the organization.
Superseded: A new certificate is replacing an existing certificate.
Cessation of Operation: The certificate subject no longer requires the certificate.
Certificate Hold: You want to revoke the certificate temporarily.
Certificate options Change the display name for a certificate
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Change Label .
6. Type a display name for the certificate.
7. Click  OK.
Add an email address to a certificate
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Highlight a certificate.
4. Press the  Menu key.
5. Click  Associate Addresses .
6. Press the  Menu key.
7. Click  Add Address .
User GuideCertificates213 
						

							8. Perform one of the following actions:• Click a contact.
• Click  Use Once . Type an email address. Press the  Enter key.
9. Press the  Menu key.
10. Click  Save.
Turn off the display name prompt that appears when you add a certificate to the key store
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Press the  Menu key.
4. Click  Fetch Certificates .
5. Press the  Menu key.
6. Click  Options.
7. Change the  Prompt for Label  field to No.
8. Press the  Menu key.
9. Click  Save.
When you add a certificate, your BlackBerry® device uses the certificate subject as the name for the certificate.
Turn off the fetch status prompt that appears when you add a certificate to the key store
1. In the device options, click  Security Options.
2. Click  Certificates .
3. Press the  Menu key.
4. Click  Fetch Certificates .
5. Press the  Menu key.
6. Click  Options.
7. Perform one of the following actions: • To download the revocation status of a certificate when you add it to the key store, change the  Fetch Status field to Yes.
• To add a certificate to the key store without downloading the revocation status, change the  Fetch Status field to No.
8. Press the  Menu key.
9. Click  Save.
PGP keys
PGP key basics
Download a PGP key from an LDAP certificate server If you use the PGP® Universal Server, you might not be able to download PGP keys from an LDAP certificate server.
1. In the device options, click  Security Options.
2. Click  PGP keys .User GuidePGP keys214 
						

							3. Press the Menu key.
4. Click  Fetch PGP Keys .
5. Specify the search criteria.
6. Press the  Menu key.
7. Click  Search.
8. Click a PGP key.
9. Click  Add PGP Key to Key Store .
Download a personal PGP key from the PGP Universal Server 1. In the device options, click  Security Options.
2. Click  PGP.
3. Press the  Menu key.
4. Click  Download Keys .
Download an updated PGP key from an LDAP certificate server 1. In the device options, click  Security Options.
2. Click  PGP keys .
3. Highlight a PGP® key.
4. Press the  Menu key.
5. Click  Fetch Updated PGP Key .
View properties for a PGP key 1. In the device options, click  Security Options.
2. Click  PGP keys .
3. Click a PGP® key.
4. Click  View Subkey .
PGP key properties Revocation Status: This field displays the revocation status of the PGP® key at a specified date and time.
Trust Status: This field displays the trust status of the PGP key. A PGP key can be explicitly trusted (the PGP key itself is trusted), implicitly trusted
(the PGP key is associated with a private key on your  BlackBerry® device), or not trusted (the PGP key is not explicitly trusted and is
not associated with a trusted PGP key on your device, and a chain of digital signatures to a trusted key does not exist).
Creation Date: This field displays the date that the PGP® Universal Server generated the PGP key.
Expiration Date:User GuidePGP keys215 
						

							This field displays the date that the PGP Universal Server specified as the expiration date of the PGP key.
Email Address: This field displays the email address that is associated with the PGP key. Multiple Email Address fields might appear.
Public Key Type: This field displays the standard to which the public key complies. Your device supports RSA®, DSA, and Diffie-Hellman keys.
Key Usage: This field displays approved uses of the PGP key.
Fingerprint: This field displays the PGP key fingerprint in hexadecimal format.
Send a PGP key When you send a PGP® key, your BlackBerry® device sends the public key, but does not send the corresponding private key.
1. In the device options, click  Security Options.
2. Click  PGP Keys .
3. Highlight a PGP key.
4. Press the  Menu key.
5. Click  Send via Email  or Send via PIN .
Delete a PGP key 1. In the device options, click  Security Options.
2. Click  PGP Keys .
3. Highlight a PGP® key.
4. Press the  Menu key.
5. Click  Delete.
Clear the PGP data cache The PGP® data cache contains cached PGP public keys and the PGP® Universal Server policy that your BlackBerry® device downloads
from the PGP Universal Server.
1. In the device options, click  Security Options.
2. Click  PGP.
3. Press the  Menu key.
4. Click  Clear Universal Cache .
The next time that you send a PGP protected message, your device downloads an updated PGP Universal Server policy and updated PGP
public keys from the PGP Universal Server.User GuidePGP keys216 
						

							PGP key status
PGP key status indicators
: The PGP® key has a corresponding private key that is stored on your BlackBerry® device.
:The PGP key is trusted and valid, and the revocation status of the PGP key is good.
: The revocation status of the PGP key is unknown or the key is weak.
:The PGP key is untrusted, revoked, expired, not valid, or cannot be verified.
Check the revocation status of a PGP key 1. In the device options, click  Security Options.
2. Click  PGP Keys .
3. Highlight a PGP® key.
4. Press the  Menu key.
5. Click  Fetch Status .
Change the trust status of a PGP key 1. In the device options, click  Security Options.
2. Click  PGP Keys .
3. Highlight a PGP® key.
4. Press the  Menu key.
5. Click  Trust or Distrust .
Revoke a PGP key If you revoke a PGP® key, the PGP key is revoked only in the key store on your BlackBerry® device. Your device does not update the
revocation status on the PGP® Universal Server.
1. In the device options, click  Security Options.
2. Click  PGP Keys .
3. Highlight a PGP® key.
4. Press the  Menu key.
5. Click  Revoke.
User GuidePGP keys217 
						

							6. Click Yes.
7. Change the  Reason field.
8. Click  OK.
PGP key revocation reasons Unknown: The revocation reason does not match any of the predefined reasons.
Superseded: A new PGP® key is replacing an existing PGP key.
Key Compromise: A person who is not the key subject might have discovered the private key value.
Key Retired: The PGP key is no longer used.
User ID Invalid: The user information for the PGP key is not valid.
PGP key options
Change the display name for a PGP key 1. In the device options, click  Security Options.
2. Click  PGP keys .
3. Highlight a PGP® key.
4. Press the  Menu key.
5. Click  Change Label .
6. Type a display name for the PGP key.
7. Click  OK.
Turn off the display name prompt that appears when you add a PGP key to the key store 1. In the device options, click  Security Options.
2. Click  PGP keys .
3. Press the  Menu key.
4. Click  Fetch PGP Keys .
5. Press the  Menu key.
6. Click  Options.
7. Change the  Prompt for Label  field to No.
8. Press the  Menu key.User GuidePGP keys218