Blackberry Torch 9800 6 0 User Guide

							4.Press the  key >  Save.
Change the password keeper password 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the 
 key >  Change Password .
Delete a password from the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Highlight a password.
3. Press the 
 key >  Delete .
Copy a password 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Highlight a password. 3. Press the 
 key >  Copy Username  or Copy Password .
To clear the clipboard, press the 
 key >  Clear Clipboard .
Note:  Passwords are not encrypted when they are on the clipboard.
Prevent password copying 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the 
 key >  Options .
3. Clear the  Allow Clipboard Copy  check box.
4. Press the 
 key >  Save.
Set a limit for password attempts in the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the 
 key >  Options .
3. Set the  Password Attempts  field.
4. Press the 
 key >  Save.
Hide passwords in the password keeper 1. On the Home screen or in the  Applications folder, click the  Password Keeper  icon.
2. Press the 
 key >  Options .
3. Clear the  Show Password  check box.
4. Press the 
 key >  Save.
User GuideSecurity269 
						

							To show passwords in the password keeper again, select the Show Password check box.
Encryption
About encrypting data on your device When encryption for data on your BlackBerry® device is turned on, your device uses a private key to encrypt data as it is stored
on your device, including data that your device receives when it is locked. Your device decrypts data as you access it.
You can set encryption to include or exclude your contacts. If you turn on encryption for contacts and you receive a call when your device is locked, the caller name does not appear on the screen.
If you use a smart card certificate for authentication, depending on the smart card, you might also be able to use one of your smart card certificates to provide two-factor encryption. In order to access the encrypted content, you must provide your
device password and also connect your device to your smart card reader.
When you lock your device, an open lock indicator appears at the top of the screen to indicate that your device is in theprocess of securing your data, which includes deleting a copy of the private key from the temporary device memory. A lock
indicator appears at the top of the screen when your device has deleted the key.
About file encryption File encryption is designed to protect files that you store on your BlackBerry® device and on a media card that can be inserted
in your device. You can encrypt the files on your device and on your media card using an encryption key that your device
generates, your device password, or both.
If you encrypt the files using an encryption key that your device generates, you can only access the files on your media card when the media card is inserted in your device. If you encrypt the files using your device password, you can access the files on
your media card in any device that you insert your media card into, as long as you know the password for the device.
Turn on encryption To encrypt data on your BlackBerry® device, you must have set a password for your device.
Depending on the amount of storage space available for storing files on your device, you might not be able to encrypt files on your device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Encryption .
3. To encrypt data on your device, in the  Device Memory section, select the  Encrypt check box.
4. To encrypt files that are stored on a media card and on your device, select the  Media Card check box and do one of the
following:
• To encrypt files using an encryption key that your device generates, change the  Mode field to  Device Key .User GuideSecurity270 
						

							• To encrypt files using your device password, change the Mode field to  Device Password .
• To encrypt files using an encryption key and your device password, change the  Mode field to  Device Password &
Device Key .
5. To also encrypt media files such as pictures, songs, and videos, select the  Include Media Files check box.
6. Press the 
 key >  Save.
To stop encrypting data on your device, clear the  Device Memory check box. To stop encrypting files, clear the  Media Card
check box.
Set encryption strength If encryption of data that is stored on your BlackBerry® device is turned on, you can set the strength of the encryption that
your device uses to protect data that you receive when your device is locked.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Encryption .
3. Change the  Strength field.
4. Press the 
 key >  Save.
Use a certificate to encrypt the encryption keys on your device To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For moreinformation, contact your administrator.
If you have encryption for data that is stored on your BlackBerry device turned on and your smart card reader supports thisfeature, you might be able to use a certificate from the smart card to encrypt the encryption keys on your device.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Encryption .
3. Select the  Two-factor Protection  check box.
4. Press the 
 key >  Save.
About encryption keys If your BlackBerry® device is associated with an email account that uses a BlackBerry® Enterprise Server or BlackBerry® DesktopRedirector, your device is designed to use an encryption key to protect data as it travels between the BlackBerry Enterprise
Server or BlackBerry Desktop Redirector and your device.
You should generate a new encryption key every 2 weeks.
Generate an encryption key To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For moreinformation, contact your administrator.
User GuideSecurity271 
						

							If your email account uses a BlackBerry Enterprise Server that does not support this feature, you can generate an encryption
key using the BlackBerry® Desktop Software, if it includes the email settings tool. For more information, see the Help in the BlackBerry Desktop Software.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Security Status Information .
3. Highlight a service. 4. Press the 
 key.
5. Click  Regenerate Encryption Key .
Memory cleaning
About memory cleaning Memory cleaning is designed to delete sensitive data from the temporary memory on your BlackBerry® device. Examples ofsensitive data include sensitive data in the cache for the key store browser, unencrypted data from email messages, LDAP authentication passwords, and data from certificate and key searches.
When memory cleaning is turned on, the memory cleaning application is designed to delete sensitive data automatically in the
following situations:
• when you insert your device in a holster
• when you do not use your device for a specified period of time
• when you synchronize with your computer • when you change the time or the time zone for your device
• when you lock your device
Turn on memory cleaning 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Memory Cleaning .
3. Select the  Enable check box.
4. Press the 
 key >  Save.
Change when your device deletes sensitive data from the temporary
device memory 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Memory Cleaning .
• To prevent your BlackBerry® device from deleting sensitive data when you insert your device in a holster, clear the Clean When Holstered  check box.
User GuideSecurity272 
						

							• To prevent your device from deleting sensitive data when your device remains idle for a specified period of time, clearthe  Clean When Idle  check box.
• To change how long your device waits after you stop using it before it deletes sensitive data, change the  Idle Timeout
field.
3. Press the 
 key >  Save.
Delete sensitive application data from the temporary device memory 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Memory Cleaning .
3. To delete sensitive data for all applications, click  Clean.
View the icon for the memory cleaning application on the Home screen 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Memory Cleaning .
3. Select the  Place Memory Cleaner Shortcut on Homescreen  check box.
4. Press the 
 key >  Save.
Certificates About certificates A certificate is a digital document that binds the identity and public key of a certificate subject. If your email account uses aBlackBerry® Enterprise Server that supports this feature, you can download certificates over the wireless network from a
certificate authority profile that is provided by your administrator. The certificate authority signs the certificate to verify that it
can be trusted.
Depending on your organization, enrollment for a certificate might be required and might also occur automatically.
Certificate basics Download a certificate from an LDAP-enabled server or DSML-enabled server
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Press the 
 key >  Fetch Certificates .
4. Specify the search criteria.
5. Press the 
 key >  Search .
6. Click a certificate.
User GuideSecurity273 
						

							7. Click Add Certificate to Key Store .
About certificate enrollment If your email account uses a BlackBerry® Enterprise Server that supports this feature, you can download certificates over thewireless network from a certificate authority profile provided by your administrator. Depending on your organization,enrollment for a certificate might be required and might also occur automatically.
When you enroll with a certificate authority profile, the latest certificate is downloaded to your BlackBerry device and added to
your certificate list. The certificate authority profile shows the status of the certificate. If the certificate is scheduled to expire soon you can re-enroll with the certificate authority profile to receive an updated certificate.
Download a certificate from a certificate authority
To perform this task, your work email account must use a BlackBerry® Enterprise Server that supports this feature. For more information, contact your administrator.
If your administrator has provided you with a certificate authority profile, you can enroll with the profile to download a
certificate to your BlackBerry device. If the certificate is scheduled to expire soon, you can re-enroll to receive an updated
certificate.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificate Enrollment  > Enroll  or Re-enroll .
3. If necessary, type the credentials that you use to connect to your organization's network.
To hide the screen for the certificate authority profile while the request is being processed, press the 
 key >  Hide. To
return to this screen, on the Home screen, click the  Certificate Authority Profile icon.
Import a certificate or PGP key that is saved on your device
1. On the Home screen or in a folder, click the  Media icon or  Files icon.
2. Find and highlight a certificate or PGP® key.
3. Press the 
 key >  Import Certificate  or Import PGP Key .
To view the certificate or PGP key, press the 
 key >  Display Certificate  or Display PGP Key .
Import a certificate or PGP key from a media card 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security  > Advanced Security Settings  > Certificates  or PGP .
3. Press the 
 key >  Show Media Card Certificates  or Show Media Card PGP Keys .
To view the certificate or PGP® key, press the 
 key >  Display Certificate  or Display PGP Key .
User GuideSecurity274 
						

							View properties for a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Click a certificate.
Certificate properties
PropertyDescriptionRevocation StatusThis field displays the revocation status of the certificate at a
specified date and time.Trust StatusThis field displays the trust status of the certificate chain. A
certificate can be explicitly trusted (the certificate itself is trusted), implicitly trusted (the root certificate in the
certificate chain is trusted on your  BlackBerry® device), or not
trusted (the certificate is not explicitly trusted and the root
certificate in the certificate chain is not trusted or does not
exist on your device).Expiration DateThis field displays the expiration date of the certificate, asspecified by the certificate issuer.Certificate TypeThis field displays the certificate format. Your device supports
X.509 and WTLS certificate formats.Public Key TypeThis field displays the standard to which the public key complies. Your device supports  RSA®, DSA, Diffie-Hellman, and
ECC keys.SubjectThis field displays information about the certificate subject.IssuerThis field displays information about the certificate issuer.Serial NumberThis field displays the certificate serial number in hexadecimal
format.Key UsageThis field displays approved uses of the public key.Subject Alt NameThis field displays an alternate email address for the certificate
subject, if an alternate email address is available.SHA1 ThumbprintThis field displays the SHA-1 digital thumbprint of the certificate.MD5 ThumbprintThis field displays the MD5 digital thumbprint of the
certificate.User GuideSecurity275 
						

							View one type of certificate in the certificate list1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Press the 
 key.
4. Click one of the following menu items: •Show My Certificates
• Show Others Certificates
• Show CA Certificates
• Show Root Certificates
To view all the certificates on your BlackBerry® device, press the 
 key >  Show All Certificates .
Send a certificate When you send a certificate, your BlackBerry® device sends the public key, but does not send the corresponding private key.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Send via Email  or Send via PIN .
Delete a certificate 1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Delete .
View the certificate chain for a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Show Chain .
Certificate status Status indicators for certificates and certificate authority profilesStatus indicators for certificates
User GuideSecurity276 
						

							IndicatorDescriptionThe certificate has a corresponding private key that is stored on your BlackBerry® device or a smart
card.The certificate chain is trusted and valid, and the revocation status of the certificate chain is good.The revocation status of the certificate chain is unknown, or a public key for a certificate in the
certificate chain is weak.The certificate is untrusted or revoked, or a certificate in the certificate chain is untrusted, revoked, expired, not valid, or cannot be verified.
Status indicators for certificate authority profiles
IndicatorDescriptionA valid certificate is associated with the certificate authority profile.A new certificate is being retrieved because the current certificate is scheduled to expire soon.The enrollment request is pending approval from the certificate authority.Enrollment with the certificate authority profile is pending because an action from the user is
required to continue, or because enrollment is scheduled to occur later.Enrollment with the certificate authority profile is required and will occur automatically.
Check the revocation status of a certificate or certificate chain
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Fetch Status  or Fetch Chain Status .
Change the trust status of a certificate
Depending on the types of certificates that your administrator allows, you might not be able to trust some types of certificates.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Trust or Distrust .
5. If you are trusting a certificate, do one of the following: • To trust the highlighted certificate, click  Selected Certificate.
• To trust the highlighted certificate and all the other certificates in the chain, click  Entire Chain.
User GuideSecurity277 
						

							Revoke a certificate
If you revoke a certificate, the certificate is revoked only in the key store on your BlackBerry® device. Your device does not
update the revocation status on the certificate authority or CRL servers.
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Revoke  > Yes .
5. Change the  Reason field.
6. Click  OK.
To cancel a certificate hold, highlight the certificate. Press the 
 key >  Cancel Hold .
Certificate revocation reasons
ReasonDescriptionUnknownThe revocation reason does not match any of the predefined reasons.Key CompromiseA person who is not the key subject might have discovered the private key value.CA CompromiseSomeone might have revealed the private key of the certificate issuer.Change in AffiliationThe certificate subject no longer works for the organization.SupersededA new certificate is replacing an existing certificate.Cessation of OperationThe certificate subject no longer requires the certificate.Certificate HoldYou want to revoke the certificate temporarily.
Certificate options Change the display name for a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
3. Highlight a certificate.
4. Press the 
 key >  Change Label .
5. Type a display name for the certificate.
6. Click  OK.
Add an email address to a certificate
1. On the Home screen or in a folder, click the  Options icon.
2. Click  Security > Advanced Security Settings  > Certificates .
User GuideSecurity278