Blackberry Torch 9810 7 1 User Guide

							The Memory Cleaner icon appears on the home screen or in the Applications folder.
Certificates and PGP keys
About certificates and certificate enrollment
A certificate is a digital document that binds the identity and public key of a certificate subject. Your BlackBerry 
smartphone supports RSA, DSA, Diffie-Hellman, and ECC keys.
If your work email account uses a BlackBerry Enterprise Server that supports this feature, you can download certificates 
over the wireless network using a certification authority profile provided by your administrator. Depending on your 
organization, enrollment for a certificate might be required and might also occur automatically.
When you enroll with a certification authority profile, a new certificate is downloaded to your smartphone and added to your 
certificate list. The certification authority profile shows the status of the certificate. If the certificate is scheduled to ex\
pire  soon, you can re-enroll with the certification authority profile to receive an updated certificate.
About PGP keys
If your work email account uses a BlackBerry Enterprise Server that supports this feature, you can download PGP keys over 
the wireless network from a certificate server provided by your administrator. Depending on your organization, enrollment  with the 
PGP Universal Server might be required and might also occur automatically.
PGP keys allow you to send and receive PGP messages using your BlackBerry smartphone. Your smartphone supports 
RSA, DSA, and Diffie-Hellman keys.
About the trust status of certificates and PGP keys
When you view the details for a certificate or key, you can view the trust status of the item. Depending on your adminstrator, you can change the trust status of a certificate or 
PGP key.
A certificate can be explicitly trusted (the certificate itself is trusted), implicitly trusted (the root certificate in the \
certificate chain is trusted on your 
BlackBerry smartphone), or not trusted (the certificate isn't explicitly trusted and the root 
certificate in the certificate chain isn't trusted or doesn't exist on your smartphone).
A PGP key can be explicitly trusted (the PGP key itself is trusted), implicitly trusted (the PGP key is associated with a private 
key on your smartphone), or not trusted (the 
PGP key isn't explicitly trusted and isn't associated with a trusted PGP key on 
your smartphone, and a chain of digital signatures to a trusted key doesn't exist).
Related information
Change the trust status of a certificate or PGP key, 335
User GuideSecurity
331  
						

							Certificate and PGP key basics
Download a certificate or PGP key from an LDAP-enabled server or 
DSML-enabled server
If you are enrolled with the PGP Universal Server, you can't download PGP keys manually.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Press the  key > Fetch Certificates or Fetch PGP Keys. 
4.Specify the search criteria.
5.Press the  key > Search. 
6.Click a certificate.
7.Click Add To Key Store.
Related information
I can't download a certificate or PGP key from an LDAP-enabled server, 351
Download a certificate from a certification authority
If your administrator has provided you with a certification authority profile, you can enroll with the profile to download a 
certificate to your 
BlackBerry smartphone. If the certificate is scheduled to expire soon, you can re-enroll to receive an 
updated certificate.
1.On the home screen, click the  icon. If you don't have the  icon, on the home screen or in a folder, click 
the 
Options icon. Click Security > Advanced Security Settings > Certificate Enrollment. 
2.Click Enroll or Re-enroll.
3.If necessary, type the credentials that your administrator gave you.
Download a personal PGP key from the PGP Universal Server
1.On the home screen or in a folder, click the Options icon.
2.Click Security > PGP.
3.Press the  key > Download Keys. 
Import a certificate or PGP key that is saved on your smartphone
1.On the home screen or in a folder, click the Media icon or Files icon.
2.Find and click a certificate or PGP key.
User GuideSecurity
332  
						

							3.Select the certificate or PGP key.
4.Press the  key > Import Certificate or Import PGP Key. 
 • To view the certificate or PGP key, highlight the certificate or PGP key. Press the  key > View Certificate or 
View PGP Key.
 • To trust the certificate or PGP key, highlight the certificate or PGP key. Press the  key > Trust Certificate or 
Trust PGP Key.
Import certificates or PGP keys from a media card
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Press the  key > Import Media Card Certs or Import Media Card PGP Keys.
4.Select the certificates or PGP keys you want to import.
5.Press the  key > Import Certificates or Import PGP keys.
To view a certificate or PGP key, highlight the certificate or PGP key. Press the  key > View Certificate or View PGP 
Key
.
Send or delete a certificate or PGP key
When you send a certificate or PGP key, your BlackBerry smartphone sends the public key, but doesn't send the 
corresponding private key.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Highlight a certificate or PGP key.
 • To send a certificate or PGP key, press the  key > Send via Email or Send via PIN.
 • To delete a certificate or PGP key, press the  key > Delete.
View details for a certificate or PGP key
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Click a certificate or PGP key.
View one type of certificate or PGP key
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Press the  key. User GuideSecurity
333  
						

							4.Click one of the following menu items:
•Show Personal Certificates
•Show Personal PGP Keys
•Show Others' Certificates
•Show Others' PGP Keys
•Show CA Certificates
•Show Root Certificates
To view all the certificates on your BlackBerry smartphone, press the  key > Show All Certificates.
View the certificate chain for a certificate
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates.
3.Highlight a certificate.
4.Press the  key > Show Chain. 
Certificate and PGP key statuses
Status indicators for certificates, PGPkeys, and certification authority 
profiles
Status indicators for certificates and PGP keys
IndicatorDescription The certificate or PGP key has a corresponding private key that is stored on your BlackBerry 
smartphone or a smart card. The certificate chain or PGP key is trusted and valid, and the revocation status is good. The revocation status is unknown, or a public key is weak. The certificate, a certificate in the certificate chain, or the PGP key is untrusted, revoked, 
expired, not valid, or can't be verified.User GuideSecurity
334  
						

							Status indicators for certification authority profiles
IndicatorDescription A valid certificate is associated with the certificate authority profile. A new certificate is being retrieved because the current certificate is scheduled to expire soon. The enrollment request is pending approval from the certificate authority. Enrollment with the certificate authority profile is pending because an action from the user is required to continue, or because enrollment is scheduled to occur later. Enrollment with the certificate authority profile is required and will occur automatically.
Check the revocation status of a certificate, certificate chain, or PGP key
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Highlight a certificate or PGP key.
4.Press the  key > Fetch Status or Fetch Chain Status. 
Change the trust status of a certificate or PGP key
Before you begin: Depending on the types of certificates that your administrator allows, you might not be able to trust 
some types of certificates.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Highlight a certificate or PGP key.
4.Press the  key > Trust or Distrust. 
5.If you are trusting a certificate with a certificate chain, do one of the following:
•To trust only the highlighted certificate, click Selected Certificate.
•To trust the highlighted certificate and all the other certificates in the chain, click Entire Chain.
Related information
About the trust status of certificates and PGP keys, 331 
User GuideSecurity
335  
						

							Revoke a certificate or PGP key
If you revoke a certificate or PGP key, it is revoked only in the key store on your BlackBerry smartphone. Your smartphone 
doesn't update the revocation status on the certificate authority, CRL servers, or on the 
PGP Universal Server.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Highlight a certificate or PGP key.
4.Press the  key > Revoke > Yes. 
5.Change the Reason field.
6.Click OK.
To cancel a certificate hold, highlight the certificate. Press the  key > Cancel Hold.
Certificate revocation reasons
ReasonDescriptionUnknownThe revocation reason does not match any of the predefined reasons.Key CompromiseA person who is not the key subject might have discovered the private key value.CA CompromiseSomeone might have revealed the private key of the certificate issuer.Change in AffiliationThe certificate subject no longer works for the organization.SupersededA new certificate is replacing an existing certificate.Cessation of OperationThe certificate subject no longer requires the certificate.Certificate HoldYou want to revoke the certificate temporarily.
PGP key revocation reasons
ReasonDescriptionUnknownThe revocation reason does not match any of the predefined reasons.SupersededA new PGP key is replacing an existing PGP key.Key CompromiseA person who is not the key subject might have discovered the private key value.Key RetiredThe PGP key is no longer used.User ID InvalidThe user information for the PGP key is not valid.User GuideSecurity
336  
						

							Certificate and PGP key options
Change the display name for a certificate or PGP key
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Highlight a certificate or PGP key.
4.Press the  key > Change Label. 
5.Type a display name for the certificate or PGP key.
6.Click OK.
Turn off prompts that appear when you add a certificate or PGP key to 
the key store
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates or PGP keys.
3.Press the  key > Fetch Certificates or Fetch PGP Keys. 
4.Press the  key > Options. 
•To download the revocation status of a certificate or PGP key when you add it to the key store, change the Fetch 
Status
 field to Yes.
•To add a certificate or PGP key to the key store without downloading the revocation status, change the Fetch 
Status
 field to No.
•To turn off the display name prompt, clear the Prompt for Label checkbox.
5.Press the  key > Save. 
If you turn off the display name prompt, when you add a certificate or PGP key, your BlackBerry smartphone uses the 
subject as the name for the certificate or 
PGP key.
Add an email address to a certificate
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificates.
3.Press the  key > Show Others' Certificates.
4.Highlight a certificate.
5.Press the  key > Associate Addresses. 6.Press the  key > Add Address. 
7.Do one of the following:
User GuideSecurity
337  
						

							•Click a contact.
 • Click Use Once. Type an email address. Press the  key on the keyboard.
8.Press the  key > Save. 
Change how often a certification authority profile checks certificate 
status
Depending on your organization, you might be able to change how often a certification authority profile checks the status of  its certificate. If the certificate is scheduled to expire soon, you can re-enroll with the certification authority profile to 
receive an updated certificate.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Enrollment.
3.Change the Certificate Revocation Check Interval field.
4.Press the  key > Save. 
Clear the PGP data cache
The PGP data cache contains cached PGP public keys and the PGP Universal Server policy that your BlackBerry 
smartphone downloads from the PGP Universal Server.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > PGP.
3.Press the  key > Clear Universal Cache.
The next time that you send a PGP protected message, your smartphone downloads an updated PGP Universal Server 
policy and updated PGP public keys from the PGP Universal Server.
Certificate servers
Add or delete a certificate server
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Servers.
 • To add a new certificate server, press the  key > New Server. Add the connection information for the 
certificate server. 
Press the  key > Save.
 • To delete a certificate server, highlight a certificate server. Press the  key > Delete.
User GuideSecurity
338  
						

							Change connection information for a certificate server
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Servers.
3.Highlight a certificate server.
4.Press the  key > Edit. 
5.Change the connection information for the certificate server.
6.Press the  key > Save. 
Connection options for OCSP and CRL servers
OptionDescriptionFriendly NameType a display name for the certificate server.Server URLType the web address of the certificate server.
Connection options for LDAP-enabled servers
OptionDescriptionFriendly NameType a display name for the server.Server NameType the network address of the server.Base QueryType the base query information for the server using X.509 certificate syntax (for example, o=test.rim.net).PortType the port number for your organization’s network. The default port number is  389.Authentication TypeSpecify whether you must log in to the server.Connection TypeSpecify whether your BlackBerry smartphone uses an SSL connection or a TLS 
connection to connect to the server.
Send connection information for a certificate server
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Certificate Servers.
User GuideSecurity
339  
						

							3.Highlight a certificate server.4.Press the  key > Email Server or PIN Server. 
Key store
About the key store
The key store on your BlackBerry smartphone might store the following items:
•Personal certificates or PGP keys (public and private key pairs)
•Certificates that you download using a certification authority profile or the BlackBerry Desktop Software
•Root certificates that are included in the BlackBerry Desktop Software
•Certificates that you download from an LDAP-enabled server or DSML-enabled server
•PGP public keys that you download from an LDAP-enabled server
•Certificates or PGP public keys that you import from your smartphone or a media card
•Certificates or PGP public keys that you add from a message
To access items in the key store, you must enter a key store password. If you exceed the number of allowed password 
attempts, all your smartphone data is deleted.
Research In Motion recommends that you regularly create and save a backup file on your computer, especially before you  update any software. Maintaining a current backup file on your computer might allow you to recover smartphone data if 
your smartphone is lost, stolen, or corrupted by an unforeseen issue.
Change the key store password
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Press the  key > Change Key Store Password. 
Synchronize the key store password with the smartphone password
If you synchronize the key store password with your BlackBerry smartphone password, when you change your smartphone 
password, the key store password changes to match it automatically.
1.On the home screen or in a folder, click the Options icon.
2.Click Security > Advanced Security Settings > Key Stores.
3.Change the Use Device Password as Key Store Password field to Yes.
4.Press the  key > Save. User GuideSecurity
340