Configuring the BlackBerry Enterprise Server to support S/MIME encryption
By default, S/MIME encryption on the BlackBerry® Enterprise Server is turned off and the BlackBerry Enterprise Server does not process S/MIME-encrypted messages. To turn on S/MIME encryption, you must select the Enable S/MIME Message Processing option in the BlackBerry Administration Service or a BlackBerry device user must transfer the S/MIME private key to the BlackBerry device.
After you turn on S/MIME encryption on the BlackBerry Enterprise Server, a BlackBerry device user can install the S/MIME Support Package for BlackBerry® smartphones on the BlackBerry device or you can configure a software configuration to install the S/MIME Support Package for BlackBerry smartphones on a BlackBerry device over the wireless network.
After the S/MIME Support Package for BlackBerry smartphones is installed on the BlackBerry device, the user can add certificates to the BlackBerry Enterprise Server device by enrolling them over the wireless network or using the certificate synchronization tool of the BlackBerry® Desktop Manager.
For more information, see the BlackBerry Enterprise Server Administration Guide.