Protecting work data on a media card

By default, a BlackBerry® device stores all data in unencrypted format on a media card. When you set the Enable Separation of Work Content IT policy rule to Yes, the device automatically encrypts all work data on a media card using a device key.

You can perform any of the following actions to further protect the work data on a media card:
  • Prevent a user from storing any data on media cards by setting the Disable External Memory IT policy rule to Yes.
  • Prevent a user from transferring data to a media card over a USB connection by setting the Disable USB Mass Storage IT policy rule to Yes.
  • Permit the user to store data on media cards, but specify that the device must encrypt all data and not just work data. To configure this option, set the External File System Encryption Level IT policy rule to one of the following values:
    • Encrypt to User Password (excluding multi-media directories)
    • Encrypt to User Password (including multi-media directories)
    • Encrypt to Device Key (excluding multi-media directories)
    • Encrypt to Device Key (including multi-media directories)
    • Encrypt to User Password and Device Key (excluding multi-media directories)
    • Encrypt to User Password and Device Key (including multi-media directories)

Was this information helpful? Send us your comments.