How a device protects its operating system and the BlackBerry Device Software

Security Technical Overview

Overview
New in this release
Keys on a device
Encrypting data that the BlackBerry Enterprise Server and a device send to each other
Managing BlackBerry Enterprise Solution security
Device storage space
Securing devices in your organization’s environment for personal use and work use
Protecting data on a device
- Encrypting user data on a locked device
- Encrypting the device transport key on a locked device
  - What happens when a user resets a device after you turn on content protection for the device transport key
- Resetting a device password when content protection is turned on
  - Process flow: Resetting a device password when content protection is turned on
    - Cryptosystem parameters that the remote password reset cryptographic protocol uses
- Protecting passwords that a device stores
- Protecting data that a device stores on a media card
  - Process flow: Generating an encryption key for a media card
- How the BlackBerry Attachment Service protects data on a device
  - Best practice: Protecting the BlackBerry Attachment Service
- How a device protects its operating system and the BlackBerry Device Software
- How a device authenticates the boot ROM code and binds the device processor when the device turns on
Protecting the data that the BlackBerry Enterprise Server stores in your organization's environment
Protecting communication with a device
Protecting communications in your organization's environment
Activating a device
Managing certificates on a device
Protecting BlackBerry Device Software updates
Extending messaging security to a device
Configuring two-factor authentication and protecting Bluetooth connections
Wi-Fi enabled devices
Layer 2 security methods that a Wi-Fi enabled device supports
Controlling applications on a device
RIM Cryptographic API
Related resources
Glossary
Provide feedback
Legal notice

Search This Document

Download PDF

Each time a user turns on a BlackBerry® device, specific components on the device automatically check the authenticity of the device operating system and the integrity of the BlackBerry® Device Software. The BlackBerry Device Software must pass these security checks before the user can run the BlackBerry Device Software and before the user can update the BlackBerry Device Software over the wireless network.

Next topic: How a device authenticates the boot ROM code and binds the device processor when the device turns on

Previous topic: Best practice: Protecting the BlackBerry Attachment Service

Was this information helpful? Send us your comments.

Global Navigation

Security Technical Overview

Local Navigation

How a device protects its operating system and the BlackBerry Device Software