You can update the BlackBerry® Device Software on a BlackBerry device over the wireless network. You can use the BlackBerry Administration Service to search for updates that match the BlackBerry device and wireless service provider, and send the updates. You can also permit your organization's wireless service provider to send the BlackBerry Device Software updates.
How the BlackBerry Enterprise Solution protects BlackBerry Device Software updates over the wireless network using encryption
The BlackBerry® Enterprise Server, BlackBerry® Infrastructure, BlackBerry® Provisioning System administration web site, and BlackBerry device protect data for BlackBerry® Device Software updates over the wireless network. You can use the BlackBerry Provisioning System administration web site when you want to permit your organization’s wireless service provider to update the BlackBerry Device Software.
The BlackBerry Enterprise Server and BlackBerry device encrypt all data that they send between each other, including BlackBerry Device Software updates, using BlackBerry transport layer encryption.
- control messages that the BlackBerry device receives from the BlackBerry Infrastructure or BlackBerry Provisioning System administration web site
- BlackBerry Device Software update instructions that the BlackBerry device requests and receives from the BlackBerry Infrastructure or BlackBerry Provisioning System administration web site
How the BlackBerry Enterprise Solution protects BlackBerry Device Software updates over the wireless network using IT policies and content protection
The default values for the Default IT policy determine that only the BlackBerry® Enterprise Server can send available BlackBerry® Device Software updates and request a BlackBerry device to update the BlackBerry Device Software. A wireless service provider cannot send available BlackBerry Device Software updates to the BlackBerry device unless you change the value for the Allow Non Enterprise Upgrade IT policy rule to Yes.
The battery power level on a BlackBerry® device must be 50% or greater for the BlackBerry device to retrieve an update package over the wireless network. If the battery power level is below the minimum requirement, the update process suspends. The BlackBerry device prompts the user to recharge the battery and start the BlackBerry® Device Software update process again. If the battery power level returns to 50%, the BlackBerry device resumes retrieving the update package from the BlackBerry® Infrastructure.
The battery power requirement is designed to protect the BlackBerry device against attacks from a potentially malicious user who might try to take advantage of low battery power during a BlackBerry Device Software update.
When a BlackBerry® device receives a BlackBerry® Device Software update from the BlackBerry® Infrastructure, it verifies that the ECDSA key uses a public key that is shared by all devices that support BlackBerry Device Software updates over the wireless network. The device verifies the digital signature on the ECDSA key using a stored root certificate.