About certificate enrollment
If your email account uses a BlackBerry® Enterprise Server that supports this feature, you can download certificates over the wireless network from a certificate authority profile provided by your administrator. Depending on your organization, enrollment for a certificate might be required and might also occur automatically.
When you enroll with a certificate authority profile, the latest certificate is downloaded to your BlackBerry device and added to your certificate list. The certificate authority profile shows the status of the certificate. If the certificate is scheduled to expire soon you can re-enroll with the certificate authority profile to receive an updated certificate.