About certificate enrollment
If your work email account uses a BlackBerry Enterprise Server that supports this feature, you can download certificates over the wireless network using a certification authority profile provided by your administrator. Depending on your organization, enrollment for a certificate might be required and might also occur automatically.
When you enroll with a certification authority profile, a new certificate is downloaded to your BlackBerry smartphone and added to your certificate list. The certification authority profile shows the status of the certificate. If the certificate is scheduled to expire soon you can re-enroll with the certification authority profile to receive an updated certificate.