Skip Navigation

Enforcing secure email using message classification

Message classification allows your organization to specify and enforce secure email policies and add visual markings to email messages on
BlackBerry 10
devices. You can use
BlackBerry UEM
to provide
BlackBerry 10
device users with similar options for message classification that you make available on their computer email applications. You can define the following rules to apply to outgoing messages, based on the messages' classifications:
  • Add a label to identify the message classification (for example, Confidential)
  • Add a visual marker to the end of the subject line (for example, [C])
  • Add text to the beginning or end of the body of an email (for example, This message has been classified as Confidential)
  • Set S/MIME or
    options (for example, sign and encrypt)
  • Set a default classification
For devices that are running
BlackBerry 10 OS
version 10.3.1 and later, you can use message classification to require users to sign, encrypt, or sign and encrypt email messages, or add visual markings to email messages that they send from their devices. You can use email profiles to specify message classification configuration files (with .json file name extensions) to send to users’ devices. When users either reply to email messages that have message classification set or compose secure email messages, the message classification configuration determines the classification rules that devices must enforce on outgoing messages.
The message protection options on a device are limited to the types of encryption and digital signing that are permitted on the device. When a user applies a message classification to an email message on a device, the user must select one type of message protection that the message classification permits, or accept the default type of message protection. If a user selects a message classification that requires signing, encrypting, or signing and encrypting of the email message, and the device does not have S/MIME or
configured, the user cannot send the email message.
S/MIME and
settings take precedence over message classification. Users can raise, but not lower, the message classification levels on their devices. The message classification levels are determined by the secure email rules of each classification.
When message classification is enabled, users cannot use the
BlackBerry Assistant
to send email messages from their devices.
You can configure message classification using the appropriate email profile settings.
For more information about how to create message classification configuration files, visit to read article KB36736.