Page 3 - Contents
Contents Certificates..............................................................................................................................................................................................................................................3 Certificate basics........................
Page 5 - Certificates; Certificate basics; Download a certificate from an LDAP certificate server
Certificates Certificate basics Download a certificate from an LDAP certificate server 1. In the device options, click Security Options. 2. Click Certificates.3. Press the Menu key. 4. Click Fetch Certificates.5. Specify the search criteria. 6. Press the Menu key. 7. Click Search. 8. Click a certifi...
Page 6 - View one type of certificate in the certificate list; Send a certificate
This field displays the standard to which the public key complies. Your device supports RSA®, DSA, Diffie-Hellman, and ECC keys. Subject: This field displays information about the certificate subject. Issuer: This field displays information about the certificate issuer. Serial Number: This field dis...
Page 7 - Certificate status; Certificate status indicators
Delete a certificate 1. In the device options, click Security Options. 2. Click Certificates.3. Highlight a certificate. 4. Press the Menu key.5. Click Delete. View the certificate chain for a certificate 1. In the device options, click Security Options. 2. Click Certificates.3. Highlight a certific...
Page 8 - Change the trust status of a certificate
5. Click Fetch Status or Fetch Chain Status. Change the trust status of a certificate 1. In the device options, click Security Options. 2. Click Certificates.3. Highlight a certificate. 4. Press the Menu key.5. Click Trust or Distrust. 6. If necessary, perform one of the following actions: • To trus...
Page 9 - Certificate options; Change the display name for a certificate; Add an email address to a certificate
Superseded: A new certificate is replacing an existing certificate. Cessation of Operation: The certificate subject no longer requires the certificate. Certificate Hold: You want to revoke the certificate temporarily. Certificate options Change the display name for a certificate 1. In the device opt...
Page 10 - Certificate shortcuts
3. Press the Menu key. 4. Click Fetch Certificates.5. Press the Menu key. 6. Click Options. 7. Change the Prompt for Label field to No. 8. Press the Menu key. 9. Click Save. When you add a certificate, your BlackBerry® device uses the certificate subject as the name for the certificate. Turn off the...
Page 11 - Certificate troubleshooting; I cannot download a certificate
Certificate troubleshooting I cannot download a certificate If you changed the connection type that your BlackBerry® device uses to connect to the LDAP certificate server, try switching to the defaultconnection type. 9
Page 13 - Certificate servers; Add a certificate server; Connection options for LDAP certificate servers
Certificate servers Add a certificate server 1. In the device options, click Security Options. 2. Click Certificate Servers.3. Press the Menu key. 4. Click New Server.5. Specify information for the certificate server. 6. Press the Menu key. 7. Click Save. Change connection information for a certific...
Page 14 - Connection options for OCSP and CRL servers; Send connection information for a certificate server
Connection Type: Specify whether your BlackBerry® device uses an SSL connection or a TLS connection to connect to the certificate server. Connection options for OCSP and CRL servers Friendly Name: Type a display name for the certificate server. Server URL: Type the web address of the certificate ser...
Page 15 - Key stores; About the key store
Key stores About the key store The key store on your BlackBerry® device might store the following items. To access these items in the key store, you must type a key storepassword. • personal certificates (certificate and private key pairs)• certificates that you download using the certificate synchr...
Page 16 - Turn off automatic backup of key store data
3. Change the Key Store Address Injector field to Enabled. 4. Press the Menu key.5. Click Save. Change the service that your device uses to download certificates Depending on your organization, you might not be able to change the service that you use to download certificates. For more information,co...
Page 19 - Attach a certificate to a message; Download the certificate used to sign or encrypt a message
S/MIME-protected messages S/MIME-protected message basics About signing and encrypting messages You can digitally sign or encrypt messages to add another level of security to email messages and PIN messages that you send from yourBlackBerry® device. Digital signatures are designed to help recipients...
Page 24 - I cannot open an attachment in an encrypted message
3. Change the Warn about problems with my certificates field to No. 4. Press the Menu key.5. Click Save. To turn on the prompt again, change the Warn about problems with my certificates field to Yes. S/MIME-protected message troubleshooting Some signing and encryption options are not available on my...
Page 25 - Smart cards; About using a smart card with your device
Smart cards About using a smart card with your device Smart cards store certificates and private keys. You can use a smart card reader to import certificates from a smart card to the key storeon your BlackBerry® device, but you cannot import private keys. As a result, private key operations such as ...