Manualshelf

User guide

ManualsBrandsBlackberry ManualsOtherENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES
111112113114115116117118119120
• EAP-TTLS authentication
• PEAP authentication
• PSK authentication
For more information about AES-CCMP and TKIP, visit www.ieee.org/portal/site.
EAP authentication methods that a BlackBerry device supports the use of
CCKM with
A Wi-Fi® enabled BlackBerry® device supports the use of CCKM with all supported EAP authentication methods to improve
roaming between wireless access points. The BlackBerry device does not support the use of CCKM with the Cisco® CKIP encryption
algorithm or the AES-CCMP encryption algorithm.
Using certificates with PEAP authentication, EAP-TLS authentication, or
EAP-TTLS authentication
If your organization uses PEAP authentication, EAP-TLS authentication, or EAP-TTLS authentication to protect the wireless access
points for your organization’s enterprise Wi-Fi® network, a Wi-Fi enabled BlackBerry® device must authenticate mutually with
an access point using an authentication server. To generate the certificates that the BlackBerry device and authentication server
use to authenticate with each other, you require a certification authority.
For PEAP authentication, EAP-TLS authentication, or EAP-TTLS authentication to be successful, the BlackBerry device must trust
the certificate of the authentication server. The BlackBerry device does not trust the certificate of the authentication server
automatically. Before you can configure the BlackBerry device to trust the certificate of the authentication server, the following
conditions must exist:
• A certification authority that the BlackBerry device and authentication server mutually trust must generate the certificate
of the authentication server and a certificate for the BlackBerry device.
• The BlackBerry device must store the root certificates in the certificate chain for the certificate of the authentication server.
Each BlackBerry device stores a list of root certificates that are issued by certification authorities that it explicitly trusts.
Security Technical Overview
EAP authentication methods that a BlackBerry device supports the use of CCKM with
116