User guide
Security features of the BlackBerry Enterprise Solution
Feature Description
data protection The BlackBerry® Enterprise Solution is designed to protect data that is in transit
between the BlackBerry® Enterprise Server and a BlackBerry device and data that
is in transit between your organization’s messaging server and the email application
on the user’s computer. The BlackBerry Enterprise Solution encrypts data that is
stored on the BlackBerry device and in the BlackBerry Configuration Database. To
help protect data that is stored on the BlackBerry device, you can require a user to
authenticate to the BlackBerry device using a password, a smart card, or both.
encryption key protection The BlackBerry device is designed to protect the encryption keys that are stored on
the BlackBerry device. The BlackBerry device encrypts the encryption keys when
the BlackBerry device is locked.
control of BlackBerry device
connections
The BlackBerry Enterprise Solution is designed to control the following connections:
• connections using Bluetooth® technology to and from the BlackBerry device
• connections from a Wi-Fi® enabled BlackBerry device to enterprise Wi-Fi
networks
The BlackBerry Enterprise Solution is designed to control which BlackBerry devices
can connect to the BlackBerry Enterprise Server.
control of the behavior of the BlackBerry
device and BlackBerry® Desktop
Software
To control the behavior of the BlackBerry device and BlackBerry Desktop Software,
you can send IT administration commands, IT policies, and application control
policies to the BlackBerry device. You can use IT administration commands, IT
policies, and application control policies to perform the following actions:
• You can send IT administration commands to delete application data from the
BlackBerry device and to lock the BlackBerry device.
• You can send an IT policy to a BlackBerry device to change security settings.
You can use the IT policy to enforce the BlackBerry device password and
BlackBerry® Smart Card Reader password.
• You can send an application control policy to a BlackBerry device to control
whether third-party applications are available and can connect to the
BlackBerry device.
Security Technical Overview
Security features of the BlackBerry Enterprise Solution
10