User guide

New in this release

This document describes the security features that the BlackBerry® Enterprise Server version 5.0 SP1, BlackBerry® Desktop

Software version 5.0, BlackBerry® Device Software version 5.0, and BlackBerry® Smart Card Reader version 2.0 support, unless

otherwise stated.

Feature Description

Advanced Security SD card support Similar to the BlackBerry® Smart Card Reader, an Advanced Security SD card

permits a user to use what the user has (smart card) and what the user knows (smart

card password) to prove the user’s identity to the BlackBerry device. The BlackBerry®

Enterprise Solution supports Advanced Security SD cards that use the MCEX smart

card security system.

DSML support You can configure the BlackBerry MDS Connection Service to use DSML to search

for and retrieve certificates from DSML certificate servers for BlackBerry devices

that are running BlackBerry Device Software versions 5.0 and later.

NTLMv2 support BlackBerry Enterprise Server version 5.0 SP1 and BlackBerry Device Software

version 5.0 support using NTLMv2 to authenticate to content servers.

proximity authentication Proximity authentication is an authentication method that permits a user to unlock

a BlackBerry device using a BlackBerry device password and BlackBerry Smart Card

Reader when the BlackBerry Smart Card Reader is located within Bluetooth®

technology range of the BlackBerry device. Proximity authentication does not

require the user to have a smart card. You can use proximity authentication with

BlackBerry Smart Card Reader version 2.0.

two-factor content protection Two-factor content protection requires a BlackBerry device password, a smart card,

and an authentication certificate that is stored on a BlackBerry device to protect

the content protection key. You can use two-factor content protection with

BlackBerry Smart Card Reader version 2.0 or an Advanced Security SD card.

User Authenticator API BlackBerry® Java® Development Environment version 5.0 includes the User

Authenticator API that developers can use to create two-factor authentication

methods that a user can use with the BlackBerry device password to unlock a

BlackBerry device.

Security Technical Overview

New in this release