User guide
e. uses K to decrypt the content protection key
f. permanently deletes K
5. The BlackBerry device performs the following actions:
a. selects d randomly
b. calculates D = dP
c. stores D in flash memory
d. calculates K = dB
e. uses K to encrypt the new BlackBerry device password
f. uses the encrypted new password to encrypt the content protection key
Managing BlackBerry device access to the BlackBerry Enterprise Server
You can use the Enterprise Service Policy to control which BlackBerry® devices can connect to a BlackBerry® Enterprise Server.
By default, after you turn on the Enterprise Service Policy, the BlackBerry Enterprise Server permits connections from any
BlackBerry device or BlackBerry enabled device that you previously associated with the BlackBerry Enterprise Server. The
BlackBerry Enterprise Server also prevents connections from any BlackBerry device that you associate with the BlackBerry
Enterprise Server after you turn on the Enterprise Service Policy.
You can configure an allowed list to determine which BlackBerry devices can access a BlackBerry Enterprise Server. A BlackBerry
device that meets the criteria that you specify in the allowed list can associate with the BlackBerry Enterprise Server when the
BlackBerry device activates over the wireless network.
You can define the following types of criteria:
• specific BlackBerry device PINs
• range of BlackBerry device PINs
• specific manufacturers
• specific BlackBerry device models
The BlackBerry Administration Service includes lists of permitted manufacturers and models of BlackBerry devices that you
associated with the BlackBerry Enterprise Server previously.
You can permit a user to override the Enterprise Service Policy so that a BlackBerry device or BlackBerry enabled device can
connect to the BlackBerry Enterprise Server even if you configure the allowed list with criteria that exclude that BlackBerry device
or BlackBerry enabled device.
For more information, see the BlackBerry Enterprise Server Administration Guide.
Security Technical Overview
Managing BlackBerry device access to the BlackBerry Enterprise Server
36