User guide

• name of each BlackBerry® Enterprise Server

• unique SRP authentication keys and unique SRP IDs, or UIDs, that each BlackBerry Enterprise Server uses in the SRP

authentication process to open a connection to the wireless network

• IT policy private keys of the IT policy key pairs that the BlackBerry Enterprise Server generates for each BlackBerry device

• PIN of each BlackBerry device

• read-only copies of each device transport key

• copy of your organization’s user directory

• a semi-permanent reference to user data using the Novell® GroupWise® MessageID in the database synchronization tables

that are named MBMailSync, MBCalendarSync, MBPIMSync, and MBFolderSync (BlackBerry® Enterprise Server for Novell®

GroupWise® only)

The BlackBerry Enterprise Server components that do not connect to a messaging server can access the information that the

BlackBerry Configuration Database stores.

Best practice: Protecting the data that the BlackBerry Configuration Database stores

Best practice Description

Audit connections to the Microsoft®

SQL Server®.

Consider the following guidelines:

• At a minimum, write failed connection attempts to the Microsoft SQL Server

log file and review the log file regularly.

• When possible, save log files to a different hard disk drive than the one that

the data files are stored on.

Delete unsecured, old setup files. Consider deleting Microsoft SQL Server setup files that might contain plaintext,

credentials encrypted with weak public keys, or sensitive information that the

Microsoft SQL Server logged to a Microsoft SQL Server version-dependent location

during the Microsoft SQL Server installation process.

Microsoft distributes the Killpwd tool, which is designed to locate and delete

passwords from unsecured, old setup files in your organization’s environment. For

more information, visit support.microsoft.com to read article KB263968.

Limit the permission level of the

Microsoft SQL Server.

Consider associating each Microsoft SQL Server service with a Windows® account

that the service derives its security context from.

Security Technical Overview

Data that the BlackBerry Configuration Database stores