User guide
Protecting BlackBerry Device Software updates
13
Protecting BlackBerry Device Software updates over the wireless network
You can update the BlackBerry® Device Software on a BlackBerry device over the wireless network. You can use the BlackBerry
Administration Service to search for updates that match the BlackBerry device and wireless service provider, and send the updates.
You can also permit your organization's wireless service provider to send the BlackBerry Device Software updates.
The BlackBerry® Enterprise Solution protects the BlackBerry Device Software updates using encryption, IT policies, content
protection, and battery power requirements.
For more information about BlackBerry Device Software updates, see the BlackBerry Device Software Update Guide.
How the BlackBerry Enterprise Solution protects BlackBerry Device Software updates over
the wireless network using encryption
The BlackBerry® Enterprise Server, BlackBerry® Infrastructure, BlackBerry® Provisioning System administration web site, and
BlackBerry device protect data for BlackBerry® Device Software updates over the wireless network. You can use the BlackBerry
Provisioning System administration web site when you want to permit your organization’s wireless service provider to update the
BlackBerry Device Software.
The BlackBerry Enterprise Server and BlackBerry device encrypt all data that they send between each other, including BlackBerry
Device Software updates, using BlackBerry transport layer encryption.
The BlackBerry device validates the digital signatures of the following information to verify integrity:
• control messages that the BlackBerry device receives from the BlackBerry Infrastructure or BlackBerry Provisioning System
administration web site
• BlackBerry Device Software update instructions that the BlackBerry device requests and receives from the BlackBerry
Infrastructure or BlackBerry Provisioning System administration web site
How the BlackBerry Enterprise Solution protects BlackBerry Device Software updates over
the wireless network using IT policies and content protection
The default values for the Default IT policy determine that only the BlackBerry® Enterprise Server can send available BlackBerry®
Device Software updates and request a BlackBerry device to update the BlackBerry Device Software. A wireless service provider
cannot send available BlackBerry Device Software updates to the BlackBerry device unless you change the value for the Allow
Non Enterprise Upgrade IT policy rule to Yes.
When you or a user turns on the content protection feature on a BlackBerry device, the BlackBerry device protects user data in
the following ways:
Security Technical Overview
Protecting BlackBerry Device Software updates
79