Installation guide

BlackBerry Enterprise Solution Security

Controlling BlackBerry devices 37

If the BlackBerry device is running either BlackBerry Device Software version 3.6 or earlier with the S/MIME

Support Package version 4.0 or later installed or BlackBerry Device Software version 4.0 or later (S/MIME

Support Package optional), the user can also view smart card information in the BlackBerry device Security

Options.

Field Description

Name indicates the type of the installed smart card

Initialized indicates whether the BlackBerry device is authenticated with and bound to the smart

card

• a value of Yes indicates that the BlackBerry device is bound to the smart card

• a value of No indicates that the BlackBerry device is not bound to the smart card

Controlling BlackBerry devices

With the BlackBerry Enterprise Solution, you can monitor and control all BlackBerry devices wirelessly from the

BlackBerry Manager.

Controlling BlackBerry device behaviour using IT policy rules

Use one or more IT policies to control the behavior of BlackBerry devices and the BlackBerry Desktop Software in

your organization.

The Default IT policy includes all standard IT policy rules on the BlackBerry Enterprise Server. When new users in

a BlackBerry Domain complete activation of their BlackBerry devices on the BlackBerry Enterprise Server, the

BlackBerry Enterprise Server automatically pushes the Default IT policy to their BlackBerry devices. The standard

IT policy rules do not enforce the default BlackBerry device or BlackBerry Desktop Software behavior. You can

use either of the following methods to change the default behavior of BlackBerry devices and BlackBerry

Desktop Software in your organization:

• set the values of IT policy rules in the Default IT policy

• create a new IT policy, set its IT policy rule values, and assign one or more users or user groups to the new IT

policy

Changing the default behavior

An IT policy rule enables you to customize and control BlackBerry device and BlackBerry Desktop Software

functionality using the following methods:

• setting an IT policy rule to a True or False value

• typing a string, which simultaneously turns on an IT policy rule and provides the parameters for its use

• selecting a predefined permitted value to assign to an IT policy rule

Some IT policy rules have a corresponding, user-accessible field on the BlackBerry device.

• When you set an IT policy rule to a True or False value, you prevent the user from selecting another value for

a corresponding field on the BlackBerry device.

• When you type a string that simultaneously turns on an IT policy rule and provides the parameters for its

use, the user cannot change the value of a corresponding field on the BlackBerry device.

• When you select a predefined permitted value to assign to an IT policy rule, you restrict the values that the

user can set for a corresponding field on the BlackBerry device.

You can add a standard IT policy rule to, remove a standard IT policy rule from, or change the assigned value of a

standard IT policy rule in an IT policy. You cannot add, remove, or change the permitted values for a standard IT

policy rule. You also cannot delete the standard IT policy rules.