User guide

BlackBerry Smart Card Reader Security 17

3. The BlackBerry device binds to the installed smart card automatically by storing the smart card binding

information in a BlackBerry device NV store location that is designed to be inaccessible to the user.

Confirming that the BlackBerry device is bound to the correct smart card

After a user turns on two-factor authentication, whenever the BlackBerry device prompts the user to insert the

mpt indicates the label and the card

See “Appendix F: Smart card binding information” on page 25 for more information.

smart card into the BlackBerry Smart Card Reader, the BlackBerry device pro

type of the correct (bound) smart card.

The user can also view smart card information in the BlackBerry device Security Options.

Field Description

Name indicates the type of the installed smart card

Initialized er or not the BlackBerry device is authenticated with and bound to the

of No indicates that the BlackBerry device is not bound to the smart card

indicates wheth

smart card

• a value of Yes indicates that the BlackBerry device is bound to the smart card

• a value

Unbinding the smart car fr

When you or the user start a BlackBerry device wipe, causing the BlackBerry device to erase its stored user and

rt card binding information from the NV store so that a

Berry device to remove the binding

g information from the BlackBerry device.

sma

See the Microsoft Windows documentation for information on configuring a computer to require the user to

n screen to use the computer.

d om the BlackBerry device

application data, the BlackBerry device removes the sma

user can authenticate with the BlackBerry device using a new smart card.

You can remove the smart card binding information from the BlackBerry device manually in the following ways.

• Send the Erase Data and Disable Device IT Admin command to the Black

between a user’s current smart card and the BlackBerry device.

• When the user turns off two-factor authentication, the BlackBerry device turns off two-factor authentication

with the installed smart card and removes the smart card bindin

Note: If the user needs to remove smart card binding information from a BlackBerry device that is bound to a

rt card using a smart card reader other then the BlackBerry Smart Card Reader, use the Smart Card

Migration Tool to remove the binding between the user’s current smart card and the BlackBerry device. Visit

www.blackberry.com/knowledgecenterpublic/ to view the article KB-03125 “How to Download and use the

Smart Card Migration Tool.”

Setting two-factor authentication on the computer

connect to a supported smart card reader from the Windows logi