Installation guide

BlackBerry Enterprise Solution 74
Appendix D: BlackBerry device wipe process
A BlackBerry device wipe is designed to delete and overwrite the BlackBerry device memory using the following
process:
1. The BlackBerry device sets a Device Under Attack flag in the NV store.
If a user removes the battery before the BlackBerry device data wipe ends, when the BlackBerry device
power is restored (in other words, a user replaces the battery), the BlackBerry device wipe process continues
because the Device Under Attack flag is still present.
2. If content protection of master encryption keys is turned on, the BlackBerry device overwrites the copy of
the grand master key in RAM with zeroes.
3. The BlackBerry device deletes its binding with the BlackBerry Enterprise Server by deleting the IT policy
public key from the NV store.
4. If applicable, the BlackBerry device deletes the smart card binding information from the NV store.
5. The BlackBerry device wireless transceiver turns off.
6. The BlackBerry device deletes data in the persistent store in flash memory, including references to the
master encryption key.
7. The BlackBerry device overwrites flash memory with zeroes.
8. The BlackBerry device memory scrub process overwrites the BlackBerry device heap in RAM, changing the
state of each bit four times. For more information, see “Memory scrub process for RAM” below.
9. The BlackBerry device clears the BlackBerry device password from the NV store.
10. If content protection is turned on, the BlackBerry device memory scrub process overwrites the BlackBerry
device flash memory file system, changing the state of each bit four times. For more information, see
“Memory scrub process for flash memory” below.
11. The BlackBerry device clears the Device Under Attack flag from the NV store.
12. The BlackBerry device restarts.
Memory scrub process for RAM
The BlackBerry device memory scrub process performs the following actions to overwrite the BlackBerry device
heap in RAM:
1. Writes 0x33 to each byte (0011 0011
2
).
2. Clears all bytes to 0x00 (0000 0000
2
).
3. Writes 0xCC to each byte (1100 1100
2
).
4. Clears all bytes to 0x00 (0000 0000
2
).
5. Writes 0x55 to each byte (0101 0101
2
).
6. Clears all bytes to 0x00 (0000 0000
2
).
7. Writes 0xAA to each byte (1010 1010
2
).
Memory scrub process for flash memory
If content protection is enabled, the BlackBerry device memory scrub process performs the following actions to
overwrite the BlackBerry device flash memory during a BlackBerry device wipe:
1. Writes 0x33 to each byte (0011 0011
2
).
2. Clears all bytes to 0xFF to each byte (1111 1111
2
).
3. Writes 0xCC to each byte (0x1100 1100
2
).
©
2008 Research In Motion Limited. All rights
reserved.
www.blackberry.com