Installation guide

BlackBerry Enterprise Solution 8
Feature Description
control BlackBerry device and BlackBerry
Desktop Software functionality
• Send wireless commands to turn on and turn off BlackBerry
device functionality, delete information from BlackBerry
devices, and lock BlackBerry devices.
• Send IT policies to BlackBerry devices to customize security
settings for BlackBerry device users or groups of BlackBerry
device users on a BlackBerry Enterprise Server.
• Send application control policies to BlackBerry devices to
control third-party application availability and connections.
• Enforce BlackBerry device and BlackBerry Smart Card
Reader passwords.
New security features
Feature Software versions supported Description
Wi-Fi enabled BlackBerry
devices that include an
RSA® SecurID
cryptographic library
support two-factor
authentication with Wi-Fi
enterprise networks.
• BlackBerry Enterprise
Server Version 4.1 SP4 or
later
• BlackBerry Device Software
Version 4.2.2 or later
Supported BlackBerry devices use the RSA
SecurID® library and RSA implemented
cryptography to create a passcode for use
with a two-factor authentication process on
the BlackBerry device.
Wireless software upgrade
communication between
supported BlackBerry
devices and the BlackBerry
Enterprise Solution
components that send
requests for wireless
software upgrades to
BlackBerry devices is
designed to be protected.
• BlackBerry Enterprise
Server Version 4.1 SP4 or
later
• BlackBerry Device Software
Version 4.5 or later
Specific types of communication that the
BlackBerry device receives from the
BlackBerry Enterprise Server or BlackBerry
Infrastructure contain a digital signature
that the BlackBerry device uses to
authenticate the messages.
BlackBerry devices running
the S/MIME Support
Package for BlackBerry
devices or the PGP®
Support Package for
BlackBerry devices allow
users to view encrypted
attachments in S/MIME-
protected and PGP
protected messages.
• BlackBerry Enterprise
Server Version 4.1 SP5 or
later
• BlackBerry Device Software
Version 4.5 or later
The BlackBerry Enterprise Server
administrator can use the S/MIME Allowed
Encrypted Attachment Mode IT policy rule
and the PGP Allowed Encrypted
Attachment Mode IT policy rule to specify
the least restrictive mode that the
BlackBerry device can use to retrieve PGP
encrypted and S/MIME-encrypted
attachment information.
The BlackBerry Enterprise
Server supports enhanced
control of lost and stolen
BlackBerry devices.
• BlackBerry Enterprise
Server Version 4.1 SP5 or
later
• BlackBerry Device Software
Version 4.5 or later
The BlackBerry Enterprise Server
administrator can specify a delay (in hours)
when using the Erase Data And Disable
Handheld IT administration command over
the wireless network.
www.blackberry.com