Specifications
Preventing users from installing apps using
development tools
App developers can use development tools to test apps that they are developing by installing the apps on devices using a
USB or Wi-Fi connection.
You can use the "Restrict Development Mode" IT policy rule to prevent users from using development tools to install apps
on BlackBerry Balance devices. Users cannot use development tools to install apps on work space only devices.
When development mode is not available on a device, users can only download and install apps from the BlackBerry World
storefront and the BlackBerry World for Work storefront, and you can also send apps to devices using the BlackBerry
Administration Service.
Signing apps
Before you can make an app that is developed by your organization available to BlackBerry 10 devices on the BlackBerry
World for Work storefront or to BlackBerry PlayBook tablets on the Work tab on the BlackBerry World storefront, Research
In Motion requires that the RIM signing authority system digitally sign the app.
The RIM signing authority system uses public key cryptography to authorize and authenticate the application code.
The developer must visit https://www.blackberry.com/SignedKeys to register the app with the RIM signing authority system
so that the app can use the signing tool that is included with the BlackBerry development tools. The signing tool permits an
app to request, receive, and verify a digital signature from RIM. When a user starts the app, the BlackBerry 10 OS or the
BlackBerry PlayBook OS verifies that the RIM signing authority signed the application files and that the application files
have not changed since that app was installed.
For more information about code signing apps, see http://www.blackberry.com/developers.
Protecting a device from malicious apps
Apps are tested to make sure that they do not interfere with the core functionality of devices before they are approved by
Research In Motion and made available on the BlackBerry World storefront. RIM can remove any apps from BlackBerry
World that were identified as potentially malicious or do not follow the BlackBerry World Vendor Agreement.
Security Technical Overview Managing app availability on devices
84