Specifications

d Sends the encrypted message to the BlackBerry Device Service
2. If the device is connected to the BlackBerry Infrastructure, the BlackBerry Device Service decrypts the BlackBerry
transport layer encryption.
3. The BlackBerry Device Service sends the S/MIME-encrypted message to the recipient.
4. The recipient decrypts the S/MIME-encrypted message using their S/MIME private key.
Using S/MIME with a smart card
Devices that run BlackBerry 10 OS version 10.1 support using S/MIME with a smart card and includes tools to import
certificates onto the devices. To use S/MIME with a smart card, a user needs to bind the device with the smart card.
After the user binds the smart card to the device, the user can see the list of S/MIME certificates that are stored on the
smart card and choose which ones to import into the certificate store on the device. The private keys remain on the smart
card. To sign messages or decrypt them, the device must be bound to the smart card.
Related information
BlackBerry Smart Card Reader, 104
Security Technical Overview Extending messaging security on BlackBerry 10 devices
91