User guide

How a device validates a BlackBerry Device Software
update over the wireless network
When a BlackBerry device receives a BlackBerry Device Software update from the BlackBerry Infrastructure, it verifies that
the ECDSA key uses a public key that is shared by all devices that support BlackBerry Device Software updates over the
wireless network. The device verifies the digital signature on the ECDSA key using a stored root certificate.
Updating the BlackBerry Device Software
from an update web site
You can configure the IT policy rules that are included in the Wired Software Updates policy group to permit a user to
update the BlackBerry Device Software from an update web site using the BlackBerry Desktop Manager or BlackBerry
Application Web Loader
. The user can use the update process to update the BlackBerry Device Software from a computer
that is outside your organization’s network (for example, from home).
During the update process, a BlackBerry device activates itself automatically over the wireless network so that the user can
use a computer that is outside your organization’s network to update the BlackBerry Device Software. When a user who
does not use the
BlackBerry Desktop Manager visits the update web site, the user must download and install Microsoft
ActiveX components on the computer before the user can update the BlackBerry Device Software. The update process can
take from 15 minutes to 2 hours, depending on the type of update, amount of device data, and number of applications that
are installed on the device. A user cannot use the device or make emergency calls during the update process.
BlackBerry Device Software versions 5.0 and later, BlackBerry Desktop Manager versions 5.0.1 and later, and BlackBerry
Application Web Loader versions 1.1.0 and later support BlackBerry Device Software updates from an update web site.
For more information about the IT policy rules that are included in the Wired Software Updates policy group, see the
BlackBerry Enterprise Server Policy Reference Guide. For more information about the BlackBerry Application Web Loader,
see the
BlackBerry Application Web Loader Developer Guide.
Protecting cryptographic services data when updating
the BlackBerry Device Software from an update web
site
When a user updates the BlackBerry Device Software from an update web site, the BlackBerry Enterprise Solution backs
up cryptographic services data (for example, cryptographic keys and service books) from a
BlackBerry device to the user’s
Security Technical Overview Protecting BlackBerry Device Software updates
113