User guide
• TLS_DHE_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DHE_DSS_EXPORT_WITH_DES40_CBC_SHA
• TLS_RSA_EXPORT_WITH_DES40_CBC_SHA
• TLS_DH_anon_WITH_DES_CBC_SHA
• TLS_DH_anon_EXPORT_WITH_RC4_40_MD5
• TLS_DH_anon_EXPORT_WITH_DES40_CBC_SHA
Managing how a device connects to an
enterprise Wi-Fi network
To manage how a Wi-Fi enabled BlackBerry device connects to an enterprise Wi-Fi network, you can use IT administration
commands, IT policy rules, and configuration settings. You can turn on or turn off
Wi-Fi access for the device in BlackBerry
Enterprise Server version 4.1 SP3 or later, and manage Wi-Fi configuration settings and VPN configuration settings for user
accounts in BlackBerry Enterprise Server version 4.1 SP2 or later.
When you configure an IT policy or configuration setting, a user cannot override the value on the device.
At an application level, you can specify the types of connections that an application can make. When you configure
application control policies, you can control whether the application can access the enterprise Wi-Fi network.
For more information about specifying whether an application can access an enterprise Wi-Fi network, see Protecting the
BlackBerry Device Platform Against Malware. For more information about using IT policy rules and configuration settings,
see the BlackBerry Enterprise Server Administration Guide and the BlackBerry Enterprise Server Policy Reference Guide .
How the BlackBerry Enterprise Solution
protects sensitive Wi-Fi information
To permit a Wi-Fi enabled BlackBerry device to access a Wi-Fi network, you must send sensitive Wi-Fi information such as
encryption keys and passwords to the device using
Wi-Fi profiles, VPN profiles, and IT policy rules. After the device receives
the sensitive Wi-Fi information, the device encrypts the encryption keys and passwords and stores them in flash memory in
an area that third-party applications cannot access.
The BlackBerry Enterprise Server encrypts the sensitive Wi-Fi information that it sends to the device and stores the
sensitive Wi-Fi information in the BlackBerry Configuration Database. You can help protect the sensitive Wi-Fi information
in the BlackBerry Configuration Database using access controls and configuration settings.
Security Technical Overview Wi-Fi enabled devices
143