User guide

Permitting an application to encode data on
a smartphone
A developer can use the Transcoder API to create an encoding scheme for data that a BlackBerry Enterprise Server and
BlackBerry smartphone send between each other. The Transcoder API is part of the BlackBerry Java SDK. The BlackBerry
Enterprise Server and the smartphone can use the encoding scheme to encode and decode all gateway message envelope
packets that the
BlackBerry Enterprise Server and the smartphone send between each other. The encoding scheme adds
a transcoder ID to the beginning of the encoded data.
By default, the BlackBerry Enterprise Solution encrypts the encoded data using BlackBerry transport layer encryption. If
the Primary Transcoder IT policy rule specifies that the transcoder is outside, the data is encrypted using BlackBerry
transport layer encryption first, and then encoded by the transcoder if both the BlackBerry Enterprise Server and the
smartphone support it.
Before an application can access the Transcoder API, the BlackBerry Signing Authority Tool must digitally sign the .cod
file. The BlackBerry Signing Authority Tool uses the code signing keys to authorize and authenticate the Transcoder
implementation code.
To permit the BlackBerry Enterprise Server and the smartphone to use the encoding scheme, you must specify the hash of
the application's .cod file in the Security Transcoder Cod File Hashes IT policy rule. To use the transcoder to encode the
data after BlackBerry transport layer encryption is applied, you must also set the Primary Transcoder IT policy rule.
If the RIM Cryptographic API does not support a specific algorithm, the developer can use the Transcoder API to add the
algorithm to the encoding schemes. The BlackBerry Enterprise Solution applies the encoding schemes to any outgoing
data that the
BlackBerry transport layer encryption applies to. By default, the Transcoder API supports all algorithms that
the RIM Cryptographic API supports.
If you permit applications to use the Transcoder API on the smartphone, the applications might impact the security,
usability, and performance of the BlackBerry Enterprise Solution. It might also cause the smartphone to lose data.
Removing applications that a user installed
when a user deletes all smartphone data
If a user clicks Security Wipe in the security options on a BlackBerry smartphone, the user can select the User Installed
Applications option at the same time. If the user selects this option, when the smartphone permanently deletes user data, it
also removes all applications that a user installed on the smartphone, along with the application data.
Security Technical Overview Controlling applications on a device
167