User guide

A device that has a PIN encryption key that is specific to your organization can perform the following actions:
• can only encrypt PIN messages sent to other devices on your organization's network that use the same PIN encryption
key
• can only decrypt PIN messages that are sent from devices that use the global PIN encryption key or PIN messages from
other devices on your organization's network that use the same PIN encryption key
• cannot decrypt PIN messages sent from devices that use a PIN encryption key from another organization
You can generate a PIN encryption key for your organization and send it to devices using the BlackBerry Administration
Service.
When you use a PIN encryption key that is specific to your organization, BlackBerry Messenger messages also use the PIN
encryption key. If you use a PIN encryption key that is specific to your organization, you limit users so that they can only use
BlackBerry Messenger with other users in your organization and you create a closed community within your organization.
Optionally, you can configure the Firewall Block Incoming Messages IT policy rule to block PIN messages that are sent from
devices that have the global PIN encryption key. For more information, see the BlackBerry Enterprise Server Policy
Reference Guide.
Security Technical Overview Keys on a device
30