User guide

data and personal data on a computer using the BlackBerry Desktop Software and BlackBerry Web Desktop Manager. The

user can restore the data to the device that the user backed up after the BlackBerry Device Software is updated or when

issues occur that require the user to restore the information.

In rare circumstances, when a user restores work data, a device might not be able to recognize the data as work data and

might treat it as personal data. For example, if a user restores data from an existing device to a new device that the user did

not activate on the

BlackBerry Enterprise Server and that has the radio turned off, the new device might not recognize the

data as work data.

If you want to prevent the user from backing up work data, you can change the value of the Desktop Backup IT policy rule

to No organizational databases. When you set the rule to No organizational databases, the device does not back up the

following information:

• organizer data such as tasks or memos

• work contacts

• work calendar entries

Protecting work data on a media card

By default, a BlackBerry device stores all data in unencrypted format on a media card. When you set the Enable Separation

of Work Content IT policy rule to Yes, the device automatically encrypts all work data on a media card using a device key.

You can perform any of the following actions to further protect the work data on a media card:

• Prevent a user from storing any data on media cards by setting the Disable External Memory IT policy rule to Yes.

• Prevent a user from transferring data to a media card over a USB connection by setting the Disable USB Mass Storage

IT policy rule to Yes.

• Permit the user to store data on media cards, but specify that the device must encrypt all data and not just work data.

To configure this option, set the External File System Encryption Level IT policy rule to one of the following values:

• Encrypt to User Password (excluding multi-media directories)

• Encrypt to User Password (including multi-media directories)

• Encrypt to Device Key (excluding multi-media directories)

• Encrypt to Device Key (including multi-media directories)

• Encrypt to User Password and Device Key (excluding multi-media directories)

• Encrypt to User Password and Device Key (including multi-media directories)

Deleting only work data from a device

To help protect your organization's data on a personal BlackBerry device, you can permit your organization to delete work

data from a device when a user no longer works at your organization. You can use the BlackBerry Administration Service to

Security Technical Overview Securing devices in your organization’s environment for personal use and work use