Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 - Guide d'installation

BlackBerry Enterprise Solution Security Release 4.1 Technical Overview© 2006 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution Security BlackBerry encryption keys 10 5. The BlackBerry Enterprise Server uses SHA512 to hash the 521-byte value to

BlackBerry Enterprise Solution Security BlackBerry encryption keys 11 User data encryption process on a locked BlackBerry device 1. The BlackBerry d

BlackBerry Enterprise Solution Security BlackBerry symmetric key encryption algorithms 12 BlackBerry symmetric key encryption algorithms A symmetric

BlackBerry Enterprise Solution Security BlackBerry symmetric key encryption algorithms 13 When a user sends a message from the BlackBerry device, the

BlackBerry Enterprise Solution Security BlackBerry wireless messaging security 14 BlackBerry wireless messaging security The BlackBerry Enterprise So

BlackBerry Enterprise Solution Security BlackBerry wireless messaging security 15 2. The BlackBerry Infrastructure routes the encrypted message to t

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 16 SMS and MMS messaging SMS and MMS messaging are available o

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 17 that the BlackBerry device can decrypt messages that are en

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 18 If the PGP Support Package is installed on a BlackBerry dev

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 19 1. The BlackBerry device encrypts the message with the mes

BlackBerry Enterprise Solution Security Contents Wireless security...

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 20 If a user with this feature configured on the BlackBerry de

BlackBerry Enterprise Solution Security Protecting stored data 21 Protecting stored data Protecting stored messages on the messaging server The IBM L

BlackBerry Enterprise Solution Security Protecting stored data 22 The first time that a user opens the Password Keeper on the BlackBerry device, they

BlackBerry Enterprise Solution Security Protecting stored data 23 Enabling protected storage of BlackBerry device data You enable protected storage o

BlackBerry Enterprise Solution Security Protecting stored data 24 When the user unlocks the BlackBerry device after a reset, the BlackBerry device •

BlackBerry Enterprise Solution Security BlackBerry architecture component security 25 BlackBerry architecture component security The BlackBerry Enter

BlackBerry Enterprise Solution Security BlackBerry architecture component security 26 messaging server continues to receive, deliver, and store all c

BlackBerry Enterprise Solution Security BlackBerry architecture component security 27 Configuration option Recommendations limit the privilege level

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 28 Changing the BlackBerry configuration database If you

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 29 SRP action Description exchange configuration inform

BlackBerry Enterprise Solution Security Messaging server ...

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 30 Step Action Description 6 The BlackBerry Infrastru

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 31 from an activation password to establish a shared mas

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 32 TCP/IP connection The TCP/IP connection from the Blac

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 33 Messaging server to desktop email program connection

BlackBerry Enterprise Solution Security Authenticating a user 34 HTTPS protocol BlackBerry MDS encryption method Description proxy mode TLS/SSL Sun®

BlackBerry Enterprise Solution Security Authenticating a user 35 If the user intends to activate their BlackBerry device wirelessly, they must contac

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 36 • format of the binding information (currently, a version byte with a valu

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 37 • typing a string, which simultaneously turns on a rule and provides the p

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 38 • Restrict device resources available to third-party applications See the

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 39 Protecting third-party applications on the BlackBerry device Java-based Bla

BlackBerry Enterprise Solution Security Wireless security 4 This document describes the security features of the BlackBerry Enterprise Solution™ and

BlackBerry Enterprise Solution Security Protecting lost, stolen, or replaced BlackBerry devices 40 BlackBerry JDE security method Description applic

BlackBerry Enterprise Solution Security Protecting lost, stolen, or replaced BlackBerry devices 41 Erasing data from BlackBerry device memory and mak

BlackBerry Enterprise Solution Security Related resources 42 Related resources Resource Information BlackBerry Enterprise Server Feature and Technic

BlackBerry Enterprise Solution Security Related resources 43 Resource Information PGP Support Package User Guide Supplement • installing the PGP Su

BlackBerry Enterprise Solution Security Appendix A: RIM Cryptographic Application Programming Interface 44 Appendix A: RIM Cryptographic Application

BlackBerry Enterprise Solution Security Appendix A: RIM Cryptographic Application Programming Interface 45 Key agreement schemes Algorithm Key lengt

BlackBerry Enterprise Solution Security Appendix B: TLS and WTLS standards that the RIM Crypto API supports 46 Appendix B: TLS and WTLS standards tha

BlackBerry Enterprise Solution Security Appendix B: TLS and WTLS standards that the RIM Crypto API supports 47 Symmetric algorithms that the RIM Cryp

BlackBerry Enterprise Solution Security Appendix C: Previous version of wired master encryption key generation 48 Appendix C: Previous version of wir

BlackBerry Enterprise Solution Security Appendix D: BlackBerry device wipe process 49 Appendix D: BlackBerry device wipe process A BlackBerry device

BlackBerry Enterprise Solution Security BlackBerry Enterprise Solution security 5 Concept Description BlackBerry Enterprise Solution implementation

BlackBerry Enterprise Solution Security Appendix D: BlackBerry device wipe process 50 3. Writes 0xCC to each byte (0x1100 11002). 4. Clears all byt

BlackBerry Enterprise Solution Security Appendix E: Ephemeral AES encryption key derivation process 51 Appendix E: Ephemeral AES encryption key deriv

BlackBerry Enterprise Solution Security 52 Part number: SWD_X_BES(EN)-179.002 ©2006 Research In Motion Limited. All Rights Reserved. The BlackBerry a

BlackBerry Enterprise Solution Security BlackBerry encryption keys 6 New security features Feature Software versions supported Description protect

BlackBerry Enterprise Solution Security BlackBerry encryption keys 7 Master encryption key storage The BlackBerry configuration database, the messagi

BlackBerry Enterprise Solution Security BlackBerry encryption keys 8 Key generation method Initial key generation Key regeneration wireless Wirele

BlackBerry Enterprise Solution Security BlackBerry encryption keys 9 Protocol Description initial key establishment protocol • The BlackBerry Enter