Blackberry PRD-09695-004 Technical Overview - Page 19

Confirming that a BlackBerry device is bound to the correct smart card

Page 19 highlights

• The BlackBerry device binds to the installed smart card automatically by storing the smart card binding information in a BlackBerry device NV store location, which is designed to be inaccessible to the user. For more information, see "Smart card binding information". Confirming that a BlackBerry device is bound to the correct smart card After a user turns on two-factor authentication, whenever a BlackBerry® device prompts the user to insert the smart card into the BlackBerry® Smart Card Reader, the BlackBerry device prompt indicates the label and the card type of the correct (bound) smart card. The user can also view smart card information in the Security options on the BlackBerry device. Field Name Initialized Description This field indicates the type of the installed smart card. This field indicates whether the BlackBerry device is authenticated with and bound to the smart card • A value of Yes indicates that the BlackBerry device is bound to the smart card. • A value of No indicates that the BlackBerry device is not bound to the smart card. Unbinding the smart card from a BlackBerry device When you or a user start the process that permits a BlackBerry® device to permanently deletes its stored user and application data, the BlackBerry device deletes the smart card binding information from its NV store. When the process completes, a user can authenticate with the BlackBerry device using a new smart card. You can delete the smart card binding information from the BlackBerry device manually in the following ways: • Send the Erase Data and Disable Device IT administration command to the BlackBerry device to delete the binding between a user's current smart card and the BlackBerry device. • When the user turns off two-factor authentication, the BlackBerry device turns off two-factor authentication with the installed smart card and deletes the smart card binding information from the BlackBerry device. Configuring two-factor authentication on a computer For information about configuring a computer to require the user to connect to a supported smart card reader from the Windows login screen to use the computer, see the Windows® documentation. 19

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34

The BlackBerry device binds to the installed smart card automatically by storing the smart card binding
information in a BlackBerry device NV store location, which is designed to be inaccessible to the user.
For more information, see “Smart card binding information”.
Confirming that a BlackBerry device is bound to the correct smart card
After a user turns on two-factor authentication, whenever a BlackBerry® device prompts the user to insert the smart
card into the BlackBerry® Smart Card Reader, the BlackBerry device prompt indicates the label and the card type of
the correct (bound) smart card.
The user can also view smart card information in the Security options on the BlackBerry device.
Field
Description
Name
This field indicates the type of the installed smart card.
Initialized
This field indicates whether the BlackBerry device is authenticated with and bound to the
smart card
A value of Yes indicates that the BlackBerry device is bound to the smart card.
A value of No indicates that the BlackBerry device is not bound to the smart card.
Unbinding the smart card from a BlackBerry device
When you or a user start the process that permits a BlackBerry® device to permanently deletes its stored user and
application data, the BlackBerry device deletes the smart card binding information from its NV store. When the
process completes, a user can authenticate with the BlackBerry device using a new smart card.
You can delete the smart card binding information from the BlackBerry device manually in the following ways:
Send the Erase Data and Disable Device IT administration command to the BlackBerry device to delete the
binding between a user’s current smart card and the BlackBerry device.
When the user turns off two-factor authentication, the BlackBerry device turns off two-factor authentication
with the installed smart card and deletes the smart card binding information from the BlackBerry device.
Configuring two-factor authentication on a computer
For information about configuring a computer to require the user to connect to a supported smart card reader from
the Windows login screen to use the computer, see the Windows® documentation.
19