Blackberry PRD-10459-016 Administration Guide - Page 59

Administration Guide Enforcing secure messaging using classifications Enforcing secure messaging using classifications You can use message classifications to require S/MIME-enabled users or PGP® enabled users to sign, encrypt, or sign and encrypt email messages that they send from the BlackBerry® devices. You use the Message Classification IT policy rule to configure one or more message classifications that users can apply to email messages. The message classification that the users select when they compose email messages determines the type of S/MIME message protection or PGP message protection that applies to the email messages. If a user does not select a message classification, by default, the BlackBerry device applies the first classification in the message classification list on the BlackBerry device. You can change the order that the BlackBerry device lists the classifications in. The message protection options on the BlackBerry device are limited to the types of encryption and digitial signing that the highly secure messaging packages on the BlackBerry device permit. When a user applies a message classification to an email message on a BlackBerry device, the user must select one type of message protection that the message classification permits, or accept the default type of message protection. If a user selects a message classification that requires signing, encryption, or signing and encryption of the email message, and the user did not install a highly secure messaging package on the BlackBerry device, the user cannot send the email message. Create a message classification 1. In the BlackBerry® Administration Service, on the BlackBerry solution management menu, expand Policy. 2. Click Manage IT policies. 3. In the list of IT policies, click an IT policy. 4. Click Edit IT policy. 5. On the Security tab, at the bottom of the screen, in the Message Classification Display Name field, type a display name that you want to appear in the Classifications list on BlackBerry devices. 6. Type a subject suffix that you want to append to the message subject in parentheses . For example, type the subject suffix (U) for a classification that is named Unclassified. 7. In the Minimum Actions drop-down list, click an action that a BlackBerry device user can perform to encode the message. For example, to permit users to select all of the encoding types for the secure messaging packages that they install on their BlackBerry devices, click Signed. 8. Click the Add icon. 9. Click Save all. After you finish: If you create more than one message classification, order the message classifications in the list. By default, if a user does not select a message classification, the BlackBerry device applies the first message classification in the list. 57