Blackberry PRD-10459-016 Administration Guide - Page 63

Administration Guide When a BlackBerry device overwrites data in the BlackBerry device memory • An application uses the RIM® Cryptographic API to create a private key or symmetric key. • An application that registers with the memory cleaner application requires that memory cleaning application be turned on. • The BlackBerry device user installs the S/MIME Support Package for BlackBerry® smartphones on the BlackBerry device and a private key exists on the BlackBerry device. • The BlackBerry device user installs the PGP® Support Package for BlackBerry® smartphones on the BlackBerry device and a private key exists on the BlackBerry device. If you or the BlackBerry device user turns on the memory cleaner application, Java® based garbage collection process uses the memory cleaner application automatically. The garbage collection process overwrites data that the BlackBerry device no longer uses. For more information about the IT policy rules that you can use to change when the memory cleaner application runs, see the BlackBerry Enterprise Server Policy Reference Guide. Best practice: Configuring additional memory cleaner settings for BlackBerry devices Scenario Recommendation Remove decrypted content from BlackBerry® device memory when the user holsters BlackBerry device. Change the Force Memory Clean When Holstered IT policy rule to Yes. Remove decrypted content from BlackBerry device memory when the BlackBerry device is idle. Change the Force Memory Clean When Idle IT policy rule to Yes. Start the memory cleaner after a specific amount of time Set the Memory Cleaner Maximum Idle Time IT policy has elapsed. rule to the desired time (for example, 10 minutes). For more information, see the BlackBerry Enterprise Server Policy Reference Guide and S/MIME Support Package User Guide Supplement. 61