Blackberry PRD-10459-035 Administration Guide - Page 15

Generating organization-specific encryption keys for PIN message encryption

Get Blackberry PRD-10459-035 - Enterprise Server For MDS Applications PDF manuals and user guides View all Blackberry PRD-10459-035 manuals
Add to My Manuals
Save this manual to your list of manuals

Page 15 highlights

Administration Guide Generating organization-specific encryption keys for PIN message encryption 5. In the drop-down list, select an encryption type. 6. Click OK. Related topics Assigning BlackBerry devices to user accounts, 54 Generating organization-specific encryption keys for PIN message encryption By default, all BlackBerry® devices store a common PIN encryption key that they use to protect PIN messages. To limit the number of BlackBerry devices that can decrypt PIN messages that users in your organization send from their BlackBerry devices, you can generate a new PIN encryption key that is stored on and known only to BlackBerry devices in your organization. BlackBerry devices with a PIN encryption key that is specific to your organization can send and receive PIN messages only with other BlackBerry devices that store the same PIN encryption key. You should generate a new PIN encryption key if you know that your current organization-specific PIN encryption key is compromised. Generate a new peer-to-peer encryption key 1. In the BlackBerry® Manager, in the left pane, click BlackBerry Domain. 2. On the Global tab, expand Service Control & Customization. 3. Click Update Peer-to-Peer Encryption Key. 4. Click Set or update the Peer-to-Peer encryption key for all devices within this organization. 5. Click Yes. Authenticating the BlackBerry MDS Integration Service to the BlackBerry Manager and web services After you install the BlackBerry® MDS Integration Service, you must install a digital certificate for the BlackBerry MDS Integration Service in the key store on the same computer. This certificate allows server-authenticated communication between the BlackBerry MDS Integration Service and the BlackBerry Manager. You can install a self-signed certificate for the BlackBerry MDS Integration Service, or you can get a signed root certificate from a certificate authority and install it in the key store using the Java® keytool. You can replace the self-signed certificate with a signed root certificate at any time, but you should install the certificate that you want to use immediately after you install the BlackBerry MDS Integration Service and before you allow authentication with the BlackBerry Manager or web services using that certificate. 13

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
5.
In the drop-down list, select an encryption type.
6.
Click
OK
.
Related topics
Assigning BlackBerry devices to user accounts, 54
Generating organization-specific encryption keys for PIN message
encryption
By default, all BlackBerry® devices store a common PIN encryption key that they use to protect PIN messages. To limit the number
of BlackBerry devices that can decrypt PIN messages that users in your organization send from their BlackBerry devices, you can
generate a new PIN encryption key that is stored on and known only to BlackBerry devices in your organization. BlackBerry
devices with a PIN encryption key that is specific to your organization can send and receive PIN messages only with other
BlackBerry devices that store the same PIN encryption key.
You should generate a new PIN encryption key if you know that your current organization-specific PIN encryption key is
compromised.
Generate a new peer-to-peer encryption key
1.
In the BlackBerry® Manager, in the left pane, click
BlackBerry Domain
.
2.
On the
Global
tab, expand
Service Control & Customization
.
3.
Click
Update Peer-to-Peer Encryption Key
.
4.
Click
Set or update the Peer-to-Peer encryption key for all devices within this organization
.
5.
Click
Yes
.
Authenticating the BlackBerry MDS Integration Service to the BlackBerry
Manager and web services
After you install the BlackBerry® MDS Integration Service, you must install a digital certificate for the BlackBerry MDS Integration
Service in the key store on the same computer. This certificate allows server-authenticated communication between the
BlackBerry MDS Integration Service and the BlackBerry Manager.
You can install a self-signed certificate for the BlackBerry MDS Integration Service, or you can get a signed root certificate from
a certificate authority and install it in the key store using the Java® keytool. You can replace the self-signed certificate with a
signed root certificate at any time, but you should install the certificate that you want to use immediately after you install the
BlackBerry MDS Integration Service and before you allow authentication with the BlackBerry Manager or web services using that
certificate.
Administration Guide
Generating organization-specific encryption keys for PIN message encryption
13