Blackberry 9620, User Manual

Page: 323 / 365

3. Highlight a certificate or PGP key.
4.
Press the key > Fetch Status or Fetch Chain Status .
Change the trust status of a certificate or PGP key
Before you begin: Depending on the types of certificates that your administrator allows, you might not be able to trust
some types of certificates.
1. On the home screen or in a folder, click the Options icon.
2. Click Security > Advanced Security Settings > Certificates or PGP keys .
3. Highlight a certificate or PGP key.
4. Press the key > Trust or Distrust .
5. If you are trusting a certificate with a certificate chain, do one of the following:
• To trust only the highlighted certificate, click
Selected Certificate .
• To trust the highlighted certificate and all the other certificates in the chain, click Entire Chain .
Related information
About the trust status of certificates and PGP keys, 319
Revoke a certificate or PGP key
If you revoke a certificate or PGP key, it is revoked only in the key store on your BlackBerry smartphone. Your smartphone
doesn't update the revocation status on the certificate authority, CRL servers, or on the PGP Universal Server.
1. On the home screen or in a folder, click the Options icon.
2. Click Security > Advanced Security Settings > Certificates or PGP keys .
3. Highlight a certificate or PGP key.
4.
Press the key > Revoke > Yes .
5. Change the Reason field.
6. Click OK .
To cancel a certificate hold, highlight the certificate. Press the key > Cancel Hold .
Certificate revocation reasons
Reason Description
Unknown The revocation reason does not match any of the predefined reasons.
Key Compromise A person who is not the key subject might have discovered the private key value.
CA Compromise Someone might have revealed the private key of the certificate issuer.
User Guide Security
323