The BlackBerry Enterprise Server for Novell GroupWise supports this rule in BlackBerry Device Software version 4.0 or later.
Allowed Authentication Mechanisms IT policy rule
Description
This rule specifies the types of authentication mechanisms that a BlackBerry® device user can turn on. Authentication mechanisms
control access to a BlackBerry device.
Default value
The default value is Allowed. Any authentication mechanism permits a user access to a BlackBerry device.
Usage
To permit a user to turn on a specific authentication mechanism, configure this rule to one of the following mechanisms:
•
Smartcard
•
Fingerprint
•
Smartcard and Fingerprint
•
Proximity
•
Other
You can control other authentication mechanisms using the User Authenticator API application control policy rule.
Dependencies
This rule takes priority over the Force Smart Card Two Factor Authentication IT policy rule. For example, if you configure this rule
to prevent smart card authentication but the Force Smart Card Two Factor Authentication IT policy rule is configured to Yes,
smart card authentication is not forced.
Minimum requirements
•
Java® based BlackBerry device
•
BlackBerry® Device Software version 5.0
•
BlackBerry® Enterprise Server version 5.0
Certificate Status Maximum Expiry Time IT policy rule
Description
This rule specifies the maximum length of time (in hours) that a certificate status can remain on a BlackBerry® device before it
should be updated in the key store on the BlackBerry device and in the certificate synchronization tool of the BlackBerry® Desktop
Manager. The permitted range is 1 through 4380 hours.
Default value
The default value is a null value. The certificate status can remain on the BlackBerry device indefinitely.
Minimum requirements
•
Java® based BlackBerry device
Policy Reference Guide
Security policy group
168
