Disable Unverified CRLs IT policy rule
Description
This rule specifies whether to prevent a BlackBerry® device user from accepting CRLs that are not verified on the BlackBerry
MDS Connection Service when checking the status of a certificate.
Default value
The default value is No.
Minimum requirements
•
Java® based BlackBerry device
•
BlackBerry® Application Suite version 1.0
•
BlackBerry® Device Software version 4.0
•
BlackBerry® Enterprise Server version 4.0
Disable USB Mass Storage IT policy rule
Description
This rule specifies whether a BlackBerry® device permits USB mass storage and the media transport protocol.
Default values
The default value in the Advanced security IT policy and Advanced Security with No 3rd Party Applications IT policy is Yes.
The default value in all other preconfigured IT policies is No.
Usage
The media transport protocol permits a user to transfer media files from a computer or BlackBerry® Desktop Manager to a device
or media card. If you change this rule to Yes, a device cannot access a media card that is connected to the USB port on the device.
When you transfer files using the media transport protocol, the device does not protect the files using content protection and
does not encrypt the data on the media card, even if you configure the External File System Encryption Level IT policy rule.
If you change this rule to No, a user cannot transfer media files from a Macintosh computer to a device. If you change this rule
to No, a user can view the contents of a media card from the file explorer on a device and from applications on the device.
This feature is not available for BlackBerry Desktop Manager 4.2.2 because the Roxio® Media Manager uses the media transport
protocol to transfer files.
For more information about protecting data that a device stores on a media card, see the BlackBerry Enterprise Solution Security
Technical Overview.
Minimum requirements
•
Java® based BlackBerry device
•
BlackBerry® Device Software 4.2
Policy Reference Guide
Security policy group
185
