Alternatively, instead of changing the value of the Force Smart Card Two Factor Authentication IT policy rule to Yes, you can
change the value of the Force Multi Factor Authentication IT policy rule to Yes and change the Allowed Authentication Mechanisms
IT policy rule to use only a smart card user authenticator.
Minimum requirements
•
Java® based BlackBerry device
•
BlackBerry® Device Software version 5.0
•
BlackBerry® Enterprise Server version 5.0 SP1
Weak Digest Algorithms IT policy rule
Description
This rule specifies the digest algorithms that a BlackBerry® device considers weak. When a BlackBerry device sends email
messages, it uses the algorithms that it considers strong to digitally sign the messages. A BlackBerry device uses the list of weak
digest algorithms to verify the following data:
•
algorithms that are used to digitally sign messages that a BlackBerry device receives are strong enough
•
certificate chains for the certificates that are used to sign messages that a BlackBerry device receives are strong enough
Default value
By default, no algorithms are specified as weak.
Usage
Specify a list of algorithms that a BlackBerry device considers weak. This prevents a user from sending an S/MIME-encrypted or
PGP® encrypted message using a certificate or key that has a corresponding public key that is weak. You cannot specify SHA-384
and SHA-512 as weak algorithms.
Minimum requirements
•
Java® based BlackBerry device
•
BlackBerry® Device Software version 4.3
•
BlackBerry® Enterprise Server version 4.1 SP5
S/MIME Application policy group
The IT policy rules in the S/MIME Application policy group apply to BlackBerry® devices running the S/MIME Support Package
for BlackBerry smartphones. For more information about using the S/MIME Support Package for BlackBerry smartphones, see
the S/MIME Support Package for BlackBerry Devices Security Technical Overview.
Entrust Messaging Server (EMS) Email Address IT policy rule
Description
Policy Reference Guide
S/MIME Application policy group
208
