background image

19

3: Certificates

Delete certificates

In the device options, click 

Security Options. 

Click

 

Certificates.

 Click a certificate. Click 

Delete.

Related topic

Revoke certificates (See page 18.)

Change the key store password

1. In the device options, click 

Security Options.

2. Click 

Security Settings.

3. Click 

Key Stores.

4. Click the trackwheel. 
5. Click 

Change Password.

6. Type your existing key store password.
7. Type a new key store password.
8. Type your new key store password again. 

Set key store options

In the device options, click 

Security Options.

 Click 

Key Stores.

 Set the following options:

Allow Key Store Backup/Restore:

 Specify 

whether you want to back up or restore 
certificates, private keys, public keys and, 
symmetric keys. 

Private Key Password Timeout:

 Set the key store 

password timeout. After a password timeout 
occurs, you must type your password to access 
private keys. 

Key Store Address Injector:

 Specify whether you 

want to add contacts from certificates to the 
address book when certificates are added to the 
BlackBerry® device key store. 

Certificate Service:

 Specify the service record for 

the corporate BlackBerry Mobile Data Service that 
is used to fetch certificates. If you are unsure 
about your service record, contact your system 
administrator.

Certificate Status Expires After:

 Specify the 

length of time that a certificate revocation status 
can be stored before it is stale. If you send an S/
MIME message with a required certificate that is 
stale, the device is designed to automatically 
attempts to fetch an updated status for the 
certificate.

Accept unverified CRLs:

 Specify whether to 

accept certificate status results from CRLs that 
cannot be verified by the BlackBerry Mobile Data 
Service. 

Related topic

Change the key store password (See page 19.)

Certificate shortcuts 

To display the certificate label, press the 

Space

 key.

To display certificate information, press the 

Enter

 key. 

To display all certificates, press the 

Alt

 key + 

A.

 

To display the Certificate Authority certificates, press 
the 

Alt

 key + 

C. 

To display the end entity certificates (for example, 
personal certificates and other people’s certificates), 
press the 

Alt

 key + 

E.

 

To display the certificate label for a certificate, press 
the 

Alt

 key + 

L.

To display personal certificates that contain private 
keys, press the 

Alt

 key + 

P.

 

To display other people’s certificates, press the 

Alt

 key 

O. 

To display root certificates, press the 

Alt

 key + 

R.

 

To display the serial number for a certificate, press the 

Alt

 key + 

S.

Summary of Contents for S-MIME SUPPORT PACKAGE VERSION 4.1 -

Page 1: ...S MIME Support Package Version 4 1 User Guide Supplement...

Page 2: ...MANCE OF ANY SOFTWARE REFERENCED HEREIN OR PERFORMANCE OF ANY SERVICES REFERENCED HEREIN IN CONNECTION WITH YOUR USE OF THIS DOCUMENTATION NEITHER RIM NOR ITS RESPECTIVE DIRECTORS OFFICERS EMPLOYEES O...

Page 3: ...Published in Canada Research In Motion Limited 295 Phillip Street Waterloo ON N2L 3W8 Canada Research In Motion UK Limited Centrum House 36 Station Road Egham Surrey TW20 9LF United Kingdom...

Page 4: ......

Page 5: ...E Support Package installation 7 2 BlackBerry Certificate Synchronization Manager 9 3 Certificates 15 4 Certificate servers 21 5 S MIME messages 23 6 Search 27 7 Memory cleaning 29 8 Smart cards 31 9...

Page 6: ......

Page 7: ...ckBerry Desktop Software installation CD into your CD drive Complete the on screen instructions In the Setup Type window select Custom In the Custom Setup window click Certificate Synchronization Sele...

Page 8: ...8 User Guide Supplement...

Page 9: ...onization Manager The BlackBerry Certificate Synchronization Manager is designed to enable users of supported BlackBerry devices to obtain certificates from numerous sources download certificates to t...

Page 10: ...l format Certificate Source This field specifies the display name of the certificate server on which the certificate resides or the Microsoft Windows store in which the certificate was found View cert...

Page 11: ...tificates each time your device is connected to your computer select the Synchronize every time the BlackBerry device is connected option Warning Verify that you have a Public Key Infrastructure PKI s...

Page 12: ...cate extension use is enabled Certificate extensions can include the URL of the Certificate Authority OCSP responder and or a CRL location which the BlackBerry Certificate Synchronization Manager uses...

Page 13: ...the following actions Friendly Name Type a name for the server Server Name Type the server name Port Type the port number of the server The default is 389 Base Query Type the base query information A...

Page 14: ...Certificate Synchronization Manager click Options On the Entrust Preferences tab If you are using an Entrust PKI select the Use Entrust check box Locate the entrust ini file The default location is C...

Page 15: ...ce or on a smart card A check mark icon indicates that a certificate chain is trusted the certificate chain revocation status is good and the certificate chain is valid A question mark icon indicates...

Page 16: ...15 Revoke certificates See page 18 Send certificates See page 16 Set certificates to untrusted In the device options click Security Options Click Certificates Click a trusted certificate Click Distrus...

Page 17: ...ficate chain information In the device options click Security Options Click a certificate Click Show Chain Note To expand or collapse certificate chain information press the Space key Related topic Vi...

Page 18: ...store password See page 19 Revoke certificates 1 In the device options click Security Options 2 Click Certificates 3 Click a certificate 4 Click Revoke 5 Click Yes 6 Select one of the following option...

Page 19: ...ice that is used to fetch certificates If you are unsure about your service record contact your system administrator Certificate Status Expires After Specify the length of time that a certificate revo...

Page 20: ...20 User Guide Supplement...

Page 21: ...Manage certificate servers In the device options click Security Options Click Certificate Servers Click a server Click one of the following menu items View Edit Delete Send certificate server informat...

Page 22: ...22 User Guide Supplement...

Page 23: ...uired to verify the digital signature Open S MIME messages In the messages list open the S MIME message Related topics Import certificates See page 24 Import certificate servers See page 24 Fetch cert...

Page 24: ...See page 21 Forward S MIME messages In an open S MIME message click the trackwheel Click Forward Note By default the forwarded message uses the same signing and encryption options as the original mes...

Page 25: ...Receipts field to Yes To make sure that a signed receipt is not requested when the message is read set the Request S MIME Receipts field to No 5 Click the trackwheel 6 Click Save Related topics Set k...

Page 26: ...26 User Guide Supplement MIME messages set the Verify Keys Before Use field to No 4 Click the trackwheel 5 Click Save Related topics Set encryption options See page 25 Send S MIME messages See page 24...

Page 27: ...ick the trackwheel 5 Click Search Search for encrypted messages 1 In the search program in the Text field type text to search for 2 In the Name field type a contact name to search for 3 Select the Mes...

Page 28: ...28 User Guide Supplement...

Page 29: ...or more of the following actions To clean the BlackBerry device memory every time the device is inserted in the holster set the Clean When Holstered to Yes To clean the device memory after the device...

Page 30: ...30 User Guide Supplement...

Page 31: ...r smart card is inserted in the smart card reader 2 In the device options click Security Options 3 Click General Settings 4 Set the User Authenticator Password field to Enabled 5 Click Save 6 Type a u...

Page 32: ...32 User Guide Supplement...

Page 33: ...dically change information that is contained in this document however RIM makes no commitment to provide any such changes updates enhancements or other additions to this document to you in a timely ma...

Page 34: ...d Party Information To the extent that such intellectual property licenses may be required RIM expressly recommends that you do not install or use Third Party Information until all such applicable lic...

Reviews: