Blackberry ENTERPRISE SOLUTION ERASING FI, Обзор

Страница: 6 / 10

4 Erasing file systems on BlackBerry devices
Types of remote BlackBerry device wipes
The BlackBerry device wipe process is designed to delete all data in internal memory and overwrite that memory
with zeroes.
Type Description
factory default device wipe This method of removing BlackBerry device data is initiated by the
BlackBerry® Enterprise Server administrator remotely using the Remote
Wipe Reset to Factory Defaults IT policy rule. See “Resetting a BlackBerry
device to factory default settings” on page 6 for more information.
security wipe of data (standard
security wipe) This method of removing BlackBerry device data is initiated by the
BlackBerry Enterprise Server administrator remotely, or by the BlackBerry
device user locally on the BlackBerry device. See “Erasing data from
BlackBerry device memory and making the BlackBerry device unavailable”
on page 5 for more information.
security wipe of data and third-
party applications (standard
security wipe with Include third
party applications option
selected on device) This method of removing BlackBerry device data is initiated by the
BlackBerry device user locally on the BlackBerry device. The BlackBerry
Enterprise Server administrator can achieve the same result by performing
a factory default device wipe. See “Removing third-party applications
during a user-initiated security wipe” on page 5 for more information.
security wipe of data on a
content-protected device
(standard security wipe on a
content-protected device) If content protection is turned on, during a security wipe the BlackBerry
device uses a memory scrub process to overwrite the BlackBerry device
flash memory file system. The BlackBerry memory scrub process complies
with United States government requirements for clearing sensitive user
data, including
Department of Defense directive 5220.22-M and National
Institute of Standards and Technology Special Publication 800-88 .
The BlackBerry device performs the following actions, depending on the method used to wipe the internal device
memory:
BlackBerry device action Description
deletes user data The BlackBerry device permanently deletes all user data in memory.
deletes corporate PIN-to-PIN
encryption key The BlackBerry device permanently deletes its references to the corporate
peer-to-peer, or PIN-to-PIN, encryption key in memory.
deletes the master encryption
key The BlackBerry device permanently deletes its references to the master
encryption key in memory.
unbinds the smart card (if
applicable) The BlackBerry device permanently deletes the smart card binding
information from the NV store so that a user can authenticate with the
BlackBerry device using a new smart card.
unbinds the IT policy The BlackBerry device permanently deletes the IT policy public key from
its NV store so that it can receive a new IT policy and IT policy public key
from a BlackBerry Enterprise Server.
password history The BlackBerry device permanently deletes its references to past
BlackBerry device password hashes in memory.
stored BlackBerry MDS device
policy The BlackBerry device permanently deletes its BlackBerry® Mobile Data
System device policy from its NV store.
deletes stored IT policy The BlackBerry device permanently deletes its stored IT policy.
deletes third-party applications The BlackBerry device permanently deletes all third-party applications
stored on the BlackBerry device.
©
2008 Research In Motion Limited. All rights reserved. www.blackberry.com