Blackberry ENTERPRISE SOLUTION ERASING FI, Обзор

Страница: 8 / 10

6 Erasing file systems on BlackBerry devices
IT policy rule Description
Secure Wipe if Low Battery Set this IT policy rule to require that, if the BlackBerry device battery power
is insufficient to receive IT policy updates or IT administration commands,
the BlackBerry device permanently deletes its user and application data.
Resetting a BlackBerry device to factory default settings
The BlackBerry Enterprise Server administrator can use the Remote Wipe Reset to Factory Defaults IT policy rule
to require the BlackBerry device to return to factory default settings when it receives the Erase Data and Disable
Handheld IT administration command over the wireless network. When the BlackBerry Enterprise Server
administrator sets this rule to True and sends the Erase Data and Disable Handheld IT administration command
to the BlackBerry device from the BlackBerry Manager, or the BlackBerry Enterprise Server administrator clicks
Nuke Handheld
in the BlackBerry Manager, the BlackBerry device reverts to its factory default settings and
permanently deletes all of the following items:
•
user data
•
corporate PIN-to-PIN encryption key
•
master encryption key
•
smart card binding information
•
password history
•
stored BlackBerry MDS device policy
•
record of time elapsed since the BlackBerry device was last turned on
•
stored IT policy
•
third-party applications and application data
When the BlackBerry device reverts to its factory default settings, it overwrites BlackBerry device internal
memory and, if content protection is turned on, performs a scrub of BlackBerry device memory.
Unbinding the smart card from the BlackBerry device
When the BlackBerry Enterprise Server administrator or the user starts a BlackBerry device wipe, causing the
BlackBerry device to erase its stored user and application data, the BlackBerry device permanently deletes the
smart card binding information from the NV store so that a user can authenticate with the BlackBerry device
using a new smart card.
The BlackBerry Enterprise Server administrator can permanently delete the smart card binding information from
the BlackBerry device manually in the following ways.
•
Send the Erase Data and Disable Handheld IT administration command to the BlackBerry device to
permanently delete the binding between a user’s current smart card and the BlackBerry device.
•
When the user turns off two-factor authentication, the BlackBerry device turns off two-factor authentication
with the installed smart card and permanently deletes the smart card binding information from the
BlackBerry device.
©
2008 Research In Motion Limited. All rights reserved. www.blackberry.com