IT policy support
You can use the APIs in the
net.rim.device.api.itpolicy
package to access the IT policy information on the
BlackBerry® device and change the behavior or functionality of a BlackBerry device application. Each IT policy item consists of
a name, a description, and a value. The value can be a string, integer, or Boolean value.
BlackBerry device IT policy settings are automatically synchronized and updated over the wireless network with BlackBerry®
Device Software version 3.6 or later. With earlier versions of the BlackBerry Device Software, IT policy settings are updated when
the BlackBerry device user synchronizes the BlackBerry device with the computer.
For more information about IT policies, see the BlackBerry Enterprise Server Policy Reference Guide.
Application control
The BlackBerry® Enterprise Server application control policy rules are designed to allow or prevent the installation of specific
applications on the BlackBerry device and to limit the permissions of applications on the BlackBerry device. For example,
administrators can use the application control policy to make sure that a game application on the BlackBerry device cannot
access the phone application.
The administrator can apply application control policies only when the BlackBerry device is associated with a BlackBerry Enterprise
Server. If the administrator or a BlackBerry device user denies the application access to one of the protected areas, the application
throws a
ControlledAccessException
.
File encryption on microSD cards
Encryption of data on a microSD media card
When a BlackBerry® Java® Application accesses a file on the microSD memory card, file decryption occurs and the file moves to
main memory for an application to read. For a BlackBerry Java Application to access a file that is password protected, the BlackBerry
device must not be locked. Encrypted files have a .rem extension and cannot be decrypted on non-BlackBerry platforms.
If the NVRAM is removed and the microSD media card is locked with a BlackBerry device key, the data on the microSD media
card is no longer accessible. To remove data that is not accessible, start the BlackBerry device and remove all encrypted media
files.
The BlackBerry device uses a master key stored on the microSD media card to encrypt BlackBerry device media files. The master
key prevents the BlackBerry device from having to decrypt or re-encrypt all media files when you disable encryption or change
the password.
Fundamentals Guide
IT policy support
38
