How The Blackberry Enterprise Solution Verifies The Blackberry Device Software Upgrade Files; Battery Power Requirements For Protecting The Blackberry Device Against Attack; How A Blackberry Device Protects User Data During A Wireless Software Upgrade; Protection Of User Data On Locked Blackberry Devices - Blackberry ENTERPRISE SERVER FOR MICROSOFT EXCHANGE - ENTERPRISE SERVER WIRELESS SOFTWARE UPGRADES Administration Manual

Administration Guide
How the BlackBerry Enterprise Solution verifies the BlackBerry Device Software
upgrade files
The signing authority system that Research In Motion® provides is designed to authorize and authenticate the code of the
software upgrade package by digitally signing the software upgrade package. After the BlackBerry® device user downloads
a software upgrade package to the BlackBerry device, the BlackBerry device verifies the digital signature on the software
upgrade package before it can install the software upgrade package successfully.
The signing authority system uses code signing to authorize and authenticate the upgraded BlackBerry® Device Software
before the user can run any of the upgraded applications on the BlackBerry device.

Battery power requirements for protecting the BlackBerry device against attack

If the battery power level on a BlackBerry® device drops below the required minimum to perform a wireless software upgrade,
the BlackBerry device prompts the user to recharge the battery and start the software upgrade process again. This security
measure is designed to protect the BlackBerry device against attacks from users with malicious intent who might try to take
advantage of low battery power during a wireless software upgrade.
You can set the Secure Wipe If Low Battery IT policy rule to require that the BlackBerry device delete all user data if the
BlackBerry device has insufficient battery power to receive IT policy updates or IT administration commands.

How a BlackBerry device protects user data during a wireless software upgrade

When the content protection feature on a BlackBerry® device is turned on, the following measures to encrypt user data are
designed to take effect:
• the user must type the BlackBerry device password before the software upgrade process can back up or restore the
user data
• the BlackBerry device encrypts stored user data during the software upgrade process

Protection of user data on locked BlackBerry devices

When the content protection feature on the BlackBerry® device is turned on, the BlackBerry device is designed to protect
user data in the following ways:
• use 256-bit AES encryption to encrypt stored data
• use an ECC public key to encrypt data that the BlackBerry device receives
Protecting wireless software upgrades
11