Page 3
Research In Motion Limited Research In Motion UK Limited 295 Phillip Street Centrum House, 36 Station Road Waterloo, ON N2L 3W8 Egham, Surrey TW20 9LF Canada United Kingdom Published in Canada...
About the S/MIME Support Package on your BlackBerry device Install the S/MIME Support Package on your desktop computer computer 1. Verify that your BlackBerry® device is connected to your computer. Install the S/MIME Support Package on your BlackBerry device 2. On the taskbar, click Start.
Synchronization Manager Open the BlackBerry Certificate Synchronization The BlackBerry® Certificate Synchronization Manager Manager is designed to enable users of supported BlackBerry devices to obtain certificates from numerous sources, About certificate information icons download certificates to their BlackBerry device, and View certificates verify the authenticity and status of certificates.
Page 10
A selected check box indicates that the • Serial Number: This field specifies the certificate certificate is stored on the BlackBerry device. serial number in hexidecimal format. The icons in this column provide information • Certificate Source: This field specifies the display about the properties of a certificate.
Page 11
Certificates that are not selected are removed of the following fields: First Name, Last Name, from the device. Email. To set the BlackBerry Desktop Software to synchronize 5. Click Search Now. certificate information automatically, in the BlackBerry Certificate Synchronization Manager, click Options.
Page 12
Certificate extensions can include the URL of the the certificate, click Use Common Name. Certificate Authority, OCSP responder and/or a CRL location which the BlackBerry Certificate Synchronization Manager uses to check certificate Set the security level of private keys status.
Page 13
CRL Servers tab. Click Add. Perform the following actions: About Entrust digital IDs • Friendly Name: Type a name for the server. You can use Entrust® digital IDs with the BlackBerry ® • Server URL: Type the URL for the server. Certificate Synchronization Manager. The Entrust...
Page 14
If you are using an Entrust PKI, select the Use Entrust check box. Locate the entrust.ini file. The default location is C:\WINNT\system. Note: The first time that you use Entrust Entelligence™, you ® are notified that the BlackBerry Certificate Synchronization Manager extension is attempting to access Entrust. Click Yes.
1. In the device options, click Security Options. A key icon indicates that a certificate has a 2. Click Certificates. corresponding private key either on the BlackBerry® device or on a smart card. 3. Click the trackwheel.
Page 16
User Guide Supplement 4. Click Fetch Certificates. Revoke certificates (See page 18.) 5. Select a server. Send certificates (See page 16.) 6. Type certificate holder information in one or more of the First Name, Last Name, or Email fields. Send certificates 7.
Page 17
• Explicitly trusted: The certificate is trusted. Note: • Implicitly trusted: The certificate chains to a The current filter is indicated in the upper right corner certificate that is trusted on the BlackBerry® of the screen. device. • Not trusted: The certificate is not explicitly...
Page 18
5. Click Save. • Certificate Hold: The certificate is temporarily revoked, but you can reinstate by pressing Related topics Cancel Hold on the BlackBerry® device key Add certificates (See page 17.) store menu. Fetch the status of a certificate or certificate chain •...
Page 19
• Accept unverified CRLs: Specify whether to Change the key store password accept certificate status results from CRLs that cannot be verified by the BlackBerry Mobile Data 1. In the device options, click Security Options. Service. 2. Click Security Settings.
Certificate servers Contact Name Contact Add certificate servers 6. Click Email < > or PIN < Name >. Manage certificate servers 7. Click Send. Send certificate server information Related topics Add certificate servers Send certificates (See page 16.) 1. In the device options, click Security Options. Add certificate attachments to messages (See page 25.) 2.
Set encryption options to encrypt a message, click Encryption Details. Set key verification options Note: The BlackBerry Enterprise Server® might re-encrypt About S/MIME message status icons messages that are sent with a weak encryption algorithm or a digital signature. When you open a message, message status icons appear.
Page 24
The Fetch Sender’s Certificate menu item only appears Send S/MIME messages (See page 24.) if the sender’s certificate is not included in your BlackBerry® device key store or the sender’s message. Send S/MIME messages Import certificates 1. In the messages list, click the trackwheel.
Page 25
5: S/MIME messages Add certificate attachments to 5. Click the trackwheel. messages 6. Click Save. 1. When composing a message, click the trackwheel. Related topics 2. Click Attach Certificates. Set key verification options (See page 25.) 3. Click a certificate. Send S/MIME messages (See page 24.) Related topic Set encryption options...
Page 26
User Guide Supplement MIME messages, set the Verify Keys Before Use field to No. 4. Click the trackwheel. 5. Click Save. Related topics Set encryption options (See page 25.) Send S/MIME messages (See page 24.)
Search Search for signed messages Search for encrypted messages Search for signed messages 1. In the search program, in the Text field, type text to search for. 2. In the Name field, type a contact name to search for. 3. Select the Messages check box. 4.
Related topics About memory cleaning (See page 29.) About memory cleaning Clean memory (See page 29.) The memory cleaning program on the BlackBerry® device is designed to delete sensitive content from Clean memory memory. In the device options, click Security Options. Click The device memory is designed to be cleaned Memory Cleaning.
Password field, type your device password. In the Certificates and private keys are stored on smart cards. Enter Authenticator Password field, type your user Certificates can be imported to your BlackBerry® authenticator password. device key store, but private keys can only be stored on smart cards.
Page 34
User Guide Supplement and use of Third Party Information with RIM's products and services may require one or more patent, trademark or copyright licenses in order to avoid infringement of the intellectual property rights of others. Any dealings with Third Party Information, including, without limitation, compliance with applicable licenses and terms and conditions, are solely between you and the third party.
Need help?
Do you have a question about the S-MIME SUPPORT PACKAGE VERSION 4.1 and is the answer not in the manual?
Questions and answers