Extending Messaging Security Using Pgp Encryption; Extending Messaging Security Using S/Mime Encryption - Blackberry PRD-10459-003 - Enterprise Server For IBM Lotus Domino Administration Manual

Administration Guide
forwards the message to the email applications of recipients. To extend messaging security, the sender and recipient
must install highly secure messaging technology on the computers that host the email applications and on their
BlackBerry devices, and you must configure the BlackBerry devices to use the highly secure messaging technology.

Extending messaging security using PGP encryption

You can extend messaging security for the BlackBerry® Enterprise Solution and permit a BlackBerry device user to
send and receive PGP® protected email messages and PGP protected PIN messages on a BlackBerry device. The
BlackBerry Enterprise Solution supports the OpenPGP format and PGP/MIME format on the BlackBerry device.
To extend messaging security, you must instruct the BlackBerry device user to install the PGP® Support Package for
BlackBerry® smartphones on the BlackBerry device and to transfer the PGP private key of the BlackBerry device user
to the BlackBerry device. The BlackBerry device user can use the PGP private key to digitally sign, encrypt, and send
PGP protected messages from the BlackBerry device. If a BlackBerry device user does not install the PGP Support
Package for BlackBerry smartphones, the BlackBerry device displays an error message when the BlackBerry device
user tries to open PGP protected messages.
To require the BlackBerry device user to use PGP encryption when forwarding or replying to messages, you can
configure the PGP Force Digital Signature IT policy rule and the PGP Force Encrypted Messages IT policy rule.
The PGP Support Package for BlackBerry smartphones is designed to support encoding and decoding Unicode
messages and permits PGP encryption using keys or passwords. The PGP Support Package for BlackBerry smartphones
permits the BlackBerry device to encrypt PGP protected email messages or PGP protected PIN messages using a
password that the sender and recipient both know.
For more information about the OpenPGP format, see RFC 2440. For more information about the PGP/MIME format,
see RFC 3156.
Configure the BlackBerry Enterprise Solution to support PGP encryption
1. Configure the PGP Universal Server Address IT policy rule in the IT policy that you assign to BlackBerry® device
users.
2. Instruct users to install the PGP® Support Package for BlackBerry® smartphones on BlackBerry devices.
3. Instruct users to enroll with the PGP® Universal Server when the BlackBerry devices prompt them to so that the
BlackBerry devices can process PGP protected messages.

Extending messaging security using S/MIME encryption

You can extend messaging security for the BlackBerry® Enterprise Solution and permit a BlackBerry device user to
send and receive S/MIME-protected email messages and S/MIME-protected PIN messages on a BlackBerry device.
To extend messaging security, you or the BlackBerry device user must install the S/MIME Support Package for
BlackBerry® smartphones on the BlackBerry device and transfer the S/MIME private key of the BlackBerry device
user to the BlackBerry device. The S/MIME Support Package for BlackBerry smartphones is designed to work with
email applications such as Microsoft® Outlook®, Microsoft Outlook Express, and IBM® Lotus Notes®, and with PKIs
such as Netscape®, Entrust Authority™ Security Manager version 5 and later, and Microsoft certification authorities.
54
Extending messaging security to a BlackBerry device