Configuring Security Options; How The Blackberry Enterprise Solution Encrypts Data On The Transport Layer; Symmetric Key Encryption Algorithms That The Blackberry Enterprise Solution Uses; Change The Encryption Type - Blackberry PRD-10459-035 - Enterprise Server For MDS Administration Manual

Administration Guide

Configuring security options

How the BlackBerry Enterprise Solution encrypts data on the transport layer

The BlackBerry® Enterprise Solution uses a symmetric key encryption algorithm (Triple DES or AES) to protect all data that the
BlackBerry® Enterprise Server and a BlackBerry device send between them.
The BlackBerry Enterprise Solution uses the symmetric key encryption algorithm to create message keys and master encryption
keys, and uses those encryption keys to encrypt all data that the BlackBerry device sends or receives, while the data travels
between the BlackBerry device and the BlackBerry Enterprise Server.
This data encryption process occurs automatically and is designed to verify that a message that a user sends from a BlackBerry
device, which is outside the organization's firewall, remains protected on the transport layer until the BlackBerry Enterprise Server
receives the message.

Symmetric key encryption algorithms that the BlackBerry Enterprise Solution uses

Encryption type
AES

Change the encryption type

1. In the BlackBerry® Manager, in the left pane, click a BlackBerry® Enterprise Server.
2. On the Server Configuration tab, click Edit Properties.
3. Click General.
4. In the Security section, click Encryption Algorithm.
12
Description
• uses the AES algorithm to encrypt and decrypt all of the data that the
BlackBerry Enterprise Server and BlackBerry devices that are associated with
the BlackBerry Enterprise Server send between each other
• designed to use a longer encryption key to provide a better combination of
security and performance than Triple DES
• designed to protect user data and encryption keys from traditional attacks and
side-channel attacks
• requires BlackBerry® Desktop Software version 4.0 or later and BlackBerry®
Device Software version 4.0 or later
Configuring security options
2