Table of Contents
Advertisement
Policy Reference Guide
The default value is a null value.
Usage
If you configure this rule, a user can only add certificates to the trusted key store that use the thumbprints that appear in the
defined list.
The SHA-256 algorithm and SHA-512 algorithm require BlackBerry® Device Software version 5.1 or later.
Minimum requirements
•
Java® based BlackBerry device
•
BlackBerry® Application Suite version 1.0
•
BlackBerry® Connect™ version 4.0
•
BlackBerry® Device Software version 3.6
•
BlackBerry® Enterprise Server version 3.6
Exceptions
The BlackBerry® Enterprise Server for Novell® GroupWise® supports this rule in BlackBerry Device Software versions 4.0 and later.
Two Factor Content Protection Usage IT policy rule
Description
This rule specifies whether a user can turn on two-factor content protection on a BlackBerry® device.
Default value
The default value is Allowed. A user can turn on two-factor content protection on a BlackBerry device.
Usage
Two-factor content protection on the BlackBerry device is designed to protect the content protection decryption keys with both
a private key that is stored on a smart card and the BlackBerry device password.
When a user turns on two-factor content protection, the BlackBerry device requires more time to unlock than when two-factor
content protection is not turned on. To unlock the BlackBerry device, the user must have the appropriate smart card driver and
a supported driver for the smart card reader installed on the BlackBerry device.
You cannot reset the BlackBerry device password after you or a user turns on two-factor content protection.
To restore the content protection decryption keys and unlock the BlackBerry device, the user must have the smart card and must
know the BlackBerry device password and the PIN for the smart card.
Dependencies
If you change this rule to Required, the BlackBerry device can use this rule only if you also configure the Content Protection
Strength IT policy rule and change the value of the Force Smart Card Two Factor Authentication IT policy rule to Yes.
Security policy group
207
Advertisement
Table of Contents
