Blackberry PGP User Manual

PGP Support Package for BlackBerry Devices

User Guide Supplement

BlackBerry 8707h Smartphone

PGP Support Package for BlackBerry Devices User Guide Supplement

Last modified: 28 June 2007

Document ID: 12063712-001

At the time of publication, this documentation is based on PGP Support Package for BlackBerry devices Version 4.2.2.

Send us your comments on product documentation: https://www.blackberry.com/DocsFeedback.

©2007 Research In Motion Limited. All Rights Reserved. The BlackBerry and RIM families of related marks, images, and symbols are the exclusive properties of Research In Motion Limited. RIM, Research In Motion, BlackBerry, “Always On, Always Connected” and the “envelope in motion” symbol are registered with the U.S. Patent and Trademark Office and may be pending or registered in other countries.

PGP is a registered trademark of PGP Corporation in the United States and other countries. All other brands, product names, company names, trademarks and service marks are the properties of their respective owners.

The BlackBerry device and/or associated software are protected by copyright, international treaties, and various patents, including one or more of the following U.S. patents: 6,278,442; 6,271,605; 6,219,694; 6,075,470; 6,073,318; D445,428; D433,460; D416,256. Other patents are registered or pending in various countries around the world. Visit www.rim.com/patents for a list of RIM [as hereinafter defined] patents.

This document is provided “as is” and Research In Motion Limited and its affiliated companies (“RIM”) assume no responsibility for any typographical, technical, or other inaccuracies in this document. In order to protect RIM proprietary and confidential information and/or trade secrets, this document may describe some aspects of RIM technology in generalized terms. RIM reserves the right to periodically change information that is contained in this document; however, RIM makes no commitment to provide any such changes, updates, enhancements, or other additions to this document to you in a timely manner or at all. RIM MAKES NO REPRESENTATIONS, WARRANTIES, CONDITIONS, OR COVENANTS, EITHER EXPRESS OR IMPLIED (INCLUDING WITHOUT LIMITATION, ANY EXPRESS OR IMPLIED WARRANTIES OR CONDITIONS OF FITNESS FOR A PARTICULAR PURPOSE, NON-INFRINGEMENT, MERCHANTABILITY, DURABILITY, TITLE, OR RELATED TO THE PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE REFERENCED HEREIN OR PERFORMANCE OF ANY SERVICES REFERENCED HEREIN). IN CONNECTION WITH YOUR USE OF THIS DOCUMENTATION, NEITHER RIM NOR ITS RESPECTIVE DIRECTORS, OFFICERS, EMPLOYEES, OR CONSULTANTS SHALL BE LIABLE TO YOU FOR ANY DAMAGES WHATSOEVER BE THEY DIRECT, ECONOMIC, COMMERCIAL, SPECIAL, CONSEQUENTIAL, INCIDENTAL, EXEMPLARY, OR INDIRECT DAMAGES, EVEN IF RIM HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES, INCLUDING WITHOUT LIMITATION, LOSS OF BUSINESS REVENUE OR EARNINGS, LOST DATA, DAMAGES CAUSED BY DELAYS, LOST PROFITS, OR A FAILURE TO REALIZE EXPECTED SAVINGS.

This document might contain references to third-party sources of information, hardware or software, products or services and/or third-party web sites (collectively the “Third-Party Information”). RIM does not control, and is not responsible for, any Third-Party Information, including, without limitation the content, accuracy, copyright compliance, compatibility, performance, trustworthiness, legality, decency, links, or any other aspect of Third-Party Information. The inclusion of Third-Party Information in this document does not imply endorsement by RIM of the Third-Party Information or the third-party in any way. Installation and use of Third-Party Information with RIM's products and services may require one or more patent, trademark, or copyright licenses in order to avoid infringement of the intellectual property rights of others. Any dealings with Third-Party Information, including, without limitation, compliance with applicable licenses and terms and conditions, are solely between you and the

third-party. You are solely responsible for determining whether such third-party licenses are required and are responsible for acquiring any such licenses relating to Third-Party Information. To the extent that such intellectual property licenses may be required, RIM expressly recommends that you do not install or use Third-Party Information until all such applicable licenses have been acquired by you or on your behalf. Your use of Third-Party Information shall be governed by and subject to you agreeing to the terms of the Third-Party Information licenses. Any Third-Party Information that is provided with RIM's products and services is provided “as is”. RIM makes no representation, warranty or guarantee whatsoever in relation to the Third-Party Information and RIM assumes no liability whatsoever in relation to the Third-Party Information even if RIM has been advised of the possibility of such damages or can anticipate such damages.

Research In Motion Limited	Research In Motion UK Limited
295 Phillip Street	200 Bath Road
Waterloo, ON N2L 3W8	Slough, Berkshire SL1 3XE
Canada	United Kingdom
Published in Canada

Contents
1	PGP Support Package for BlackBerry devices installation	.................................................................................7
2	PGP keys....................................................................................................................................................................	9
3	Certificate servers ...................................................................................................................................................	17
4	PGP messages..........................................................................................................................................................	19
5	Memory cleaning....................................................................................................................................................	27
6	Legal notice .............................................................................................................................................................	29

1

PGP Support Package for BlackBerry devices installation

About the PGP Support Package for BlackBerry devices

PGP Support Package for BlackBerry devices prerequisites

Install the PGP Support Package for BlackBerry devices on your computer

Install the PGP Support Package for BlackBerry devices on your BlackBerry device

Enroll with the PGP Universal Server

•Verify that you have installed and configured the PGP Universal™ Satellite or PGP Desktop client on your computer. Refer to the PGP documentation to determine the correct version for your configuration.

•Verify that you have obtained the installer for the PGP Support Package for BlackBerry devices from PGP Corporation or an authorized PGP reseller.

•Verify that your BlackBerry Enterprise Server supports the PGP Support Package for BlackBerry devices.

About the PGP Support Package for BlackBerry devices

The PGP® Support Package for BlackBerry devices is designed to permit you to send PGP messages from— and receive PGP messages on—your BlackBerry® device, if you are already sending PGP messages from and receiving PGP messages on your computer. The PGP Support Package for BlackBerry devices supports OpenPGP messages and, if your BlackBerry device is integrated with an account that uses BlackBerry Enterprise Server Version 4.1.2 or later, PGP/MIME messages.

PGP Support Package for BlackBerry devices prerequisites

•Verify that you have installed the BlackBerry® Desktop Software on your computer. The installer for the PGP® Support Package for BlackBerry devices uses components from the BlackBerry Device Software.

Install the PGP Support Package for BlackBerry devices on your computer

1.Double-click the installer for the PGP® Support Package for BlackBerry® devices.

2.Complete the instructions on the screen.

Install the PGP Support Package for BlackBerry devices on your BlackBerry device

1.Connect your BlackBerry® device to your computer.

2.On the taskbar, click Start > Programs > BlackBerry > Desktop Manager.

3.Double-click the Application Loader icon.

4.Click Next.

5.Select the BlackBerry PGP Support Package check box.

User Guide Supplement

6.Click Next.

7.Click Finish.

Enroll with the PGP Universal Server

1.After your BlackBerry® device has completed enterprise activation, at the prompt, click Enroll Now.

2.Type your email address or domain login information.

3.Click OK.

4.Click OK again.

5.To download PGP keys from the PGP Universal™ Server, click Yes.

6.Type the pass phrase to decrypt your private key.

7.Click OK.

Related topic

Legal notice (See page 29.)

8

2

PGP keys

About PGP keys

About PGP key icons

Download a personal PGP key from the PGP Universal Server

Download another person’s PGP key

Find PGP key information

Find PGP subkey information

PGP key information fields

Check the status of a PGP key

Download an updated PGP key

Set a PGP key to trusted

Set a PGP key to not trusted

Send a PGP key to a contact

Set options for checking the status of a PGP key

Use the common name when adding a PGP key to the key store

Change the display name for a PGP key

Revoke a PGP key

Revocation reasons

Delete a PGP key

Add a contact when adding a PGP key to the key store Set the service used to download PGP keys

About the key store

Change the key store password

Set how long your key store password is remembered Set how frequently the revocation status is refreshed

Do not back up or restore items in the key store

Shortcuts for viewing PGP key information in the PGP Keys screen

PGP key troubleshooting

About PGP keys

A PGP® key might contain several cryptographic keys, including a parent key to verify signatures and one or more subkeys to encrypt messages. PGP keys are generated in pairs, with a public key and a private key.

A PGP public key binds the identity and the public cryptographic information of the PGP public key user. A PGP public key is required to verify and encrypt messages. PGP public keys are shared and are accessible by both message senders and recipients.

A PGP private key is required to sign and decrypt messages. Private key information is never publicly available.

You can generate a PGP key using the PGP Universal™ Server or PGP Desktop client. If you generate the PGP key using the PGP Universal Server, the PGP Universal Server signs the key to verify that the key is trusted.

A PGP key might also contain an X.509 certificate, which is used to verify and encrypt Secure Multipurpose Internet Mail Extensions (S/MIME) messages. If you use the PGP Universal Server and you have installed the S/MIME Support Package for BlackBerry devices, you can use these certificates to send and receive S/MIME messages through the PGP Universal Server. Certificates that you obtain from PGP keys are stored in the key store and appear in the Certificates screen.