User Guide

If your device is associated with a CRL or an OCSP server, when you add recipients to an encrypted message, your device
tries to retrieve a certificate status for each recipient. You are unable to send the message until certificate statuses are
received for all recipients. If certificates can't be found or are invalid, the recipients' names appear as red.
Set up S/MIME-protected messaging
You need to store a private key and certificate on your BlackBerry device to send digitally signed or encrypted email
messages using S/MIME-protected messaging. You can store a key and certificate by importing the files from a work email
message or a media card.
If you have a work email account that is supported by an EMM solution from BlackBerry and a personal Microsoft Exchange
ActiveSync account, when you import a certificate from the personal space on your device, you can store it in the keystore
in your work or personal space.
Your BlackBerry device supports keys and certificates in the following file formats and file name extensions:
PEM (.pem, .cer)
DER (.der, .cer)
PFX (.pfx, .p12)
1. Open a work email message with a certificate attachment.
2.
Tap .
3. If necessary, enter the password.
4. Tap Import or Import All.
5.
Tap .
6.
In the BlackBerry Hub, tap > > Email Accounts.
7. Tap an account.
8. Tap Secure Email Settings.
9. If necessary, tap the S/MIME tab.
10. Turn on the S/MIME switch.
11. Under Signing Certificate, in the drop-down list, tap the certificate that you imported.
12. Under Encryption Certificate, in the drop-down list, tap the certificate that you imported.
Set up PGP protected messaging
If you use a work account that supports PGP protected messages, you can digitally sign, encrypt, or sign and encrypt
messages using PGP protection. You need to store the recipient's public key on your BlackBerry device to send encrypted
email messages. You need to store your private key on your device to send digitally signed email messages.
Your device supports keys in the following formats and file name extensions:
PEM (.pem, .cer)
ASC (.asc)
User Guide BlackBerry Hub and email
76