User's Manual

Table Of Contents
Securing your email
You can digitally sign or encrypt messages if you use a work email account that supports S/MIME-protected messages or
IBM Notes email encryption on your BlackBerry device. Digitally signing or encrypting messages adds another level of
security to email messages that you send from your device.
Digital signatures are designed to help recipients verify the authenticity and integrity of messages that you send. With S/
MIME-protected messages, when you digitally sign a message using your private key, recipients use your public key to
verify that the message is from you and that the message hasn't been changed.
Encryption is designed to keep messages confidential. With S/MIME-protected messages, when you encrypt a message,
your device uses the recipient’s public key to encrypt the message. Recipients use their private key to decrypt the
message.
If your device is associated with a CRL or an OCSP server, when you add recipients to an encrypted message, your device
tries to retrieve a certificate status for each recipient. You are unable to send the message until certificate statuses are
received for all recipients. When the certificate statuses are received, the recipients' names change color, and you can
send your message.
Color Certificate Status
Blue The certificate is being retrieved, validated, or the
certificate is valid.
Red No certificate is found, or the certificate is not valid.
Purple The certificate can't be trusted, is unverified, or is
unknown.
Set up S/MIME-protected messaging
You need to store a private key and certificate on your BlackBerry device to send digitally signed or encrypted email
messages using S/MIME-protected messaging. You can store a key and certificate by importing the files from a work email
message.
Your
BlackBerry device supports keys and certificates in the following file formats and file name extensions:
PEM (.pem, .cer)
DER (.der, .cer)
PFX (.pfx, .p12)
1. Open a work email message with a certificate attachment.
2.
Touch and hold The certificate attachment icon .
3.
Tap The Import Certificate icon .
4. If necessary, enter the password.
5.
Tap The Back icon .
6.
In the BlackBerry Hub
, tap
The More icon > icon_10_3_core_settings > Secure Email.
User Guide
BlackBerry Strictly Confidential
BlackBerry Hub and email
66
STRICTLY CONFIDENTIAL