Blackbe;rry PEARL 8100 - PGP SUPPORT PACKAGE FOR DEVICES User manual

PGP Support Package for BlackBerry
Devices
User Guide Supplement
BlackBerry Pearl 8120 Smartphone
BlackBerry Pearl 8130 Smartphone

PGP Support Package for BlackBerry Devices User Guide Supplement
Last modified: 20 July 2007
Document ID: 13375966-001
At the time of publication, this documentation is based on PGP Support Package for BlackBerry devices Version
4.3.
Send us your comments on product documentation: https://www.blackberry.com/DocsFeedback.

Contents
1PGP Support Package for BlackBerry devices installation ................................................................................ 5
2PGP keys.....................................................................................................................................................................7
3Certificate servers ...................................................................................................................................................15
4PGP messages.......................................................................................................................................................... 17
5Legal notice............................................................................................................................................................. 25

1
PGP Support Package for BlackBerry devices
installation
About the PGP Support Package for BlackBerry
devices
PGP Support Package for BlackBerry devices
prerequisites
Install the PGP Support Package for BlackBerry
devices on your computer
Install the PGP Support Package for BlackBerry
devices on your BlackBerry device
Enroll with the PGP Universal Server
About the PGP Support Package for
BlackBerry devices
The PGP® Support Package for BlackBerry devices is
designed to permit you to send PGP messages from—
and receive PGP messages on—your BlackBerry®
device, if you are already sending PGP messages from
and receiving PGP messages on your computer. The
PGP Support Package for BlackBerry devices supports
OpenPGP messages and, if your BlackBerry device is
integrated with an account that uses BlackBerry
Enterprise Server Version 4.1.2 or later, PGP/MIME
messages.
PGP Support Package for BlackBerry
devices prerequisites
•Verify that you have installed the BlackBerry®
Desktop Software on your computer. The installer
for the PGP® Support Package for BlackBerry
devices uses components from the BlackBerry
Device Software.
•Verify that you have installed and configured the
PGP Universal™ Satellite or PGP Desktop client
on your computer. Refer to the PGP
documentation to determine the correct version
for your configuration.
•Verify that you have obtained the installer for the
PGP Support Package for BlackBerry devices from
PGP Corporation or an authorized PGP reseller.
•Verify that your BlackBerry Enterprise Server
supports the PGP Support Package for BlackBerry
devices.
Install the PGP Support Package for
BlackBerry devices on your computer
1. Double-click the installer for the PGP® Support
Package for BlackBerry® devices.
2. Complete the instructions on the screen.
Install the PGP Support Package for
BlackBerry devices on your
BlackBerry device
1. Connect your BlackBerry® device to your
computer.
2. On the taskbar, click Start > Programs >
BlackBerry > Desktop Manager.
3. Double-click the Application Loader icon.
4. Click Next.
5. Select the BlackBerry PGP Support Package
check box.

6
User Guide Supplement
6. Click Next.
7. Click Finish.
Enroll with the PGP Universal Server
1. After your BlackBerry® device has completed
enterprise activation, at the prompt, click Enroll
Now.
2. Type your email address or domain login
information.
3. Click OK.
4. Click OK again.
5. To download PGP keys from the PGP Universal™
Server, click Yes.
6. Type the pass phrase to decrypt your private key.
7. Click OK.
Related topic
Legal notice (See page 25.)

2
PGP keys
About PGP keys
About PGP key icons
Download a personal PGP key from the PGP Universal
Server
Download another person’s PGP key
Find PGP key information
Find PGP subkey information
PGP key information fields
Check the status of a PGP key
Download an updated PGP key
Set a PGP key to trusted
Set a PGP key to not trusted
Send a PGP key to a contact
Set options for checking the status of a PGP key
Use the common name when adding a PGP key to the
key store
Change the display name for a PGP key
Revoke a PGP key
Revocation reasons
Delete a PGP key
Add a contact when adding a PGP key to the key store
Set the service used to download PGP keys
About the key store
Change the key store password
Set how long your key store password is remembered
Set how frequently the revocation status is refreshed
Do not back up or restore items in the key store
Shortcuts for viewing PGP key information in the PGP
Keys screen
PGP key troubleshooting
About PGP keys
A PGP® key might contain several cryptographic keys,
including a parent key to verify signatures and one or
more subkeys to encrypt messages. PGP keys are
generated in pairs, with a public key and a private key.
A PGP public key binds the identity and the public
cryptographic information of the PGP public key user.
A PGP public key is required to verify and encrypt
messages. PGP public keys are shared and are
accessible by both message senders and recipients.
A PGP private key is required to sign and decrypt
messages. Private key information is never publicly
available.
You can generate a PGP key using the PGP Universal™
Server or PGP Desktop client. If you generate the PGP
key using the PGP Universal Server, the PGP Universal
Server signs the key to verify that the key is trusted.
A PGP key might also contain an X.509 certificate,
which is used to verify and encrypt Secure
Multipurpose Internet Mail Extensions (S/MIME)
messages. If you use the PGP Universal Server and you
have installed the S/MIME Support Package for
BlackBerry devices, you can use these certificates to
send and receive S/MIME messages through the PGP
Universal Server. Certificates that you obtain from
PGP keys are stored in the key store and appear in the
Certificates screen.

8
User Guide Supplement
Related topics
About PGP key icons (See page 8.)
About digital signatures and encryption (See page 17.)
About the key store (See page 12.)
About PGP key icons
The following icons indicate the status of PGP® keys
stored on your BlackBerry® device:
•Key: The PGP key has a corresponding private key
on your device.
•Check mark: The PGP key is trusted, the PGP key
revocation status is good, and the PGP key is valid.
•Question mark: The revocation status of the PGP
key is unknown or the key is weak.
•X: The PGP key is not trusted, revoked, expired,
not yet valid, or could not be verified.
Related topics
Check the status of a PGP key (See page 9.)
Download an updated PGP key (See page 9.)
Download a personal PGP key from
the PGP Universal Server
1. In the device options, click Security Options.
2. Click PGP.
3. Press the Menu key.
4. Click Download Keys.
5. Type your key store password.
6. Click OK.
7. Type the pass phrase to decrypt your private key.
8. Click OK.
Related topics
About PGP keys (See page 7.)
Send a PGP key to a contact (See page 10.)
Download another person’s PGP key
1. In the device options, click Security Options.
2. Click PGP keys.
3. Press the Menu key.
4. Click Fetch PGP Keys.
5. Select a Lightweight Directory Access Protocol
(LDAP) server.
6. Type PGP® key subject information in one or more
of the First Name, Last Name, or Email fields.
7. Press the Menu key.
8. Click Search.
9. Click a PGP key.
10. Click Add PGP Key to Key Store.
11. Type your key store password.
12. Click OK.
Notes:
A selected check box beside a PGP key indicates that
the PGP key is downloaded and stored in the key store
on your BlackBerry® device.
If you use the PGP Universal™ Server, you might not
be able to download PGP keys from an LDAP server.
Related topics
About PGP keys (See page 7.)
Set options for checking the status of a PGP key (See
page 10.)
I cannot download another person's PGP key from an
LDAP server (See page 13.)
Find PGP key information
1. In the device options, click Security Options.
2. Click PGP keys.
3. Click a PGP® key.

9
2: PGP keys
Related topics
PGP key information fields (See page 9.)
Find PGP subkey information (See page 9.)
Find PGP subkey information
1. In the device options, click Security Options.
2. Click PGP keys.
3. Click a PGP® key.
4. Click View Subkey.
Related topics
PGP key information fields (See page 9.)
Find PGP key information (See page 8.)
PGP key information fields
•Revocation Status: The status of the PGP® key at
a specified date and time.
•Trust Status: How the PGP key is trusted.
•Explicitly Trusted: The PGP key itself is
trusted.
•Implicitly Trusted: A private key on your
BlackBerry® device corresponds with the PGP
key.
•Not Trusted: The PGP key is not explicitly
trusted and does not chain to a trusted PGP
key on your device, and a chain of digital
signatures to a trusted key does not exist.
•Creation Date: The date the key was generated.
•Expiration Date: The expiration date that is set by
the PGP Universal™ Server.
•Email Address: The email address associated with
the key. Multiple Email Address fields might
appear.
•Public Key Type: The standard to which the public
key complies. Your device supports Rivest Shamir
Adleman (RSA), Digital Signature Algorithm
(DSA), and Diffie-Hellman (DH) keys.
•Key Usage: Approved uses for the key.
•Fingerprint: The PGP key fingerprint in
hexidecimal format.
Related topics
About PGP keys (See page 7.)
Find PGP key information (See page 8.)
Find PGP subkey information (See page 9.)
Check the status of a PGP key
1. In the device options, click Security Options.
2. Click PGP Keys.
3. Highlight a PGP® key.
4. Press the Menu key.
5. Click Fetch Status.
Related topics
About PGP key icons (See page 8.)
Download an updated PGP key (See page 9.)
Download an updated PGP key
1. In the device options, click Security Options.
2. Click PGP Keys.
3. Highlight a PGP® key.
4. Press the Menu key.
5. Click Fetch Updated PGP Key.
Related topics
About PGP keys (See page 7.)
About PGP key icons (See page 8.)
Check the status of a PGP key (See page 9.)

10
User Guide Supplement
Set a PGP key to trusted
1. In the device options, click Security Options.
2. Click PGP Keys.
3. Highlight an untrusted PGP® key.
4. Press the Menu key.
5. Click Trust.
Related topics
About PGP keys (See page 7.)
About PGP key icons (See page 8.)
Set a PGP key to not trusted (See page 10.)
Set a PGP key to not trusted
1. In the device options, click Security Options.
2. Click PGP Keys.
3. Highlight a trusted PGP® key.
4. Press the Menu key.
5. Click Distrust.
Related topics
About PGP keys (See page 7.)
Revoke a PGP key (See page 11.)
Delete a PGP key (See page 11.)
Send a PGP key to a contact
1. In the device options, click Security Options.
2. Click PGP Keys.
3. Highlight a PGP® key.
4. Press the Menu key.
5. Click Send via Email or Send via PIN.
Note:
When you send a PGP key, only the public key is sent
and not the private key.
Related topic
Import a PGP key from a message (See page 18.)
Set options for checking the status of
a PGP key
1. In the device options, click Security Options.
2. Click PGP keys.
3. Press the Menu key.
4. Click Fetch PGP Keys.
5. Press the Menu key.
6. Click Options.
7. Perform one of the following actions:
•To always check the status of a PGP® key
when you add it to the key store, set the Fetch
Status field to Yes.
•To be prompted to check the status of a PGP
key when you add it to the key store, set the
Fetch Status field to Prompt.
•To never check the status of a PGP key when
you add it to the key store set the Fetch
Status field to No.
8. Press the Menu key.
9. Click Save.
Related topics
About the key store (See page 12.)
Check the status of a PGP key (See page 9.)
Use the common name when adding
a PGP key to the key store
The common name is the name set for the key when it
is generated. You can use the common name as a label
for the key on your BlackBerry® device or you can set
the label to one that has more meaning to you.
1. In the device options, click Security Options.
2. Click PGP keys.