Blackbe;rry ENTERPRISE SOLUTION SECURITY - - POLICY User manual

Policy Reference Guide
BlackBerry Enterprise Server Policy Reference Guide
Version 33
Version: 4.1 | Service Pack: 6

SWDT323212-469781-0930122421-001

Contents
1IT policy rules....................................................................................................................................................................... 15
Using the BlackBerry Professional Software........................................................................................................................... 15
New IT policy rules in this release............................................................................................................................................ 15
Policy precedence on the BlackBerry device.......................................................................................................................... 16
Understanding IT policy rule names and policy group names............................................................................................. 16
Setting IT policy rules................................................................................................................................................................. 16
Where to find descriptions of Wi-Fi IT policy rules................................................................................................................. 17
Using IT policy rules on other devices...................................................................................................................................... 17
Importing IT policy rules without the required minimum BlackBerry Enterprise Server software................................. 17
2 Descriptions of IT policy rules.......................................................................................................................................... 19
Application Center policy group............................................................................................................................................... 19
Disable Application Center IT policy rule............................................................................................................................ 19
Disable Carrier Directory IT policy rule................................................................................................................................ 19
BlackBerry MDS Integration Service policy group................................................................................................................. 20
Disable Activation With Public BlackBerry MDS Integration Service IT policy rule..................................................... 20
Disable MDS Runtime IT policy rule..................................................................................................................................... 20
Disable User-Initiated Activation With Public BlackBerry MDS Integration Service IT policy rule........................... 20
Lowest BlackBerry MDS Integration Service Security Version Allowed IT policy rule................................................. 21
Verify BlackBerry MDS Integration Service Certificate IT policy rule............................................................................. 21
BlackBerry Messenger policy group......................................................................................................................................... 22
Disable BlackBerry Messenger IT policy rule...................................................................................................................... 22
Disallow Forwarding Of Contacts IT policy rule................................................................................................................. 22
Messenger Audit Email Address IT policy rule.................................................................................................................... 23
Messenger Audit Max Report Interval IT policy rule.......................................................................................................... 23
Messenger Audit Report Interval IT policy rule.................................................................................................................. 23
Messenger Audit UID IT policy rule...................................................................................................................................... 24
BlackBerry Smart Card Reader policy group........................................................................................................................... 24
Disable Auto Reconnect To BlackBerry Smart Card Reader IT policy rule..................................................................... 24
Force Erase All Keys on BlackBerry Disconnect Timeout IT policy rule.......................................................................... 25
Force Erase Key on PC Standby IT policy rule.................................................................................................................... 25
Maximum BlackBerry Disconnected Timeout IT policy rule............................................................................................. 26
Maximum BlackBerry Bluetooth Traffic Inactivity Timeout IT policy rule...................................................................... 26
Maximum BlackBerry Long Term Timeout IT policy rule................................................................................................... 27

Maximum Bluetooth Encryption Key Regeneration Period IT policy rule...................................................................... 28
Maximum Bluetooth Range IT policy rule............................................................................................................................ 28
Maximum Connection Heartbeat Period IT policy rule..................................................................................................... 29
Maximum Number of BlackBerry Transactions IT policy rule.......................................................................................... 30
Maximum Number of PC Pairings IT policy rule................................................................................................................. 30
Maximum PC Bluetooth Traffic Inactivity Timeout IT policy rule.................................................................................... 31
Maximum Number of PC Transactions IT policy rule......................................................................................................... 31
Maximum PC Disconnected Timeout IT policy rule........................................................................................................... 32
Maximum PC Long Term Timeout IT policy rule................................................................................................................. 32
Maximum Smart Card Not Present Timeout IT policy rule............................................................................................... 33
BlackBerry Unite! policy group................................................................................................................................................. 34
Disable Download Manager IT policy rule........................................................................................................................... 34
Disable Unite! Applications IT policy rule........................................................................................................................... 34
Bluetooth policy group............................................................................................................................................................... 34
Allow Outgoing Calls IT policy rule...................................................................................................................................... 34
Disable Address Book Transfer IT policy rule...................................................................................................................... 35
Disable Advanced Audio Distribution Profile IT policy rule.............................................................................................. 35
Disable Audio/Video Remote Control Profile IT policy rule............................................................................................. 36
Disable Bluetooth IT policy rule............................................................................................................................................ 36
Disable Desktop Connectivity IT policy rule....................................................................................................................... 36
Disable Dial-Up Networking IT policy rule......................................................................................................................... 37
Disable Discoverable Mode IT policy rule............................................................................................................................ 37
Disable File Transfer IT policy rule....................................................................................................................................... 37
Disable Handsfree Profile IT policy rule.............................................................................................................................. 38
Disable Headset Profile IT policy rule.................................................................................................................................. 38
Disable Pairing IT policy rule................................................................................................................................................. 39
Disable Serial Port Profile IT policy rule.............................................................................................................................. 39
Disable SIM Access Profile IT policy rule............................................................................................................................. 40
Disable Wireless Bypass IT policy rule................................................................................................................................. 40
Force CHAP Authentication on Bluetooth Link IT Policy rule.......................................................................................... 40
Limit Discoverable Time IT policy rule................................................................................................................................. 41
Minimum Encryption Key Length IT policy rule.................................................................................................................. 41
Require Encryption IT policy rule.......................................................................................................................................... 41
Require LED Connection Indicator IT policy rule............................................................................................................... 42
Require Password for Discoverable Mode IT policy rule................................................................................................... 42

Require Password for Enabling Bluetooth Support IT policy rule.................................................................................... 43
Browser policy group.................................................................................................................................................................. 43
Allow Application Download Services IT policy rule.......................................................................................................... 43
Allow Hotspot Browser IT policy rule................................................................................................................................... 44
Allow IBS Browser IT policy rule............................................................................................................................................ 44
Disable Auto Synchronization in Browser IT policy rule................................................................................................... 44
Disable JavaScript in Browser IT policy rule........................................................................................................................ 45
Download Images URL IT policy rule................................................................................................................................... 45
Download Themes URL IT policy rule................................................................................................................................... 45
Download Tunes URL IT policy rule...................................................................................................................................... 46
MDS Browser BSM Enabled IT policy rule........................................................................................................................... 46
MDS Browser Domains IT policy rule................................................................................................................................... 47
MDS Browser HTML Tables Enabled IT policy rule............................................................................................................ 47
MDS Browser JavaScript Enabled IT policy rule................................................................................................................. 47
MDS Browser Style Sheets Enabled IT policy rule.............................................................................................................. 48
MDS Browser Title IT policy rule........................................................................................................................................... 48
MDS Browser Use Separate Icon IT policy rule.................................................................................................................. 49
Camera policy group................................................................................................................................................................... 49
Disable Photo Camera IT policy rule.................................................................................................................................... 49
Disable Video Camera IT policy rule..................................................................................................................................... 49
Certificate Synchronization policy group................................................................................................................................ 50
Random Source URL IT policy rule....................................................................................................................................... 50
User Can Disable Automatic RNG Initialization IT policy rule......................................................................................... 50
Common policy group................................................................................................................................................................. 51
BlackBerry Server Version IT policy rule.............................................................................................................................. 51
Confirm On Send IT policy rule............................................................................................................................................. 51
Disable Kodiak PTT IT policy rule.......................................................................................................................................... 52
Disable MMS IT policy rule.................................................................................................................................................... 52
Disable Voice-Activated Dialing IT policy rule................................................................................................................... 53
Disable Voice Note Recording IT policy rule....................................................................................................................... 53
IT Policy Notification IT policy rule....................................................................................................................................... 53
Lock Owner Info IT policy rule............................................................................................................................................... 54
Set Owner Info IT policy rule................................................................................................................................................. 55
Set Owner Name IT policy rule............................................................................................................................................. 55
Desktop Only items..................................................................................................................................................................... 56

Auto Backup Enabled IT policy rule...................................................................................................................................... 56
Auto Backup Exclude Messages IT policy rule.................................................................................................................... 56
Auto Backup Exclude Sync IT policy rule............................................................................................................................. 57
Auto Backup Frequency IT policy rule.................................................................................................................................. 57
Auto Backup Include All IT policy rule................................................................................................................................. 58
Disable Wireless Calendar IT policy rule.............................................................................................................................. 59
Do Not Save Sent Messages IT policy rule.......................................................................................................................... 59
Force Load Count IT policy rule............................................................................................................................................. 60
Force Load Message IT policy rule........................................................................................................................................ 60
Forward Messages In Cradle IT policy rule.......................................................................................................................... 61
Message Conflict Mailbox Wins IT policy rule..................................................................................................................... 61
Message Prompt IT policy rule.............................................................................................................................................. 62
Show Application Loader IT policy rule................................................................................................................................ 62
Show Web Link IT policy rule................................................................................................................................................. 63
Synchronize Messages Instead Of Importing IT policy rule............................................................................................. 63
Web Link Label IT policy rule................................................................................................................................................. 64
Web Link URL IT policy rule................................................................................................................................................... 64
Desktop policy group.................................................................................................................................................................. 65
Desktop Allow Desktop Add-ins IT policy rule................................................................................................................... 65
Desktop Allow Device Switch IT policy rule........................................................................................................................ 65
Desktop Password Cache Timeout IT policy rule................................................................................................................ 66
Disable Check For Updates Link IT policy rule................................................................................................................... 67
Disable Media Manager IT policy rule................................................................................................................................. 67
Override Check For Updates URL IT policy rule................................................................................................................. 67
Device IOT Application policy group........................................................................................................................................ 68
Device Diagnostic App Disable IT policy rule..................................................................................................................... 68
Set Diagnostic Report Email Address IT policy rule........................................................................................................... 68
Set Diagnostic Report PIN Address IT policy rule.............................................................................................................. 68
Device Only Items....................................................................................................................................................................... 69
Allow BCC Recipients IT policy rule...................................................................................................................................... 69
Allow Peer-to-Peer Messages IT policy rule....................................................................................................................... 69
Allow SMS IT policy rule......................................................................................................................................................... 70
Default Browser Config UID IT policy rule.......................................................................................................................... 71
Enable Long-Term Timeout IT policy rule............................................................................................................................ 71
Enable WAP Config IT policy rule.......................................................................................................................................... 72

Home Page Address IT policy rule........................................................................................................................................ 73
Maximum Password Age IT policy rule................................................................................................................................ 73
Home Page Address Is Read-Only IT policy rule................................................................................................................ 74
Maximum Security Timeout IT policy rule........................................................................................................................... 74
Minimum Password Length IT policy rule............................................................................................................................ 75
Password Pattern Checks IT policy rule............................................................................................................................... 76
Password Required IT policy rule.......................................................................................................................................... 76
User Can Change Timeout IT policy rule............................................................................................................................. 77
User Can Disable Password IT policy rule........................................................................................................................... 77
Documents To Go policy group................................................................................................................................................. 78
Disable Documents To Go IT policy rule.............................................................................................................................. 78
Hide Documents To Go Communication Menus IT policy rule......................................................................................... 78
Hide Documents To Go Premium Feature Menus IT policy rule...................................................................................... 79
Email Messaging policy group................................................................................................................................................... 79
Allow Auto Attachment Download IT policy rule............................................................................................................... 79
Attachment Viewing IT policy rule....................................................................................................................................... 80
Disable Form Submission IT policy rule............................................................................................................................... 80
Disable Manual Download of External Images IT policy rule........................................................................................... 81
Disable Notes Native Encryption Forward And Reply IT policy rule............................................................................... 81
Disable Rich Content Email IT policy rule........................................................................................................................... 82
Enable Wireless Message Reconciliation IT policy rule..................................................................................................... 82
Inline Content Requests IT policy rule................................................................................................................................. 83
Keep Message Duration IT policy rule................................................................................................................................. 83
Keep Saved Message Duration IT policy rule...................................................................................................................... 83
Maximum Native Attachment MFH attachment size IT policy rule................................................................................. 84
Maximum Native Attachment MFH total attachment size IT policy rule....................................................................... 84
Notes Native Encryption Password Timeout IT policy rule............................................................................................... 85
Prepend Disclaimer IT policy rule......................................................................................................................................... 85
Maximum Native Attachment MTH attachment size........................................................................................................ 85
Enterprise Voice Client policy group........................................................................................................................................ 86
Disable DTMF Fallback IT policy rule................................................................................................................................... 86
Disable Enterprise Voice Client IT policy rule..................................................................................................................... 86
Lock Outgoing Line IT policy rules....................................................................................................................................... 87
Reject Non-Enterprise Voice Calls IT policy rule................................................................................................................ 87
Firewall policy group................................................................................................................................................................... 87

Restrict Incoming Cellular Calls IT policy rule.................................................................................................................... 87
Restrict Outgoing Cellular Calls IT policy rule................................................................................................................... 88
Global items................................................................................................................................................................................. 89
Allow Browser IT policy rule................................................................................................................................................... 89
Allow Phone IT policy rule...................................................................................................................................................... 89
Auto Signature IT policy rule................................................................................................................................................. 90
Instant Messaging policy group................................................................................................................................................ 90
Disallow File Transfer Types IT policy rule.......................................................................................................................... 90
Disable Emailing Conversation IT policy rule..................................................................................................................... 91
Disable Saving Conversation IT policy rule......................................................................................................................... 91
Location Based Services policy group...................................................................................................................................... 92
Disable BlackBerry Maps IT policy rule................................................................................................................................ 92
Enable Enterprise Location Tracking IT policy rule............................................................................................................ 92
Enterprise Location Tracking User Prompt Message IT policy rule................................................................................. 92
Enterprise Location Tracking Interval IT policy rule.......................................................................................................... 93
Memory Cleaner policy group................................................................................................................................................... 93
Force Memory Clean When Holstered IT policy rule.......................................................................................................... 93
Force Memory Clean When Idle IT policy rule.................................................................................................................... 94
Memory Cleaner Maximum Idle Time IT policy rule........................................................................................................... 94
On-Device Help policy group.................................................................................................................................................... 95
On-Device Help Links IT policy rule..................................................................................................................................... 95
On-Device Help Group Label IT policy rule........................................................................................................................ 95
Password policy group................................................................................................................................................................ 96
Duress Notification Address IT policy rule.......................................................................................................................... 96
Forbidden Passwords IT policy rule...................................................................................................................................... 96
Maximum Password History IT policy rule.......................................................................................................................... 97
Periodic Challenge Time IT policy rule................................................................................................................................. 97
Set Maximum Password Attempts IT policy rule................................................................................................................ 98
Set Password Timeout IT policy rule..................................................................................................................................... 99
Suppress Password Echo IT policy rule................................................................................................................................ 99
PIM Synchronization policy group............................................................................................................................................ 100
Disable Address Wireless Synchronization IT policy rule.................................................................................................. 100
Disable All Wireless Synchronization IT policy rule........................................................................................................... 100
Disable Calendar Wireless Synchronization IT policy rule................................................................................................ 101
Disable Enterprise Activation Progress IT policy rule........................................................................................................ 101

Disable Memopad Wireless Sync IT policy rule.................................................................................................................. 102
Disable Phone Call Log Wireless Synchronization IT policy rule..................................................................................... 102
Disable PIN Messages Wireless Synchronization IT policy rule....................................................................................... 102
Disable SMS Messages Wireless Sync IT policy rule.......................................................................................................... 103
Disable Task Wireless Sync IT policy rule............................................................................................................................ 103
Disable Wireless Bulk Loads IT policy rule........................................................................................................................... 104
PGP Application policy group.................................................................................................................................................... 104
PGP Allowed Content Ciphers IT policy rule....................................................................................................................... 105
PGP Allowed Encrypted Attachment Mode......................................................................................................................... 105
PGP Allowed Encryption Type IT policy rule....................................................................................................................... 106
PGP Blind Copy Address IT policy rule................................................................................................................................ 106
PGP Force Digital Signature IT policy rule.......................................................................................................................... 107
PGP Force Encrypted Messages IT policy rule.................................................................................................................... 107
PGP Minimum Strong DH Key Length IT policy rule......................................................................................................... 108
PGP Minimum Strong DSA Key Length IT policy rule....................................................................................................... 108
PGP Minimum Strong RSA Key Length IT policy rule........................................................................................................ 109
PGP Universal Enrollment Method IT policy rule............................................................................................................... 109
PGP Universal Policy Cache Timeout IT policy rule........................................................................................................... 110
PGP Universal Server Address IT policy rule....................................................................................................................... 110
RIM Value-Added Applications policy group.......................................................................................................................... 111
Disable BlackBerry Wallet IT policy rule.............................................................................................................................. 111
Disable Ecommerce Content Optimization Engine IT policy rule.................................................................................... 111
Disable Lotus Connections IT policy rule............................................................................................................................. 111
Lotus Connections Activities Server IT policy rule............................................................................................................. 112
Lotus Connections Blogs Server IT policy rule.................................................................................................................... 112
Lotus Connections Communities Server IT policy rule...................................................................................................... 113
Lotus Connections Dogear Server IT policy rule................................................................................................................. 113
Lotus Connections Profiles Server IT policy rule................................................................................................................ 113
S/MIME Application policy group............................................................................................................................................. 114
Entrust Messaging Server (EMS) Email Address IT policy rule......................................................................................... 114
S/MIME Allowed Content Ciphers IT policy rule................................................................................................................ 115
S/MIME Allowed Encrypted Attachment Mode IT policy rule.......................................................................................... 116
S/MIME Allowed Encryption Types IT policy rule.............................................................................................................. 116
S/MIME Blind Copy Address IT policy rule.......................................................................................................................... 116
S/MIME Force Digital Signature IT policy rule................................................................................................................... 117

S/MIME Force Encrypted Messages IT policy rule............................................................................................................. 117
S/MIME Force Smartcard Use IT policy rule....................................................................................................................... 118
S/MIME Minimum Strong DH Key Length IT policy rule.................................................................................................. 118
S/MIME Minimum Strong ECC Key Length IT policy rule................................................................................................. 119
S/MIME Minimum Strong DSA Key Length IT policy rule................................................................................................ 119
S/MIME Minimum Strong RSA Key Length IT policy rule................................................................................................. 119
Secure Email policy group.......................................................................................................................................................... 120
Canonical Certificate Domain Name IT policy rule............................................................................................................ 120
Disable Certificate Address Checks IT policy rule.............................................................................................................. 121
Security policy group.................................................................................................................................................................. 121
Allow External Connections IT policy rule........................................................................................................................... 121
Allow Internal Connections IT policy rule............................................................................................................................ 122
Allow Outgoing Call When Locked IT policy rule............................................................................................................... 122
Allow Resetting of Idle Timer IT policy rule......................................................................................................................... 122
Allow Screen Shot Capture IT policy rule............................................................................................................................ 123
Allow Smart Card Password Caching IT policy rule........................................................................................................... 123
Allow Split-Pipe Connections IT policy rule........................................................................................................................ 124
Allow Third Party Apps to Use Persistent Store IT policy rule.......................................................................................... 124
Allow Third Party Apps to Use Serial Port IT policy rule................................................................................................... 125
Certificate Status Maximum Expiry Time IT policy rule..................................................................................................... 125
Content Protection Strength IT policy rule......................................................................................................................... 126
Desktop Backup IT policy rule............................................................................................................................................... 126
Disable 3DES Transport Crypto IT policy rule..................................................................................................................... 127
Disable Cut/Copy/Paste IT policy rule................................................................................................................................ 127
Disable External Memory IT policy rule............................................................................................................................... 128
Disable Forwarding Between Services IT policy rule......................................................................................................... 128
Disable Geo-Tagging of Photos IT policy rule.................................................................................................................... 128
Disable GPS IT policy rule...................................................................................................................................................... 129
Disable Invalid Certificate Use IT policy rule...................................................................................................................... 129
Disable IP Modem IT policy rule............................................................................................................................................ 130
Disable Key Store Backup IT policy rule.............................................................................................................................. 130
Disable Key Store Low Security IT policy rule..................................................................................................................... 131
Disable Media Manager FTP Access..................................................................................................................................... 131
Disable Message Normal Send IT policy rule...................................................................................................................... 132
Disable Peer-to-Peer Normal Send IT policy rule.............................................................................................................. 132