Blackbe;rry Infinity B1367WD User manual

BlackBerry Enterprise Server
Version: 5.0 | Service Pack: 2
Policy Reference Guide

Published: 2010-06-16
SWDT323212-1063796-0616124539-001

Contents
1 IT policy rules............................................................................................................................................................................... 22
Using IT policy rules on other devices.......................................................................................................................................... 22
Preconfigured IT policies................................................................................................................................................................ 22
New IT policy rules in this release................................................................................................................................................. 23
2 Descriptions of IT policy rules................................................................................................................................................... 25
Desktop Only items........................................................................................................................................................................ 25
Auto Backup Enabled IT policy rule...................................................................................................................................... 25
Auto Backup Exclude Messages IT policy rule.................................................................................................................... 25
Auto Backup Exclude Synchronization IT policy rule......................................................................................................... 26
Auto Backup Frequency IT policy rule.................................................................................................................................. 26
Auto Backup Include All IT policy rule................................................................................................................................. 27
Disable Wireless Calendar IT policy rule.............................................................................................................................. 27
Do Not Save Sent Messages IT policy rule.......................................................................................................................... 28
Force Load Count IT policy rule............................................................................................................................................ 28
Force Load Message IT policy rule........................................................................................................................................ 29
Forward Messages In Cradle IT policy rule.......................................................................................................................... 30
Message Conflict Mailbox Wins IT policy rule..................................................................................................................... 30
Message Prompt IT policy rule.............................................................................................................................................. 31
Show Application Loader IT policy rule................................................................................................................................ 31
Show Web Link IT policy rule................................................................................................................................................. 32
Synchronize Messages Instead Of Importing IT policy rule.............................................................................................. 32
Web Link Label IT policy rule................................................................................................................................................. 33
Web Link URL IT policy rule................................................................................................................................................... 33
Device Only Items........................................................................................................................................................................... 34
Allow BCC Recipients IT policy rule..................................................................................................................................... 34
Allow Peer-to-Peer Messages IT policy rule....................................................................................................................... 34
Allow SMS IT policy rule........................................................................................................................................................ 35
Default Browser Config UID IT policy rule.......................................................................................................................... 36
Enable Long-Term Timeout IT policy rule............................................................................................................................ 36
Enable WAP Config IT policy rule......................................................................................................................................... 37
Home Page Address IT policy rule........................................................................................................................................ 37
Home Page Address Is Read-Only IT policy rule................................................................................................................ 38
Maximum Password Age IT policy rule................................................................................................................................ 38

Maximum Security Timeout IT policy rule........................................................................................................................... 39
Minimum Password Length IT policy rule............................................................................................................................ 40
Password Pattern Checks IT policy rule............................................................................................................................... 40
Password Required IT policy rule.......................................................................................................................................... 41
User Can Change Timeout IT policy rule............................................................................................................................. 42
User Can Disable Password IT policy rule........................................................................................................................... 42
Global items..................................................................................................................................................................................... 43
Allow Browser IT policy rule.................................................................................................................................................. 43
Allow Phone IT policy rule..................................................................................................................................................... 44
Auto Signature IT policy rule................................................................................................................................................. 44
Application Center policy group................................................................................................................................................... 45
Disable Application Center IT policy rule............................................................................................................................ 45
Disable Carrier Directory IT policy rule................................................................................................................................ 45
BlackBerry App World policy group.............................................................................................................................................. 46
Disable App World IT policy rule........................................................................................................................................... 46
Application Restriction Rule IT policy rule.......................................................................................................................... 46
Application Restriction List IT policy rule............................................................................................................................ 47
Category Restriction Rule IT policy rule............................................................................................................................... 47
Category Restriction List IT policy rule................................................................................................................................ 48
Disable Application Purchasing IT policy rule.................................................................................................................... 48
Enable Wireless Service Provider Billing IT policy rule....................................................................................................... 49
BlackBerry Messenger policy group............................................................................................................................................. 49
Disable BlackBerry Messenger IT policy rule...................................................................................................................... 49
Disable BlackBerry Messenger Groups IT policy rule......................................................................................................... 50
Disable Check for Updates IT policy rule............................................................................................................................ 50
Disable Location Requests, Responses, and Proximity Alerts IT policy rule.................................................................... 51
Disable Server Based Contact List Synchronization IT policy rule................................................................................... 51
Disallow External Email Address for Server Registration IT policy rule........................................................................... 51
Disallow Forwarding of Contacts IT policy rule.................................................................................................................. 52
Disallow Setting a Subject on Conversations IT policy rule.............................................................................................. 52
Enforce Security Question in BlackBerry Messenger Invitation IT policy rule................................................................ 52
Messenger Audit Email Address IT policy rule.................................................................................................................... 53
Messenger Audit Max Report Interval IT policy rule.......................................................................................................... 53
Messenger Audit Report Interval IT policy rule.................................................................................................................. 54
Messenger Audit UID IT policy rule..................................................................................................................................... 54

BlackBerry Smart Card Reader policy group............................................................................................................................... 55
Disable Auto Reconnect To BlackBerry Smart Card Reader IT policy rule...................................................................... 55
Force Erase All Keys on BlackBerry Disconnected Timeout IT policy rule....................................................................... 55
Force Erase Key on PC Standby IT policy rule..................................................................................................................... 56
Maximum BlackBerry Bluetooth Traffic Inactivity Timeout IT policy rule........................................................................ 56
Maximum BlackBerry Disconnected Timeout IT policy rule.............................................................................................. 57
Maximum BlackBerry Long Term Timeout IT policy rule................................................................................................... 58
Maximum Bluetooth Encryption Key Regeneration Period IT policy rule........................................................................ 58
Maximum Bluetooth Range IT policy rule........................................................................................................................... 59
Maximum Connection Heartbeat Period IT policy rule...................................................................................................... 59
Maximum Number of BlackBerry Transactions IT policy rule........................................................................................... 60
Maximum Number of PC Pairings IT policy rule................................................................................................................. 61
Maximum Number of PC Transactions IT policy rule......................................................................................................... 61
Maximum PC Bluetooth Traffic Inactivity Timeout IT policy rule..................................................................................... 62
Maximum PC Disconnected Timeout IT policy rule............................................................................................................ 62
Maximum PC Long Term Timeout IT policy rule................................................................................................................. 63
Maximum Smart Card Not Present Timeout IT policy rule................................................................................................ 64
Minimum PIN Entry Mode IT policy rule.............................................................................................................................. 64
BlackBerry Unite! policy group..................................................................................................................................................... 65
Disable Download Manager IT policy rule........................................................................................................................... 65
Disable Unite! Applications IT policy rule........................................................................................................................... 65
Bluetooth policy group................................................................................................................................................................... 65
Allow Outgoing Calls IT policy rule...................................................................................................................................... 66
Disable Address Book Transfer IT policy rule...................................................................................................................... 66
Disable Advanced Audio Distribution Profile IT policy rule............................................................................................... 66
Disable Audio/Video Remote Control Profile IT policy rule.............................................................................................. 67
Disable Bluetooth IT policy rule............................................................................................................................................ 67
Disable Desktop Connectivity IT policy rule........................................................................................................................ 68
Disable Dial-Up Networking IT policy rule......................................................................................................................... 68
Disable Discoverable Mode IT policy rule............................................................................................................................ 68
Disable File Transfer IT policy rule....................................................................................................................................... 69
Disable Handsfree Profile IT policy rule.............................................................................................................................. 69
Disable Headset Profile IT policy rule.................................................................................................................................. 70
Disable Message Access Profile IT policy rule.................................................................................................................... 70
Disable Pairing IT policy rule................................................................................................................................................ 71

Disable Serial Port Profile IT policy rule.............................................................................................................................. 71
Disable SIM Access Profile IT policy rule............................................................................................................................. 72
Disable Wireless Bypass IT policy rule................................................................................................................................. 72
Force CHAP Authentication on Bluetooth Link IT policy rule........................................................................................... 72
Limit Discoverable Time IT policy rule................................................................................................................................. 73
Minimum Encryption Key Length IT policy rule.................................................................................................................. 73
Require Encryption IT policy rule.......................................................................................................................................... 73
Require LED Connection Indicator IT policy rule................................................................................................................ 74
Require Password for Discoverable Mode IT policy rule.................................................................................................... 74
Require Password for Enabling Bluetooth Support IT policy rule..................................................................................... 75
Browser policy group...................................................................................................................................................................... 75
Allow Application Download Services IT policy rule.......................................................................................................... 75
Allow Hotspot Browser IT policy rule................................................................................................................................... 76
Allow IBS Browser IT policy rule........................................................................................................................................... 76
Disable Auto Synchronization in Browser IT policy rule.................................................................................................... 76
Disable JavaScript in Browser IT policy rule........................................................................................................................ 77
Download Images URL IT policy rule................................................................................................................................... 77
Download Themes URL IT policy rule.................................................................................................................................. 78
Download Tunes URL IT policy rule...................................................................................................................................... 78
MDS Browser BSM Enabled IT policy rule........................................................................................................................... 78
MDS Browser Domains IT policy rule................................................................................................................................... 79
MDS Browser HTML Tables Enabled IT policy rule............................................................................................................. 79
MDS Browser JavaScript Enabled IT policy rule.................................................................................................................. 80
MDS Browser Style Sheets Enabled IT policy rule.............................................................................................................. 80
MDS Browser Title IT policy rule........................................................................................................................................... 80
MDS Browser Use Separate Icon IT policy rule.................................................................................................................. 81
Camera policy group....................................................................................................................................................................... 81
Disable Photo Camera IT policy rule.................................................................................................................................... 81
Disable Video Camera IT policy rule.................................................................................................................................... 82
Certification Authority Profile policy group................................................................................................................................. 82
Allow Private Key Export IT policy rule................................................................................................................................ 82
Certificate Enrollment Delay IT policy rule.......................................................................................................................... 83
Certificate Expiry Window IT policy rule.............................................................................................................................. 83
Certification Authority Host IT policy rule........................................................................................................................... 83
Certificate Authority Port IT policy rule............................................................................................................................... 84

Certification Authority Profile Name IT policy rule............................................................................................................ 84
Certification Authority Profile Required IT policy rule....................................................................................................... 85
Certification Authority Type IT policy rule........................................................................................................................... 85
Common Name Components IT policy rule........................................................................................................................ 86
Custom Microsoft Certification Authority Certificate Template IT policy rule................................................................ 86
Distinguished Name Components IT policy rule................................................................................................................ 87
Key Algorithm IT policy rule.................................................................................................................................................. 88
Key Length IT policy rule....................................................................................................................................................... 88
Microsoft Certification Authority Certificate Template IT policy rule.............................................................................. 88
RSA Certification Authority Certificate ID IT policy rule................................................................................................... 89
RSA Jurisdiction ID IT policy rule.......................................................................................................................................... 89
Certificate Synchronization policy group..................................................................................................................................... 90
Random Source URL IT policy rule....................................................................................................................................... 90
User Can Disable Automatic RNG Initialization IT policy rule......................................................................................... 90
Chalk Pushcast policy group.......................................................................................................................................................... 91
Allow Chalk Pushcast Player Auto Update Prompt IT policy rule..................................................................................... 91
Allow Chalk Pushcast Player Roaming IT policy rule......................................................................................................... 91
Allow Launch of Chalk Pushcast Player IT policy rule........................................................................................................ 92
Chalk Pushcast Player Default Connection Type IT policy rule........................................................................................ 92
Chalk Pushcast Player Host URL IT policy rule................................................................................................................... 93
Chalk Pushcast Player Mobile Network Data Limit IT policy rule.................................................................................... 93
Restrict Chalk Pushcast Player to Wi-Fi IT policy rule....................................................................................................... 94
Common policy group.................................................................................................................................................................... 94
BlackBerry Server version IT policy rule............................................................................................................................... 94
Confirm On Send IT policy rule............................................................................................................................................. 95
Disable Kodiak PTT IT policy rule......................................................................................................................................... 95
Disable MMS IT policy rule.................................................................................................................................................... 96
Disable Voice-Activated Dialing IT policy rule................................................................................................................... 96
Disable Voice Note Recording IT policy rule....................................................................................................................... 97
Enable Simultaneous Phone and Data IT policy rule......................................................................................................... 97
IT Policy Notification IT policy rule....................................................................................................................................... 98
Lock Owner Info IT policy rule.............................................................................................................................................. 98
Set Owner Info IT policy rule................................................................................................................................................. 99
Set Owner Name IT policy rule............................................................................................................................................. 99
Date and Time IT policy group...................................................................................................................................................... 100

Automatic Time Zone Change Detection IT policy rule..................................................................................................... 100
Enable Time Zone Definitions Update IT policy rule.......................................................................................................... 100
Periodic Time Synchronization IT policy rule...................................................................................................................... 101
Time Zone Definitions Automatic Update Interval IT policy rule..................................................................................... 101
Time Zone Definitions Update Server IT policy rule........................................................................................................... 102
Desktop policy group...................................................................................................................................................................... 102
Allow BlackBerry Desktop Software Statistics IT policy rule............................................................................................. 102
Allow External Device Software Servers IT policy rule....................................................................................................... 103
Allow IP Modem application IT policy rule.......................................................................................................................... 103
Allow Personal Folder Reconciliation IT policy rule............................................................................................................ 103
Desktop Allow Desktop Add-ins IT policy rule.................................................................................................................... 104
Desktop Allow Device Switch IT policy rule........................................................................................................................ 104
Desktop Password Cache Timeout IT policy rule................................................................................................................ 105
Disable Check For Updates Link IT policy rule................................................................................................................... 105
Disable Media Manager IT policy rule................................................................................................................................. 106
Disable Media Synchronization IT policy rule..................................................................................................................... 106
Force updates for application loader tool IT policy rule..................................................................................................... 107
Generate Encrypted Backup Files IT policy rule................................................................................................................. 107
Override Check For Updates URL IT policy rule................................................................................................................. 107
Device IOT Application policy group............................................................................................................................................ 108
Device Diagnostic App Disable IT policy rule..................................................................................................................... 108
Set Diagnostic Report Email Address IT policy rule........................................................................................................... 108
Set Diagnostic Report PIN Address IT policy rule.............................................................................................................. 108
Documents To Go policy group..................................................................................................................................................... 109
Disable Documents To Go IT policy rule.............................................................................................................................. 109
Hide Documents To Go Communication Menus IT policy rule......................................................................................... 109
Hide Documents To Go Premium Feature Menus IT policy rule....................................................................................... 110
Email Messaging policy group....................................................................................................................................................... 110
Allow Auto Attachment Download IT policy rule................................................................................................................ 110
Attachment Viewing IT policy rule....................................................................................................................................... 111
Confirm External Image Download IT policy rule............................................................................................................... 111
Disable Form Submission IT policy rule............................................................................................................................... 112
Disable Manual Download of External Images IT policy rule............................................................................................ 112
Disable Notes Native Encryption Forward And Reply IT policy rule................................................................................ 112
Disable Rich Content Email IT policy rule........................................................................................................................... 113

Enable Wireless Message Reconciliation IT policy rule...................................................................................................... 113
Inline Content Requests IT policy rule................................................................................................................................. 114
Keep Message Duration IT policy rule................................................................................................................................. 114
Keep Saved Message Duration IT policy rule...................................................................................................................... 115
Maximum Native Attachment MFH attachment size IT policy rule................................................................................. 115
Maximum Native Attachment MFH total attachment size IT policy rule........................................................................ 116
Maximum Native Attachment MTH attachment size IT policy rule................................................................................. 117
Notes Native Encryption Password Timeout IT policy rule................................................................................................ 117
Prepend Disclaimer IT policy rule......................................................................................................................................... 117
Require Notes Native Encryption For Outgoing Messages IT policy rule....................................................................... 118
Enterprise Voice Client policy group............................................................................................................................................ 118
Disable DTMF Fallback IT policy rule................................................................................................................................... 118
Disable Enterprise Voice Client IT policy rule..................................................................................................................... 119
Lock Outgoing Line IT policy rules....................................................................................................................................... 119
Reject Non-Enterprise Voice Calls IT policy rule................................................................................................................ 119
External Display policy group........................................................................................................................................................ 120
Display Notification Details IT policy rule........................................................................................................................... 120
Include Message Text in Notification Details IT policy rule.............................................................................................. 120
Firewall policy group....................................................................................................................................................................... 121
Restrict Incoming Cellular Calls IT policy rule.................................................................................................................... 121
Restrict Outgoing Cellular Calls IT policy rule.................................................................................................................... 122
Instant Messaging policy group.................................................................................................................................................... 122
Disable Address Book Lookup for Enterprise Messenger IT policy rule........................................................................... 122
Disable Automatic Login IT policy rule................................................................................................................................ 123
Disable Broadcast Messages IT policy rule......................................................................................................................... 123
Disable Emailing Conversation IT policy rule...................................................................................................................... 124
Disable Emoticons IT policy rule........................................................................................................................................... 124
Disable Offline Messaging for Enterprise Messenger IT policy rule................................................................................ 124
Disable Saving Conversation IT policy rule......................................................................................................................... 125
Disallow File Transfer Types IT policy rule........................................................................................................................... 125
Maximum File Transfer Size (MB) IT policy rule.................................................................................................................. 126
Location Based Services policy group........................................................................................................................................... 126
Allow Geolocation Service IT policy rule.............................................................................................................................. 126
Disable BlackBerry Maps IT policy rule................................................................................................................................ 126
Enable Enterprise Location Tracking IT policy rule............................................................................................................. 127

Enterprise Location Tracking Interval IT policy rule........................................................................................................... 127
Enterprise Location Tracking User Prompt Message IT policy rule.................................................................................. 128
MDS Integration Service policy group.......................................................................................................................................... 128
Allow Access to Multiple Domains IT policy rule................................................................................................................ 128
Allow Discovery By User IT policy rule................................................................................................................................. 128
Disable Activation With Public BlackBerry MDS Integration Service IT policy rule....................................................... 129
Disable MDS Runtime IT policy rule..................................................................................................................................... 129
Disable User-Initiated Activation With Public BlackBerry MDS Integration Service IT policy rule.............................. 130
Enable Access to Device Data for MDS Runtime 4.3.0 and earlier IT policy rule.......................................................... 130
Lowest BlackBerry MDS Integration Service Security Version Allowed IT policy rule................................................... 130
Queue Limit for Inbound Application Messages IT policy rule......................................................................................... 131
Queue Limit for Outbound Application Messages IT policy rule...................................................................................... 131
Verify BlackBerry MDS Integration Service Certificate IT policy rule.............................................................................. 132
Memory Cleaner policy group....................................................................................................................................................... 132
Force Memory Clean When Closed IT policy rule............................................................................................................... 132
Force Memory Clean When Holstered IT policy rule.......................................................................................................... 133
Force Memory Clean When Idle IT policy rule..................................................................................................................... 133
Memory Cleaner Maximum Idle Time IT policy rule........................................................................................................... 133
On-Device Help policy group........................................................................................................................................................ 134
On-Device Help Group Label IT policy rule........................................................................................................................ 134
On-Device Help Links IT policy rule..................................................................................................................................... 135
Password policy group.................................................................................................................................................................... 135
Duress Notification Address IT policy rule.......................................................................................................................... 135
Forbidden Passwords IT policy rule...................................................................................................................................... 136
Maximum Password History IT policy rule.......................................................................................................................... 136
Periodic Challenge Time IT policy rule................................................................................................................................. 137
Set Maximum Password Attempts IT policy rule................................................................................................................ 138
Set Password Timeout IT policy rule..................................................................................................................................... 138
Suppress Password Echo IT policy rule................................................................................................................................ 139
PIM Synchronization policy group................................................................................................................................................ 140
Disable Address Wireless Synchronization IT policy rule................................................................................................... 140
Disable All Wireless Synchronization IT policy rule............................................................................................................ 140
Disable BlackBerry Messenger Wireless Synchronization IT policy rule.......................................................................... 141
Disable Calendar Wireless Synchronization IT policy rule................................................................................................. 141
Disable Enterprise Activation Progress IT policy rule........................................................................................................ 142

Disable Memopad Wireless Sync IT policy rule................................................................................................................... 142
Disable Phone Call Log Wireless Synchronization IT policy rule...................................................................................... 143
Disable PIN Messages Wireless Synchronization IT policy rule........................................................................................ 143
Disable SMS Messages Wireless Sync IT policy rule.......................................................................................................... 143
Disable Task Wireless Sync IT policy rule............................................................................................................................ 144
Disable Wireless Bulk Loads IT policy rule........................................................................................................................... 144
PGP Application policy group........................................................................................................................................................ 145
PGP Allowed Content Ciphers IT policy rule....................................................................................................................... 145
PGP Allowed Encrypted Attachment Mode........................................................................................................................ 146
PGP Allowed Encryption Types IT policy rule...................................................................................................................... 146
PGP Blind Copy Address IT policy rule................................................................................................................................ 147
PGP Force Digital Signature IT policy rule.......................................................................................................................... 147
PGP Force Encrypted Messages IT policy rule.................................................................................................................... 148
PGP Minimum Strong DH Key Length IT policy rule......................................................................................................... 148
PGP Minimum Strong DSA Key Length IT policy rule........................................................................................................ 149
PGP Minimum Strong RSA Key Length IT policy rule........................................................................................................ 149
PGP More All and Send Mode IT policy rule....................................................................................................................... 150
PGP Universal Enrollment Method IT policy rule............................................................................................................... 150
PGP Universal Policy Cache Timeout IT policy rule........................................................................................................... 151
PGP Universal Server Address IT policy rule....................................................................................................................... 151
Phone policy group......................................................................................................................................................................... 152
Outgoing Call Redirection IT policy rule............................................................................................................................. 152
RIM Value-Added Applications policy group.............................................................................................................................. 153
Allow Edits to BlackBerry Social Networking Application Proxy URL for Lotus Connections IT policy rule................ 153
Allow Edits to BlackBerry Social Network Application Proxy URL for Lotus Quickr IT policy rule............................... 153
Allow TiVo for BlackBerry application IT policy rule........................................................................................................... 154
BlackBerry Social Networking Application Proxy URL for Lotus Connections IT policy rule........................................ 154
BlackBerry Social Network Application Proxy URL for Lotus Quickr IT policy rule........................................................ 155
Deactivate eBay for BlackBerry smartphones IT policy rule.............................................................................................. 155
Disable BlackBerry Wallet IT policy rule.............................................................................................................................. 156
Disable Ecommerce Content Optimization Engine IT policy rule..................................................................................... 156
Disable Feeds application IT policy rule.............................................................................................................................. 156
Disable Lotus Connections IT policy rule............................................................................................................................. 157
Disable Organizer Data Access for Social Networking Applications............................................................................... 157
Disable RIM Value-Added Applications IT policy rule....................................................................................................... 157

Enable the "Tell A Friend" Feature in BlackBerry Client for Lotus Connections IT policy rule...................................... 158
Enable the "Tell A Friend" Feature in BlackBerry Client for Lotus Quickr IT policy rule................................................ 158
Lotus Connections Activities Server IT policy rule.............................................................................................................. 159
Lotus Connections Blogs Server IT policy rule.................................................................................................................... 159
Lotus Connections Communities Server IT policy rule....................................................................................................... 159
Lotus Connections Dogear Server IT policy rule................................................................................................................. 160
Lotus Connections Profiles Server IT policy rule................................................................................................................. 160
Prevent BlackBerry Podcasts IT policy rule......................................................................................................................... 161
Prevent RSS Feeds IT policy rule.......................................................................................................................................... 161
Prevent uploading of videos to YouTube IT policy rule...................................................................................................... 162
Secure Email policy group.............................................................................................................................................................. 162
Canonical Certificate Domain Name IT policy rule............................................................................................................ 162
Disable Certificate Address Checks IT policy rule.............................................................................................................. 163
Security policy group...................................................................................................................................................................... 163
Allow External Connections IT policy rule........................................................................................................................... 163
Allow Internal Connections IT policy rule............................................................................................................................ 164
Allow Outgoing Call When Locked IT policy rule................................................................................................................ 164
Allow Resetting of Idle Timer IT policy rule......................................................................................................................... 165
Allow Screen Shot Capture IT policy rule............................................................................................................................ 165
Allow Smart Card Password Caching IT policy rule........................................................................................................... 166
Allow Split-Pipe Connections IT policy rule........................................................................................................................ 166
Allow Third Party Apps to Use Persistent Store IT policy rule.......................................................................................... 167
Allow Third Party Apps to Use Serial Port IT policy rule.................................................................................................... 167
Allowed Authentication Mechanisms IT policy rule........................................................................................................... 168
Certificate Status Maximum Expiry Time IT policy rule..................................................................................................... 168
Content Protection of Contact List IT policy rule................................................................................................................ 169
Content Protection Strength IT policy rule.......................................................................................................................... 169
Content Protection Usage IT policy rule.............................................................................................................................. 170
Desktop Backup IT policy rule............................................................................................................................................... 171
Disable 3DES Transport Crypto IT policy rule..................................................................................................................... 172
Disable BlackBerry App World IT policy rule....................................................................................................................... 172
Disable Browsing Of Remote Shared Folders IT policy rule.............................................................................................. 173
Disable Certificate or Key Import From External Memory IT policy rule......................................................................... 173
Disable Cut/Copy/Paste IT policy rule................................................................................................................................ 173
Disable External Memory IT policy rule............................................................................................................................... 174

Disable Forwarding Between Services IT policy rule.......................................................................................................... 174
Disable Geo-Tagging of Photos IT policy rule.................................................................................................................... 175
Disable GPS IT policy rule..................................................................................................................................................... 175
Disable Invalid Certificate Use IT policy rule...................................................................................................................... 175
Disable IP Modem IT policy rule........................................................................................................................................... 176
Disable Key Store Backup IT policy rule.............................................................................................................................. 176
Disable Key Store Low Security IT policy rule..................................................................................................................... 177
Disable Media Manager FTP Access IT policy rule............................................................................................................. 177
Disable Message Normal Send IT policy rule...................................................................................................................... 178
Disable Peer-to-Peer Normal Send IT policy rule.............................................................................................................. 179
Disable Persisted Plain Text IT policy rule........................................................................................................................... 179
Disable Public Photo Sharing Applications IT policy rule.................................................................................................. 180
Disable Public Social Networking Applications IT policy rule........................................................................................... 181
Disable Radio When Cradled IT policy rule......................................................................................................................... 181
Disable Revoked Certificate Use IT policy rule................................................................................................................... 181
Disable Smart Password Entry IT policy rule....................................................................................................................... 182
Disable Stale Certificate Status Checks IT policy rule....................................................................................................... 183
Disable Stale Status Use IT policy rule................................................................................................................................ 183
Disable Untrusted Certificate Use IT policy rule................................................................................................................ 184
Disable Unverified Certificate Use IT policy rule................................................................................................................ 184
Disable Unverified CRLs IT policy rule................................................................................................................................. 185
Disable USB Mass Storage IT policy rule............................................................................................................................. 185
Disable Weak Certificate Use IT policy rule........................................................................................................................ 186
Disallow Third Party Application Downloads IT policy rule............................................................................................... 186
Encryption on On-Board Device Memory Media Files IT policy rule............................................................................... 187
External File System Encryption Level IT policy rule.......................................................................................................... 187
FIPS Level IT policy rule......................................................................................................................................................... 188
Firewall Block Incoming Messages IT policy rule............................................................................................................... 189
Firewall Whitelist Addresses IT policy rule.......................................................................................................................... 190
Force Content Protection Of Master Keys IT policy rule................................................................................................... 191
Force Device Password Entry While User Authentication is Enabled IT policy rule....................................................... 191
Force Display IT Policy Viewer Icon on Homescreen IT policy rule.................................................................................. 192
Force LED Blinking When Microphone Is On IT policy rule............................................................................................... 192
Force Lock When Closed IT policy rule................................................................................................................................. 192
Force Lock When Holstered IT policy rule........................................................................................................................... 193

Force Multi Factor Authentication IT policy rule................................................................................................................ 193
Force Notifications for Keys with Medium Security Level IT policy rule.......................................................................... 194
Force Smart Card Reader Challenge Response while User Authentication is enabled IT policy rule......................... 194
Force Smart Card Two Factor Authentication IT policy rule.............................................................................................. 195
Force Smart Card Two Factor Challenge Response IT policy rule.................................................................................... 196
Key Store Password Maximum Timeout IT policy rule....................................................................................................... 196
Lock on Proximity Authenticator Disconnect IT policy rule............................................................................................... 197
Lock on Smart Card Removal IT policy rule......................................................................................................................... 197
Login Disclaimer IT policy rule.............................................................................................................................................. 198
Maximum Smart Card User Authenticator Certificate Status Check Period IT policy rule........................................... 199
Media Card Format on Device Wipe IT policy rule............................................................................................................. 199
Message Classification IT policy rule................................................................................................................................... 199
Message Classification Title IT policy rule........................................................................................................................... 200
Minimal Encryption Key Store Security Level IT policy rule.............................................................................................. 200
Minimal Signing Key Store Security Level IT policy rule.................................................................................................... 201
Password Required for Application Download IT policy rule............................................................................................ 201
Require Secure APB Messages IT policy rule...................................................................................................................... 202
Required Password Pattern IT policy rule............................................................................................................................ 202
Reset to Factory Defaults on Wipe IT policy rule................................................................................................................ 203
Secure Wipe Delay After IT Policy Received IT policy rule................................................................................................ 204
Secure Wipe Delay After Lock IT policy rule........................................................................................................................ 204
Secure Wipe if Low Battery IT policy rule............................................................................................................................. 205
Security Service Colors IT policy rule................................................................................................................................... 205
Security Transcoder Cod File Hashes IT policy rule........................................................................................................... 206
Trusted Certificate Thumbprints IT policy rule.................................................................................................................... 206
Two Factor Content Protection Usage IT policy rule.......................................................................................................... 207
Weak Digest Algorithms IT policy rule................................................................................................................................. 208
S/MIME Application policy group................................................................................................................................................. 208
Entrust Messaging Server (EMS) Email Address IT policy rule......................................................................................... 208
S/MIME Allowed Content Ciphers IT policy rule................................................................................................................ 209
S/MIME Allowed Encrypted Attachment Mode IT policy rule.......................................................................................... 210
S/MIME Allowed Encryption Types IT policy rule............................................................................................................... 210
S/MIME Blind Copy Address IT policy rule.......................................................................................................................... 210
S/MIME Force Digital Signature IT policy rule................................................................................................................... 211
S/MIME Force Encrypted Messages IT policy rule............................................................................................................. 211

S/MIME Force Smartcard Use IT policy rule....................................................................................................................... 212
S/MIME Minimum Strong DH Key Length IT policy rule.................................................................................................. 212
S/MIME Minimum Strong DSA Key Length IT policy rule................................................................................................. 213
S/MIME Minimum Strong ECC Key Length IT policy rule................................................................................................. 213
S/MIME Minimum Strong RSA Key Length IT policy rule................................................................................................. 214
S/MIME More All and Send Mode IT policy rule................................................................................................................ 214
Service Exclusivity policy group..................................................................................................................................................... 215
Allow Other Browser Services IT policy rule........................................................................................................................ 215
Allow Other Calendar Services IT policy rule...................................................................................................................... 215
Allow Other Message Services IT policy rule...................................................................................................................... 216
Allow Public AIM Services IT policy rule.............................................................................................................................. 216
Allow Public Google Talk Services IT policy rule................................................................................................................. 217
Allow Public ICQ Services IT policy rule.............................................................................................................................. 217
Allow Public IM Services IT policy rule................................................................................................................................. 218
Allow Public WLM Services IT policy rule............................................................................................................................. 218
Allow Public Yahoo! Messenger Services IT policy rule..................................................................................................... 218
Allow Network Address Book Sync IT policy rule............................................................................................................... 219
SIM Application Toolkit policy group............................................................................................................................................ 219
Disable Network Location Query IT policy rule.................................................................................................................. 219
Disable SIM Call Control IT policy rule................................................................................................................................ 220
Disable SIM Originated Calls IT policy rule......................................................................................................................... 220
Smart Dialing policy group............................................................................................................................................................ 221
Enable Smart Dialing Policy IT policy rule........................................................................................................................... 221
Set Local Area Code IT policy rule........................................................................................................................................ 221
Set Local Country Code IT policy rule.................................................................................................................................. 222
Set National Number Length IT policy rule......................................................................................................................... 222
Smart Dialing Allow Device Changes IT policy rule........................................................................................................... 223
TCP policy group............................................................................................................................................................................. 224
TCP APN IT policy rule........................................................................................................................................................... 224
TCP Password IT policy rule.................................................................................................................................................. 224
TCP Username IT policy rule................................................................................................................................................. 224
TLS Application policy group......................................................................................................................................................... 225
TLS Device Side Only IT policy rule...................................................................................................................................... 225
TLS Disable Invalid Connection IT policy rule..................................................................................................................... 225
TLS Disable Untrusted Connection IT policy rule............................................................................................................... 226

TLS Disable Weak Ciphers IT policy rule.............................................................................................................................. 226
TLS Disable Weak Digests IT policy rule.............................................................................................................................. 227
TLS Minimum Strong DH Key Length IT policy rule........................................................................................................... 227
TLS Minimum Strong DSA Key Length IT policy rule......................................................................................................... 228
TLS Minimum Strong ECC Key Length IT policy rule......................................................................................................... 228
TLS Minimum Strong RSA Key Length IT policy rule......................................................................................................... 229
TLS Prevent Unmatched Domain Name IT policy rule...................................................................................................... 230
TLS Restrict FIPS Ciphers IT policy rule............................................................................................................................... 230
User Feedback IT policy group...................................................................................................................................................... 230
Allow User Feedback IT policy rule...................................................................................................................................... 231
Visual Voice Mail policy group...................................................................................................................................................... 231
Allow Users to Save Messages IT policy rule...................................................................................................................... 231
Disable Visual Voice Mail IT policy rule............................................................................................................................... 231
Password Complexity IT policy rule...................................................................................................................................... 232
Require Password IT policy rule............................................................................................................................................ 232
VoIP policy group............................................................................................................................................................................ 233
Allow VoIP IT policy rule........................................................................................................................................................ 233
Disable VoIP User Profiles IT policy rule............................................................................................................................. 233
SIP Authentication ID IT policy rule..................................................................................................................................... 234
SIP Domain IT policy rule...................................................................................................................................................... 234
SIP Local Port IT policy rule................................................................................................................................................... 234
SIP Realm IT policy rule......................................................................................................................................................... 235
SIP Registration Timeout IT policy rule................................................................................................................................ 235
SIP RTP Media Port IT policy rule......................................................................................................................................... 236
SIP Server Name IT policy rule.............................................................................................................................................. 236
SIP Server Port IT policy rule................................................................................................................................................. 236
SIP Server Transport IT policy rule....................................................................................................................................... 237
SIP Server Type IT policy rule................................................................................................................................................ 237
SIP User Display Name IT policy rule.................................................................................................................................. 238
SIP User ID IT policy rule....................................................................................................................................................... 238
SIP User Password IT policy.................................................................................................................................................. 239
VoIP Allow BlackBerry Device Changes IT policy rule....................................................................................................... 239
VoIP Emergency Number IT policy rule............................................................................................................................... 240
VoIP Enable Attended Call Transfer IT policy rule.............................................................................................................. 240
VoIP Enable Call Hold IT policy rule..................................................................................................................................... 241

VoIP Enable Unattended Call Transfer IT policy rule......................................................................................................... 241
VPN policy group............................................................................................................................................................................ 241
Disable VPN User Profiles IT policy rule.............................................................................................................................. 241
Enable VPN IT policy rule...................................................................................................................................................... 242
Use VPN Xauth IT policy rule................................................................................................................................................ 242
VPN Allow Handheld Changes IT policy rule...................................................................................................................... 243
VPN Allow Password Save IT policy rule............................................................................................................................. 243
VPN Disable Prompt for Credentials Re-Entry IT policy rule............................................................................................ 244
VPN DNS Configuration IT policy rule................................................................................................................................. 244
VPN Domain Name IT policy rule......................................................................................................................................... 244
VPN Gateway Address IT policy rule.................................................................................................................................... 245
VPN Group Name IT policy rule........................................................................................................................................... 245
VPN Group Password IT policy rule..................................................................................................................................... 246
VPN IKE Cipher IT policy rule............................................................................................................................................... 246
VPN IKE DH Group IT policy rule......................................................................................................................................... 246
VPN IKE Hash IT policy rule.................................................................................................................................................. 247
VPN IPSec Cipher and Hash IT policy rule.......................................................................................................................... 247
VPN Minimal Certificate Encryption Key Security Level IT policy rule............................................................................ 248
VPN NAT Keep Alive IT policy rule....................................................................................................................................... 248
VPN Password Hidden on Input IT policy rule.................................................................................................................... 249
VPN PFS IT policy rule........................................................................................................................................................... 249
VPN Primary DNS IT policy rule........................................................................................................................................... 249
VPN Secondary DNS IT policy rule...................................................................................................................................... 250
VPN User Name IT policy rule.............................................................................................................................................. 250
VPN User Password IT policy rule........................................................................................................................................ 251
VPN Vendor Type IT policy rule............................................................................................................................................ 251
VPN Xauth Type IT policy rule.............................................................................................................................................. 252
Wi-Fi policy group........................................................................................................................................................................... 252
BlackBerry Infrastructure Wi-Fi Access Mode IT policy rule............................................................................................. 252
Blocked Wi-Fi SSIDs IT policy rule........................................................................................................................................ 253
Disable GAN-Only Mode IT policy rule............................................................................................................................... 253
Disable GAN-Preferred Mode IT policy rule....................................................................................................................... 254
Disable GAN Selection Mode Editing IT policy rule........................................................................................................... 254
Disable WAN-Only Mode IT policy rule............................................................................................................................... 254
Disable WAN-Preferred Mode IT policy rule....................................................................................................................... 255

Disable Wi-Fi IT policy rule.................................................................................................................................................... 255
Disable Wi-Fi Direct Access to BlackBerry Enterprise Server IT policy rule.................................................................... 256
Disable Wi-Fi User Profiles IT policy rule............................................................................................................................. 256
GAN Signal Quality Threshold IT policy rule...................................................................................................................... 257
GAN Signal Strength Threshold IT policy rule.................................................................................................................... 257
GAN Wi-Fi Threshold IT policy rule...................................................................................................................................... 258
Wi-Fi Allow Handheld Changes IT policy rule..................................................................................................................... 258
Wi-Fi Default Gateway IT policy rule.................................................................................................................................... 259
Wi-Fi Default KEY ID IT policy rule....................................................................................................................................... 259
Wi-Fi DHCP Configuration IT policy rule............................................................................................................................. 260
Wi-Fi Disable Prompt for Credentials Re-Entry IT policy rule........................................................................................... 260
Wi-Fi Enable Authentication Page IT policy rule................................................................................................................ 260
Wi-Fi IP Address IT policy rule.............................................................................................................................................. 261
Wi-Fi Link Security IT policy rule........................................................................................................................................... 261
Wi-Fi Minimal EAP-TLS Certificate Encryption Key Security Level IT policy rule........................................................... 262
Wi-Fi Password Hidden on Input IT policy rule................................................................................................................... 262
Wi-Fi Preshared Key IT policy rule........................................................................................................................................ 263
Wi-Fi Primary DNS IT policy rule.......................................................................................................................................... 263
Wi-Fi Profile Forwarding Mode IT policy rule...................................................................................................................... 264
Wi-Fi Secondary DNS IT policy rule..................................................................................................................................... 265
Wi-Fi SSID IT policy rule........................................................................................................................................................ 265
Wi-Fi Subnet Mask IT policy rule.......................................................................................................................................... 266
Wi-Fi User Name IT policy rule............................................................................................................................................. 266
Wi-Fi User Password IT policy rule....................................................................................................................................... 267
Wi-Fi WEP Key 1 IT policy rule............................................................................................................................................... 267
Wi-Fi WEP Key 2 IT policy rule.............................................................................................................................................. 268
Wi-Fi WEP Key 3 IT policy rule.............................................................................................................................................. 268
Wi-Fi WEP Key 4 IT policy rule.............................................................................................................................................. 268
Wired Software Updates policy group.......................................................................................................................................... 269
Allow Web-Based Software Loading IT policy rule............................................................................................................. 269
Cryptographic Services Backup IT policy rule..................................................................................................................... 269
Wireless Software Upgrades policy group................................................................................................................................... 270
Allow Non Enterprise Upgrade IT policy rule...................................................................................................................... 270
Disallow Device User Requested Rollback IT policy rule................................................................................................... 270
Disallow Device User Requested Upgrade IT policy rule.................................................................................................. 271

Disallow Patch Download Over International Roaming WAN IT policy rule................................................................... 271
Disallow Patch Download Over Roaming WAN IT policy rule.......................................................................................... 272
Disallow Patch Download Over WAN IT policy rule........................................................................................................... 272
Disallow Patch Download Over Wi-Fi IT policy rule........................................................................................................... 272
WTLS Application policy group...................................................................................................................................................... 273
WTLS Disable Invalid Connection IT policy rule.................................................................................................................. 273
WTLS Disable Untrusted Connection IT policy rule............................................................................................................ 273
WTLS Disable Weak Ciphers IT policy rule........................................................................................................................... 274
WTLS Minimum Strong DH Key Length IT policy rule........................................................................................................ 274
WTLS Minimum Strong ECC Key Length IT policy rule...................................................................................................... 275
WTLS Minimum Strong RSA Key Length IT policy rule...................................................................................................... 276
WTLS Restrict FIPS Ciphers IT policy rule............................................................................................................................ 277
3 Configuration settings................................................................................................................................................................ 278
Configuration settings for VoIP profiles....................................................................................................................................... 278
Allow VoIP configuration setting.......................................................................................................................................... 278
SIP Authentication ID configuration setting....................................................................................................................... 278
SIP Domain configuration setting........................................................................................................................................ 279
SIP Local Port configuration setting.................................................................................................................................... 279
SIP Realm configuration setting........................................................................................................................................... 279
SIP Registration Timeout configuration setting................................................................................................................. 280
SIP RTP Media Port configuration setting........................................................................................................................... 280
SIP Server Name configuration setting............................................................................................................................... 281
SIP Server Port configuration setting.................................................................................................................................. 281
SIP Server Transport configuration setting......................................................................................................................... 281
SIP Server Type configuration setting.................................................................................................................................. 282
SIP User Display Name configuration setting.................................................................................................................... 282
SIP User ID configuration setting........................................................................................................................................ 283
SIP User Password configuration setting............................................................................................................................ 283
VoIP Allow BlackBerry Device Changes configuration setting......................................................................................... 284
VoIP Emergency Number configuration setting................................................................................................................. 284
VoIP Enable Attended Call Transfer configuration setting............................................................................................... 285
VoIP Enable Call Hold configuration setting...................................................................................................................... 285
VoIP Enable Unattended Call Transfer configuration setting.......................................................................................... 285
Configuration settings for VPN profiles....................................................................................................................................... 286

Enable VPN configuration setting........................................................................................................................................ 286
Suppress VPN Banner configuration setting...................................................................................................................... 286
Use VPN Xauth configuration setting................................................................................................................................. 287
VPN Allow Handheld Changes configuration setting....................................................................................................... 287
VPN Allow Password Save configuration setting............................................................................................................... 288
VPN Disable Server Certificate Validation configuration setting.................................................................................... 288
VPN DNS Configuration configuration setting.................................................................................................................. 289
VPN Domain Name configuration setting.......................................................................................................................... 289
VPN Gateway Address configuration setting..................................................................................................................... 289
VPN Group Name configuration setting............................................................................................................................. 290
VPN Group Password configuration setting....................................................................................................................... 290
VPN Hard Token Required configuration setting............................................................................................................... 291
VPN IKE Cipher configuration setting................................................................................................................................. 291
VPN IKE DH Group configuration setting........................................................................................................................... 291
VPN IKE Hash configuration setting.................................................................................................................................... 292
VPN IP Address configuration setting................................................................................................................................. 292
VPN IPSec Cipher and Hash configuration setting........................................................................................................... 293
VPN Minimal Certificate Encryption Key Security Level configuration setting.............................................................. 293
VPN NAT Keep Alive configuration setting........................................................................................................................ 294
VPN PFS configuration setting............................................................................................................................................. 294
VPN Primary DNS configuration setting............................................................................................................................. 294
VPN Profile Visibility configuration setting......................................................................................................................... 295
VPN Profile Editability configuration setting...................................................................................................................... 295
VPN Secondary DNS configuration setting........................................................................................................................ 295
VPN Subnet Mask configuration setting............................................................................................................................. 296
VPN Token Serial Number configuration setting............................................................................................................... 296
VPN User Name configuration setting................................................................................................................................ 297
VPN User Password configuration setting.......................................................................................................................... 297
VPN Vendor Type configuration setting.............................................................................................................................. 298
VPN Xauth Type configuration setting................................................................................................................................ 298
Configuration settings for Wi-Fi profiles...................................................................................................................................... 299
Associated Certificate Authority Configuration configuration setting............................................................................ 299
Associated VoIP Configuration configuration setting....................................................................................................... 299
Associated VPN Configuration configuration setting........................................................................................................ 299
Wi-Fi Allow AP to AP Handover configuration setting...................................................................................................... 300