PGP Support Package for BlackBerry Devices User Guide Supplement BlackBerry Pearl 8120 Smartphone BlackBerry Pearl 8130 Smartphone PGP Support Package for BlackBerry Devices User Guide Supplement Last modified: 20 July 2007 Document ID: 13375966-001 At the time of publication, this documentation is based on PGP Support Package for BlackBerry devices Version 4.3. Send us your comments on product documentation: https://www.blackberry.com/DocsFeedback. Contents 1 2 3 4 5 PGP Support Package for BlackBerry devices installation ................................................................................ 5 PGP keys.....................................................................................................................................................................7 Certificate servers ...................................................................................................................................................15 PGP messages.......................................................................................................................................................... 17 Legal notice ............................................................................................................................................................. 25 1 PGP Support Package for BlackBerry devices installation About the PGP Support Package for BlackBerry devices PGP Support Package for BlackBerry devices prerequisites Install the PGP Support Package for BlackBerry devices on your computer Install the PGP Support Package for BlackBerry devices on your BlackBerry device Enroll with the PGP Universal Server · · Verify that you have installed and configured the PGP UniversalTM Satellite or PGP Desktop client on your computer. Refer to the PGP documentation to determine the correct version for your configuration. Verify that you have obtained the installer for the PGP Support Package for BlackBerry devices from PGP Corporation or an authorized PGP reseller. Verify that your BlackBerry Enterprise Server supports the PGP Support Package for BlackBerry devices. · About the PGP Support Package for BlackBerry devices The PGP® Support Package for BlackBerry devices is designed to permit you to send PGP messages from-- and receive PGP messages on--your BlackBerry® device, if you are already sending PGP messages from and receiving PGP messages on your computer. The PGP Support Package for BlackBerry devices supports OpenPGP messages and, if your BlackBerry device is integrated with an account that uses BlackBerry Enterprise Server Version 4.1.2 or later, PGP/MIME messages. Install the PGP Support Package for BlackBerry devices on your computer 1. Double-click the installer for the PGP® Support Package for BlackBerry® devices. 2. Complete the instructions on the screen. Install the PGP Support Package for BlackBerry devices on your BlackBerry device 1. Connect your BlackBerry® device to your computer. 2. On the taskbar, click Start > Programs > BlackBerry > Desktop Manager. 3. Double-click the Application Loader icon. 4. Click Next. 5. Select the BlackBerry PGP Support Package check box. PGP Support Package for BlackBerry devices prerequisites · Verify that you have installed the BlackBerry® Desktop Software on your computer. The installer for the PGP® Support Package for BlackBerry devices uses components from the BlackBerry Device Software. User Guide Supplement 6. Click Next. 7. Click Finish. Enroll with the PGP Universal Server 1. After your BlackBerry® device has completed enterprise activation, at the prompt, click Enroll Now. 2. Type your email address or domain login information. 3. Click OK. 4. Click OK again. 5. To download PGP keys from the PGP UniversalTM Server, click Yes. 6. Type the pass phrase to decrypt your private key. 7. Click OK. Related topic Legal notice (See page 25.) 6 2 PGP keys About PGP keys About PGP key icons Download a personal PGP key from the PGP Universal Server Download another person's PGP key Find PGP key information Find PGP subkey information PGP key information fields Check the status of a PGP key Download an updated PGP key Set a PGP key to trusted Set a PGP key to not trusted Send a PGP key to a contact Set options for checking the status of a PGP key Use the common name when adding a PGP key to the key store Change the display name for a PGP key Revoke a PGP key Revocation reasons Delete a PGP key Add a contact when adding a PGP key to the key store Set the service used to download PGP keys About the key store Change the key store password Set how long your key store password is remembered Set how frequently the revocation status is refreshed Do not back up or restore items in the key store Shortcuts for viewing PGP key information in the PGP Keys screen PGP key troubleshooting About PGP keys A PGP® key might contain several cryptographic keys, including a parent key to verify signatures and one or more subkeys to encrypt messages. PGP keys are generated in pairs, with a public key and a private key. A PGP public key binds the identity and the public cryptographic information of the PGP public key user. A PGP public key is required to verify and encrypt messages. PGP public keys are shared and are accessible by both message senders and recipients. A PGP private key is required to sign and decrypt messages. Private key information is never publicly available. You can generate a PGP key using the PGP UniversalTM Server or PGP Desktop client. If you generate the PGP key using the PGP Universal Server, the PGP Universal Server signs the key to verify that the key is trusted. A PGP key might also contain an X.509 certificate, which is used to verify and encrypt Secure Multipurpose Internet Mail Extensions (S/MIME) messages. If you use the PGP Universal Server and you have installed the S/MIME Support Package for BlackBerry devices, you can use these certificates to send and receive S/MIME messages through the PGP Universal Server. Certificates that you obtain from PGP keys are stored in the key store and appear in the Certificates screen. User Guide Supplement Related topics About PGP key icons (See page 8.) About digital signatures and encryption (See page 17.) About the key store (See page 12.) Download another person's PGP key 1. In the device options, click Security Options. 2. Click PGP keys. 3. Press the Menu key. 4. Click Fetch PGP Keys. 5. Select a Lightweight Directory Access Protocol (LDAP) server. 6. Type PGP® key subject information in one or more of the First Name, Last Name, or Email fields. 7. Press the Menu key. 8. Click Search. 9. Click a PGP key. 10. Click Add PGP Key to Key Store. 11. Type your key store password. 12. Click OK. Notes: A selected check box beside a PGP key indicates that the PGP key is downloaded and stored in the key store on your BlackBerry® device. If you use the PGP UniversalTM Server, you might not be able to download PGP keys from an LDAP server. Related topics About PGP keys (See page 7.) Set options for checking the status of a PGP key (See page 10.) I cannot download another person's PGP key from an LDAP server (See page 13.) About PGP key icons The following icons indicate the status of PGP® keys stored on your BlackBerry® device: · · · · Key: The PGP key has a corresponding private key on your device. Check mark: The PGP key is trusted, the PGP key revocation status is good, and the PGP key is valid. Question mark: The revocation status of the PGP key is unknown or the key is weak. X: The PGP key is not trusted, revoked, expired, not yet valid, or could not be verified. Related topics Check the status of a PGP key (See page 9.) Download an updated PGP key (See page 9.) Download a personal PGP key from the PGP Universal Server 1. In the device options, click Security Options. 2. Click PGP. 3. Press the Menu key. 4. Click Download Keys. 5. Type your key store password. 6. Click OK. 7. Type the pass phrase to decrypt your private key. 8. Click OK. Related topics About PGP keys (See page 7.) Send a PGP key to a contact (See page 10.) Find PGP key information 1. In the device options, click Security Options. 2. Click PGP keys. 3. Click a PGP® key. 8 2: PGP keys Related topics PGP key information fields (See page 9.) Find PGP subkey information (See page 9.) · · Adleman (RSA), Digital Signature Algorithm (DSA), and Diffie-Hellman (DH) keys. Key Usage: Approved uses for the key. Fingerprint: The PGP key fingerprint in hexidecimal format. Find PGP subkey information 1. In the device options, click Security Options. 2. Click PGP keys. 3. Click a PGP® key. 4. Click View Subkey. Related topics PGP key information fields (See page 9.) Find PGP key information (See page 8.) Related topics About PGP keys (See page 7.) Find PGP key information (See page 8.) Find PGP subkey information (See page 9.) Check the status of a PGP key 1. In the device options, click Security Options. 2. Click PGP Keys. PGP key information fields · · Revocation Status: The status of the PGP® key at a specified date and time. Trust Status: How the PGP key is trusted. · · Explicitly Trusted: The PGP key itself is trusted. Implicitly Trusted: A private key on your BlackBerry® device corresponds with the PGP key. Not Trusted: The PGP key is not explicitly trusted and does not chain to a trusted PGP key on your device, and a chain of digital signatures to a trusted key does not exist. 3. Highlight a PGP® key. 4. Press the Menu key. 5. Click Fetch Status. Related topics About PGP key icons (See page 8.) Download an updated PGP key (See page 9.) Download an updated PGP key 1. In the device options, click Security Options. 2. Click PGP Keys. 3. Highlight a PGP® key. 4. Press the Menu key. 5. Click Fetch Updated PGP Key. Related topics About PGP keys (See page 7.) About PGP key icons (See page 8.) Check the status of a PGP key (See page 9.) · · · · Creation Date: The date the key was generated. Expiration Date: The expiration date that is set by the PGP UniversalTM Server. Email Address: The email address associated with the key. Multiple Email Address fields might appear. Public Key Type: The standard to which the public key complies. Your device supports Rivest Shamir · 9 User Guide Supplement Set a PGP key to trusted 1. In the device options, click Security Options. 2. Click PGP Keys. 3. Highlight an untrusted PGP® key. 4. Press the Menu key. 5. Click Trust. Related topics About PGP keys (See page 7.) About PGP key icons (See page 8.) Set a PGP key to not trusted (See page 10.) Related topic Import a PGP key from a message (See page 18.) Set options for checking the status of a PGP key 1. In the device options, click Security Options. 2. Click PGP keys. 3. Press the Menu key. 4. Click Fetch PGP Keys. 5. Press the Menu key. 6. Click Options. 7. Perform one of the following actions: · To always check the status of a PGP® key when you add it to the key store, set the Fetch Status field to Yes. To be prompted to check the status of a PGP key when you add it to the key store, set the Fetch Status field to Prompt. To never check the status of a PGP key when you add it to the key store set the Fetch Status field to No. Set a PGP key to not trusted 1. In the device options, click Security Options. 2. Click PGP Keys. 3. Highlight a trusted PGP® key. 4. Press the Menu key. 5. Click Distrust. Related topics About PGP keys (See page 7.) Revoke a PGP key (See page 11.) Delete a PGP key (See page 11.) · · 8. Press the Menu key. 9. Click Save. Related topics Send a PGP key to a contact 1. In the device options, click Security Options. 2. Click PGP Keys. 3. Highlight a PGP® key. 4. Press the Menu key. 5. Click Send via Email or Send via PIN. Note: When you send a PGP key, only the public key is sent and not the private key. About the key store (See page 12.) Check the status of a PGP key (See page 9.) Use the common name when adding a PGP key to the key store The common name is the name set for the key when it is generated. You can use the common name as a label for the key on your BlackBerry® device or you can set the label to one that has more meaning to you. 1. In the device options, click Security Options. 2. Click PGP keys. 10 2: PGP keys 3. Press the Menu key. 4. Click Fetch PGP Keys. 5. Press the Menu key. 6. Click Options. 7. Set the Prompt for Label field to Yes. 8. Press the Menu key. 9. Click Save. Related topics Change the display name for a PGP key (See page 11.) Add a contact when adding a PGP key to the key store (See page 12.) 7. Press the Space key to set the Reason field to the appropriate revocation reason. 8. Click OK. Note: Other options that do not apply to your support package might appear in the dialog box. Related topics Revocation reasons (See page 11.) Set a PGP key to not trusted (See page 10.) Delete a PGP key (See page 11.) Revocation reasons Change the display name for a PGP key 1. In the ...