Policy and Profile Reference Guide

Policy and Profile Reference Guide
BlackBerry Device Service
Version: 10.2
Policy and Profile
Reference Guide
BlackBerry Enterprise Service 10
Published: 2014-06-16
SWD-20140616165002982
Contents
1
About this guide............................................................................................................................. 10
2
New IT policy rules and profile settings in this release...................................................................... 11
New IT policy rules............................................................................................................................................................. 11
3
IT policy rules................................................................................................................................. 12
General rule group............................................................................................................................................................. 12
Rules for all activation types........................................................................................................................................ 12
Hotspot WPA2-Personal Security Type rule........................................................................................................... 12
Mobile Hotspot Mode and Tethering rule.............................................................................................................. 13
Roaming rule........................................................................................................................................................14
Wireless Service Provider Billing rule.....................................................................................................................14
Rules for Regulated activation type..............................................................................................................................15
Custom Name for "Switch to Personal" Setting rule............................................................................................... 15
Hardware rule group ......................................................................................................................................................... 16
Rules for Corporate and Regulated activation types......................................................................................................16
Transfer Work Contacts Using Bluetooth PBAP or HFP rule................................................................................... 16
Transfer Work Data Using NFC rule.......................................................................................................................16
Transfer Work Files Using Bluetooth OPP or a Wi-Fi Direct Connection rule............................................................17
Transfer Work Messages Using Bluetooth MAP rule.............................................................................................. 18
Transfer Work Messages Using Bluetooth MAP Without Prompt rule......................................................................18
Rules for Work space only and Regulated activation types............................................................................................ 19
Bluetooth rule...................................................................................................................................................... 19
Bluetooth A2DP rule.............................................................................................................................................20
Bluetooth AVRCP rule...........................................................................................................................................20
Bluetooth Contacts Transfer Using PBAP rule....................................................................................................... 21
Bluetooth Discoverable Mode rule........................................................................................................................ 21
Bluetooth File Transfer Using OBEX rule............................................................................................................... 22
Bluetooth HFP rule............................................................................................................................................... 22
Bluetooth MAP rule.............................................................................................................................................. 23
Bluetooth Pairing rule........................................................................................................................................... 23
Bluetooth PAN Profile rule.................................................................................................................................... 24
Bluetooth SPP rule............................................................................................................................................... 25
Camera rule......................................................................................................................................................... 25
Enforce Bluetooth Secure Simple Pairing Numeric Comparison rule...................................................................... 26
Enforce Minimum Bluetooth Passkey Length rule..................................................................................................26
FM Radio rule.......................................................................................................................................................27
HDMI rule............................................................................................................................................................ 27
Location Services rule...........................................................................................................................................28
Minimum Bluetooth Encryption Key Length rule.................................................................................................... 28
NFC rule...............................................................................................................................................................29
Wi-Fi rule..............................................................................................................................................................30
Logging rule group............................................................................................................................................................. 30
Rules for all activation types........................................................................................................................................ 30
CCL Data Collection rule....................................................................................................................................... 30
Log Submission rule............................................................................................................................................. 31
Rules for Work space only and Regulated activation types............................................................................................ 32
BBM Log Wireless Synchronization rule................................................................................................................ 32
Phone Log Wireless Synchronization rule.............................................................................................................. 32
PIN to PIN Log Wireless Synchronization rule........................................................................................................ 33
SMS/MMS Log Wireless Synchronization rule........................................................................................................ 33
Video Chat Log Wireless Synchronization rule........................................................................................................34
Password rule group.......................................................................................................................................................... 34
Rules for all activation types........................................................................................................................................ 34
Maximum Password Age rule................................................................................................................................ 34
Maximum Password Attempts rule........................................................................................................................35
Maximum Password History rule........................................................................................................................... 36
Minimum Password Complexity rule......................................................................................................................36
Minimum Password Length rule............................................................................................................................ 37
Security Timeout rule............................................................................................................................................37
Rules for Corporate and Regulated activation types......................................................................................................38
Apply Work Space Password to Full Device rule.....................................................................................................38
Password Required for Work Space rule................................................................................................................ 39
Security rule group.............................................................................................................................................................40
Rules for all activation types........................................................................................................................................ 40
Application Security Timer Reset rule....................................................................................................................40
BlackBerry Bridge rule......................................................................................................................................... 41
Development Mode Access to Work Space rule..................................................................................................... 41
Display Owner Information on Lock Screen rule.....................................................................................................42
IRM-Protected Email Messages rule......................................................................................................................42
Lock on Smart Card Removal rule......................................................................................................................... 43
Lock Screen Preview of Work Content rule.............................................................................................................43
Maximum Bluetooth Range rule............................................................................................................................44
Media Card Encryption rule...................................................................................................................................45
Network Access Control for Work Apps rule...........................................................................................................46
PIN Entry Mode rule............................................................................................................................................. 46
Restrict Development Mode rule...........................................................................................................................47
Smart Card Password Caching rule....................................................................................................................... 48
Smart Password Entry rule.................................................................................................................................... 48
Use BBM Protected rule....................................................................................................................................... 49
Voice Control rule................................................................................................................................................. 50
Work Domains rule............................................................................................................................................... 50
Rules for Corporate activation type.............................................................................................................................. 51
Two-Factor Encryption Key Generation rule...........................................................................................................51
WebGL rule.......................................................................................................................................................... 52
Rules for Corporate and Regulated activation types......................................................................................................52
Backup and Restore Work Space rule................................................................................................................... 52
Personal Apps Access to Work Contacts rule......................................................................................................... 53
Personal Space Data Encryption rule.................................................................................................................... 54
Share Work Data During BBM Video Screen Sharing rule.......................................................................................54
Voice Dictation in Work Apps rule..........................................................................................................................55
Wipe the Work Space Without Network Connectivity rule....................................................................................... 55
Work Apps Access to Shared Files or Content in the Personal Space rule............................................................... 56
Work Network Usage for Personal Apps rule..........................................................................................................56
Rules for Work space only and Regulated activation types............................................................................................ 57
Backup and Restore Device rule........................................................................................................................... 57
Computer Access to Device rule........................................................................................................................... 58
Display Organization Notice After Device Restart rule............................................................................................ 58
Media Card rule....................................................................................................................................................59
SMS/MMS Signature rule...................................................................................................................................... 59
Two-Factor Authentication rule.............................................................................................................................60
Two-Factor Authentication Only for Work Space rule............................................................................................. 60
Voice Dictation rule.............................................................................................................................................. 61
Wipe the Device Without Network Connectivity rule...............................................................................................62
Rules for Regulated activation type..............................................................................................................................62
Advanced Data at Rest Protection rule.................................................................................................................. 62
Advanced Data at Rest Protection Timeout rule.................................................................................................... 63
Assign Two-Factor Authentication for Work rule.................................................................................................... 63
Two-Factor Authentication for Advanced Data at Rest Protection rule................................................................... 64
Software rule group............................................................................................................................................................65
Rules for all activation types........................................................................................................................................ 65
External Email Address Indicator rule....................................................................................................................65
External Email Address Warning Message rule...................................................................................................... 65
External Email Domain Allowed List rule................................................................................................................ 66
External Email Domain Restricted List rule............................................................................................................ 67
Find More Contact Details rule..............................................................................................................................67
Forward or Add Recipients to Private Messages rule..............................................................................................68
Rules for Corporate and Regulated activation types......................................................................................................68
BBM Video Access to Work Network rule...............................................................................................................68
Cloud Storage Access from Work Space rule......................................................................................................... 69
Open Links in Work Email Messages in the Personal Browser rule.......................................................................... 70
Unified View for Work and Personal Accounts and Messages rule.......................................................................... 70
Rules for Work space only and Regulated activation types............................................................................................ 71
BBM rule..............................................................................................................................................................71
BBM Video/BBM Voice rule.................................................................................................................................. 71
BlackBerry Maps rule........................................................................................................................................... 72
BlackBerry Protect rule........................................................................................................................................ 72
Hotspot Browser rule............................................................................................................................................ 73
joyn rule............................................................................................................................................................... 73
Media Sharing rule............................................................................................................................................... 74
Miracast rule........................................................................................................................................................ 75
Non-Email Accounts rule...................................................................................................................................... 75
Other Email Messaging Services rule.....................................................................................................................76
PIN Messages rule................................................................................................................................................76
SMS/MMS rule..................................................................................................................................................... 77
User-Created VPN Profiles rule............................................................................................................................. 77
Wireless Service Provider Apps rule...................................................................................................................... 78
Wireless Software Updates rule.............................................................................................................................78
YouTube for BlackBerry Devices rule.................................................................................................................... 79
Rules for Regulated activation type..............................................................................................................................79
Install Apps From Other Sources rule.................................................................................................................... 79
4
Profile settings................................................................................................................................81
Email profile settings.......................................................................................................................................................... 81
Allowed Content Ciphers setting.................................................................................................................................. 81
Calendar Synchronization setting.................................................................................................................................81
Contact Synchronization setting.................................................................................................................................. 82
Days to Synchronize setting......................................................................................................................................... 82
Digitally Signed S/MIME Messages setting................................................................................................................... 83
Email Synchronization setting......................................................................................................................................84
Encrypted S/MIME Messages setting........................................................................................................................... 84
Interval Between Synchronizations setting................................................................................................................... 85
Memo Synchronization setting.....................................................................................................................................86
Push Enabled setting...................................................................................................................................................86
Require Manual Synchronization When Roaming setting.............................................................................................. 87
SCEP Profile setting.....................................................................................................................................................87
Server Name setting....................................................................................................................................................87
Server Port setting.......................................................................................................................................................88
S/MIME Messages setting............................................................................................................................................88
Task Synchronization setting....................................................................................................................................... 89
Type setting................................................................................................................................................................ 89
Use SSL setting........................................................................................................................................................... 90
SCEP profile settings.......................................................................................................................................................... 90
Automatic Renewal setting.......................................................................................................................................... 90
Certificate Thumbprint setting..................................................................................................................................... 91
Certification Authority Challenge Password setting.......................................................................................................91
Certification Authority Identifier setting........................................................................................................................92
ECC Strength setting................................................................................................................................................... 92
Key Algorithm setting.................................................................................................................................................. 93
Private Key Export setting............................................................................................................................................ 93
RSA Strength setting................................................................................................................................................... 94
SCEP Service URL setting............................................................................................................................................94
Specify Encryption Algorithm setting............................................................................................................................95
Specify Hash Function setting..................................................................................................................................... 95
Wi-Fi profile settings...........................................................................................................................................................96
Access Point Handover setting.................................................................................................................................... 96
Associated Proxy Profile setting................................................................................................................................... 96
Associated SCEP Profile setting................................................................................................................................... 97
Band Type setting....................................................................................................................................................... 97
Client Certificate Source setting...................................................................................................................................98
Data Security Level setting.......................................................................................................................................... 98
Default Gateway setting...............................................................................................................................................99
Domain Suffix setting.................................................................................................................................................. 99
EAP Inner Link Security setting.................................................................................................................................. 100
EAP Security setting.................................................................................................................................................. 100
EAP-FAST Provisioning Method setting...................................................................................................................... 101
Enable DHCP setting................................................................................................................................................. 101
Enable IPv6 setting....................................................................................................................................................102
Hidden SSID setting.................................................................................................................................................. 102
IP Address setting..................................................................................................................................................... 103
Link Security setting.................................................................................................................................................. 103
Preshared Key setting............................................................................................................................................... 104
Preshared Key Type setting....................................................................................................................................... 104
Primary DNS setting.................................................................................................................................................. 104
Proxy Password setting..............................................................................................................................................105
Proxy Port setting...................................................................................................................................................... 105
Proxy Server setting...................................................................................................................................................106
Proxy User Name setting........................................................................................................................................... 106
Secondary DNS setting..............................................................................................................................................107
SSID setting.............................................................................................................................................................. 107
Subnet Mask setting..................................................................................................................................................108
Trusted Certificate Source setting..............................................................................................................................108
Use HTTP Proxy setting............................................................................................................................................. 109
User Can Edit setting.................................................................................................................................................109
User Name setting.................................................................................................................................................... 110
User Password setting............................................................................................................................................... 110
VPN Profile setting.................................................................................................................................................... 111
WEP Key setting........................................................................................................................................................ 111
VPN profile settings..........................................................................................................................................................112
Associated Proxy Profile setting................................................................................................................................. 112
Associated SCEP Profile setting................................................................................................................................. 112
Authentication ID setting........................................................................................................................................... 113
Authentication ID Type setting...................................................................................................................................113
Authentication Type setting.......................................................................................................................................114
Automatically Determine IP setting............................................................................................................................114
Client Certificate Source setting.................................................................................................................................115
Custom IKE DH Provider setting.................................................................................................................................115
Data Security Level setting........................................................................................................................................ 116
Disable Banner setting.............................................................................................................................................. 116
Display VPN Information on Device setting.................................................................................................................117
Domain Suffix setting................................................................................................................................................ 117
DPD Frequency setting..............................................................................................................................................118
Dynamically Determine DNS setting.......................................................................................................................... 118
EAP Identity setting................................................................................................................................................... 119
Gateway Authentication ID setting............................................................................................................................. 119
Gateway Authentication ID Type setting.....................................................................................................................120
Gateway Authentication Type setting......................................................................................................................... 120
Gateway Preshared Key setting................................................................................................................................. 121
Gateway Type setting................................................................................................................................................ 121
Group Password setting.............................................................................................................................................122
Group User Name setting.......................................................................................................................................... 122
Hard Token setting....................................................................................................................................................123
IKE Cipher setting......................................................................................................................................................123
IKE DH Group setting................................................................................................................................................ 124
IKE Hash setting........................................................................................................................................................124
IKE Lifetime setting................................................................................................................................................... 125
IKE PRF setting......................................................................................................................................................... 125
IPSEC Cipher setting................................................................................................................................................. 126
IPSEC DH Group setting............................................................................................................................................ 127
IPSEC Hash setting................................................................................................................................................... 127
IPSEC Lifetime setting............................................................................................................................................... 128
Manual Algorithm Selection setting............................................................................................................................128
MSCHAPv2 EAP Identity setting................................................................................................................................ 129
MSCHAPv2 Password setting.................................................................................................................................... 129
MSCHAPv2 User Name setting..................................................................................................................................130
NAT Keep Alive setting.............................................................................................................................................. 130
Password setting....................................................................................................................................................... 130
Perfect Forward Secrecy setting................................................................................................................................ 131
Preshared Key setting............................................................................................................................................... 131
Primary DNS setting.................................................................................................................................................. 132
Private IP setting....................................................................................................................................................... 132
Private IP Mask setting.............................................................................................................................................. 133
Proxy Password setting..............................................................................................................................................133
Proxy Port setting...................................................................................................................................................... 134
Proxy Server setting...................................................................................................................................................134
Proxy User Name setting........................................................................................................................................... 135
Secondary DNS setting..............................................................................................................................................135
Server Address setting...............................................................................................................................................136
Split Tunneling setting...............................................................................................................................................136
Subnet setting...........................................................................................................................................................136
Subnet Mask setting..................................................................................................................................................137
Trusted Certificate Source setting..............................................................................................................................137
Use HTTP Proxy setting............................................................................................................................................. 138
User Can Edit setting.................................................................................................................................................138
User Name setting.................................................................................................................................................... 139
Proxy profile settings........................................................................................................................................................ 139
Exclusion List setting................................................................................................................................................. 139
Host setting...............................................................................................................................................................140
PAC URL setting........................................................................................................................................................140
Password setting....................................................................................................................................................... 141
Port setting............................................................................................................................................................... 141
Type setting.............................................................................................................................................................. 141
User setting.............................................................................................................................................................. 142
User Can Edit setting.................................................................................................................................................142
5
Product documentation................................................................................................................ 143
6
Provide feedback..........................................................................................................................146
7
Glossary....................................................................................................................................... 147
8
Legal notice..................................................................................................................................150
Policy and Profile Reference Guide
About this guide
1
The BlackBerry Device Service is a component of BlackBerry Enterprise Service 10 that helps you manage BlackBerry
devices for your organization. This reference guide provides descriptions for each IT policy rule and profile setting in the
BlackBerry Device Service.
This guide is intended for senior administrators who are responsible for setting up IT policies that govern device security
and profiles that control how devices connect to your organization's network. For instructions on creating IT policies and
profiles and assigning them to users and groups, see the BlackBerry Device Service Advanced Administration Guide. For
more information about BlackBerry Device Service security and device security, see the BlackBerry Device Service Solution
Security Technical Overview.
10
Policy and Profile Reference Guide
New IT policy rules
New IT policy rules and profile
settings in this release
2
New IT policy rules
Policy group
Rule
BlackBerry 10 OS
minimum requirement
Hardware
FM Radio
A version later than
10.2.1
11
Policy and Profile Reference Guide
General rule group
IT policy rules
3
This section describes all the IT policy rules available in the BlackBerry Device Service. The list of rules for each rule group
is divided according to the activation types that the rules apply to.
Many of the IT policy rules do not apply to tablets running the BlackBerry PlayBook OS. If a rule does apply to the PlayBook
OS, the PlayBook OS version is included in the minimum requirements for the rule.
The following activation types are available in the BlackBerry Device Service:
Activation type
Description
Work and personal Corporate
This option activates a BlackBerry Balance device that separates work and personal data.
Your organization only has control over the work space. You can use this option to activate
BlackBerry 10 devices and BlackBerry PlayBook tablets.
Work space only
This option activates a device that only has a work space. You can use this option to
activate devices running BlackBerry 10 OS version 10.1 and later.
Work and personal Regulated
This option activates a regulated BlackBerry Balance device that separates work and
personal data and gives your organization additional control over device features. You can
use this option to activate devices running BlackBerry 10 OS version 10.2.1 and later.
General rule group
Rules for all activation types
Hotspot WPA2-Personal Security Type rule
Description
This rule specifies whether a BlackBerry device must use the WPA2-Personal security type
to connect to a hotspot. If you set this rule to Yes, the user cannot select a different
security type to connect the device to a hotspot.
This rule is obsolete in BlackBerry 10 OS version 10.2.
12
Policy and Profile Reference Guide
Applicable activation
types
General rule group
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Possible values
Mobile Hotspot Mode and Tethering rule
Description
This rule specifies whether to allow Mobile Hotspot mode, tethering using Bluetooth
technology, and tethering using a USB cable on a BlackBerry device. If you set this rule to
Allow, all of these features are available in the settings on the device. If you set this rule to
Disallow, none of these features are available in the settings on the device.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Possible values
13
Policy and Profile Reference Guide
General rule group
Roaming rule
Description
This rule specifies whether a BlackBerry device can use data services over the wireless
network when the device is roaming. If you set this rule to Disallow, the device cannot use
data services over the wireless network when the device is roaming. If the device is
connected to a Wi-Fi network, the device can send and receive data over the Wi-Fi network
when the device is roaming, even if you change the value for this rule to Disallow.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1 for work space only devices
•
BlackBerry 10 OS version 10.2 for BlackBerry Balance devices
•
BlackBerry 10 OS version 10.2.1 for regulated BlackBerry Balance devices
•
BlackBerry Enterprise Service 10 version 10.1
Possible values
Rule introduction
Wireless Service Provider Billing rule
Description
This rule specifies whether a BlackBerry device user can purchase apps from the
BlackBerry World storefront and the BlackBerry World for Work storefront using the
purchasing plan for your organization's wireless service provider. If you set this rule to
Disallow, users must pay for app purchases using another payment method.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Possible values
14
Policy and Profile Reference Guide
General rule group
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Rules for Regulated activation type
Custom Name for "Switch to Personal" Setting rule
Description
This rule specifies a name for the device setting that allows a user to switch from the work
space to the personal space on a BlackBerry device. The device displays the custom name
in the Quick Settings menu when the user swipes down from the top of the home screen.
The custom name is not localized, so you must use the appropriate language for users
when you specify the name. If you do not set this rule, the device displays the default
name, "Switch to Personal," in the Quick Settings menu.
Applicable activation
types
•
Work and personal - Regulated
Possible values
•
1 to 20 characters
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2 MR2
15
Policy and Profile Reference Guide
Hardware rule group
Hardware rule group
Rules for Corporate and Regulated activation types
Transfer Work Contacts Using Bluetooth PBAP or HFP rule
Description
This rule specifies whether a BlackBerry device can send work contacts to another
Bluetooth enabled device using the Bluetooth PBAP or HFP. If you set this rule to Disallow,
users cannot transfer work contacts using the Bluetooth PBAP or HFP.
Related rules
Setting this rule to Disallow also prevents users from transferring work messages using the
Bluetooth MAP.
On regulated BlackBerry Balance devices, this rule takes effect only if the Bluetooth rule is
set to Allow and the Bluetooth Contacts Transfer Using PBAP rule or the Bluetooth HFP
rule is set to Allow.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Transfer Work Data Using NFC rule
Description
16
This rule specifies whether a BlackBerry device can send work data to another NFCenabled device using NFC. If you set this rule to Disallow, the device cannot send work
data to another device using NFC.
Policy and Profile Reference Guide
Related rules
Hardware rule group
Setting this rule to Disallow also prevents an NFC-enabled device from using NFC to
initiate work data transfers using the Bluetooth OPP.
On regulated BlackBerry Balance devices, if the NFC rule is set to Disallow, this rule does
not apply.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1.3
Transfer Work Files Using Bluetooth OPP or a Wi-Fi Direct Connection
rule
Description
This rule specifies whether a BlackBerry device can transfer work files to another
Bluetooth enabled device or NFC-enabled device using the Bluetooth OPP or, if a device is
running a version of BlackBerry 10 OS that is later than 10.2.1, transfer work files over a
Wi-Fi Direct connection.
Related rules
Setting the Transfer Work Data Using NFC rule to Disallow also prevents an NFC-enabled
device from using NFC to initiate work data transfers using the Bluetooth OPP, regardless
of the setting for this rule.
On regulated BlackBerry Balance devices, this rule takes effect only if the Bluetooth rule
or the Wi-Fi rule is set to Allow.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
17
Policy and Profile Reference Guide
Hardware rule group
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Transfer Work Messages Using Bluetooth MAP rule
Description
This rule specifies whether a BlackBerry device can send messages from the work space
(for example, email messages and instant messages) to another Bluetooth enabled device
using the Bluetooth MAP.
Related rules
Setting the Transfer Work Contacts Using Bluetooth PBAP or HFP rule to Disallow also
prevents users from sending messages using the Bluetooth MAP, regardless of the setting
for this rule.
On regulated BlackBerry Balance devices, this rule takes effect only if the Bluetooth rule
and the Bluetooth MAP rule are set to Allow.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Transfer Work Messages Using Bluetooth MAP Without Prompt rule
Description
18
This rule specifies whether a user can transfer work messages to a Bluetooth enabled
device using the Bluetooth MAP following a single password prompt to access the work
space. If you set this rule to Disallow, the user must unlock the work space each time the
device connects to the Bluetooth enabled device before the device can transfer work
messages using the Bluetooth MAP.
Policy and Profile Reference Guide
Related rules
Hardware rule group
If the Transfer Work Messages Using Bluetooth MAP rule is set to Disallow, this rule does
not apply.
On regulated BlackBerry Balance devices, if the Bluetooth rule is set to Disallow, this rule
does not apply.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Rules for Work space only and Regulated activation
types
Bluetooth rule
Description
This rule specifies whether a BlackBerry device can use Bluetooth technology. If you set
this rule to Disallow, the device cannot use Bluetooth technology.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
19
Policy and Profile Reference Guide
Rule introduction
Hardware rule group
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth A2DP rule
Description
This rule specifies whether a BlackBerry device can use the Bluetooth A2DP. A device can
use the Bluetooth A2DP to stream audio files to another Bluetooth enabled device (for
example, a headset). If you set this rule to Disallow, the device cannot use the Bluetooth
A2DP.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth AVRCP rule
Description
This rule specifies whether a BlackBerry device can use the Bluetooth AVRCP. A device
can use the Bluetooth AVRCP to allow a Bluetooth enabled device (for example, a
headset) to control the device's media apps. If you set this rule to Disallow, the device
cannot use the Bluetooth AVRCP.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
20
Policy and Profile Reference Guide
Hardware rule group
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth Contacts Transfer Using PBAP rule
Description
This rule specifies whether a BlackBerry device can exchange Contacts data with other
Bluetooth enabled devices using the Bluetooth PBAP. If you set this rule to Disallow, the
device cannot exchange Contacts data with other Bluetooth enabled devices.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth Discoverable Mode rule
Description
This rule specifies whether a BlackBerry device can use Bluetooth discoverable mode. A
device that is discoverable can be found by other Bluetooth enabled devices within range
of the device. If you set this rule to Disallow, the device cannot use Bluetooth discoverable
mode.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
21
Policy and Profile Reference Guide
Possible values
Hardware rule group
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth File Transfer Using OBEX rule
Description
This rule specifies whether a BlackBerry device can exchange files with other supported
Bluetooth OBEX devices. If you set this rule to Disallow, the device cannot exchange files
with other supported Bluetooth OBEX devices.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth HFP rule
Description
This rule specifies whether a BlackBerry device can use the Bluetooth HFP. A device can
use the Bluetooth HFP to allow a Bluetooth enabled device (for example, a car kit or a
headset) to access the Contacts and Phone apps on the device to make phone calls. If you
set this rule to Disallow, the device cannot use the Bluetooth HFP.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
22
Policy and Profile Reference Guide
Hardware rule group
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth MAP rule
Description
This rule specifies whether a BlackBerry device can use the Bluetooth MAP. A device can
use the Bluetooth MAP to allow a Bluetooth enabled device to access email messages. If
you set this rule to Disallow, the device cannot use the Bluetooth MAP.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth Pairing rule
Description
This rule specifies whether a BlackBerry device can connect to another Bluetooth enabled
device. If you set this rule to Disallow, the device cannot establish new connections with
23
Policy and Profile Reference Guide
Hardware rule group
other Bluetooth enabled devices. After a device connects to another Bluetooth enabled
device, you can use this rule to prevent the device from connecting to additional Bluetooth
enabled devices.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Bluetooth PAN Profile rule
Description
This rule specifies whether a BlackBerry device can use the Bluetooth PAN profile. A
device can use the Bluetooth PAN profile to allow a Bluetooth enabled device to tether to
it. If you set this rule to Disallow, the device cannot use the Bluetooth PAN profile.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
24
Policy and Profile Reference Guide
Hardware rule group
Bluetooth SPP rule
Description
This rule specifies whether a BlackBerry device can use the Bluetooth SPP. If you set this
rule to Disallow, the device cannot use the Bluetooth SPP.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Camera rule
Description
This rule specifies whether a BlackBerry device can use the camera. If you set this rule to
Disallow, the device cannot use the camera.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
25
Policy and Profile Reference Guide
Hardware rule group
Enforce Bluetooth Secure Simple Pairing Numeric Comparison rule
Description
This rule specifies whether a BlackBerry device must use the numeric comparison mode if
the device uses Bluetooth SSP to connect to another Bluetooth enabled device. If you set
this rule to Yes, the device must use the numeric comparison mode if the device uses
Bluetooth SSP to connect to another Bluetooth enabled device.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Enforce Minimum Bluetooth Passkey Length rule
Description
This rule specifies whether a BlackBerry device must use a Bluetooth passkey that is at
least 8 digits to connect to another Bluetooth enabled device. If you set this rule to Yes, the
BlackBerry device cannot connect to another Bluetooth enabled device if the passkey that
the Bluetooth enabled device requests or provides is less than 8 digits.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
•
No
Default value
26
Policy and Profile Reference Guide
Hardware rule group
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
FM Radio rule
Description
This rule specifies whether a BlackBerry device user can use the FM Radio. Setting this
rule to Disallow prevents a user from using the FM Radio on a device that supports it. After
you set this rule to Disallow, if you change this rule to Allow, the user cannot use the FM
Radio until apps that use it are restarted.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2 MR3
HDMI rule
Description
This rule specifies whether a BlackBerry device can use the HDMI port. If you set this rule
to Disallow, the device cannot use the HDMI port.
Related rules
Setting this rule to Disallow also prevents the device from sending streaming video over a
Wi-Fi Direct connection to other Wi-Fi CERTIFIED Miracast devices.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
27
Policy and Profile Reference Guide
Hardware rule group
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Location Services rule
Description
This rule specifies whether a BlackBerry device can provide its geographic location to
apps that are running on the device. If you set this rule to Disallow, apps on the device
cannot use the GPS or geolocation service to determine the location of the device.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Minimum Bluetooth Encryption Key Length rule
Description
This rule specifies the minimum encryption key length that a BlackBerry device uses to
encrypt Bluetooth connections.
Related rules
If the Bluetooth rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
1 byte
•
2 bytes
28
Policy and Profile Reference Guide
Hardware rule group
•
3 bytes
•
4 bytes
•
5 bytes
•
6 bytes
•
7 bytes
•
8 bytes
•
9 bytes
•
10 bytes
•
11 bytes
•
12 bytes
•
13 bytes
•
14 bytes
•
15 bytes
•
16 bytes
Default value
•
1 byte
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
NFC rule
Description
This rule specifies whether a BlackBerry device can use NFC. If you set this rule to
Disallow, the device cannot use NFC.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
•
Allow
Default value
29
Policy and Profile Reference Guide
Logging rule group
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Wi-Fi rule
Description
This rule specifies whether a BlackBerry device can make Wi-Fi connections. If you set this
rule to Disallow, the device cannot make Wi-Fi connections. After you set this rule to
Disallow, if you change this rule to Allow, the device cannot use Wi-Fi until it is restarted.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Logging rule group
Rules for all activation types
CCL Data Collection rule
Description
30
This rule specifies whether a BlackBerry device allows CCL data collection across all apps.
CCL allows apps to collect rich data related to app usage and to carry out deep cross-app
analysis. If you set this rule to Disallow, the device does not allow CCL data collection.
Policy and Profile Reference Guide
Applicable activation
types
Logging rule group
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Possible values
Log Submission rule
Description
This rule specifies whether a BlackBerry device can generate and send log files to the
BlackBerry Technical Solution Center. If you set this rule to No, the device cannot
generate and send log files to the BlackBerry Technical Solution Center.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Possible values
Rule introduction
31
Policy and Profile Reference Guide
Logging rule group
Rules for Work space only and Regulated activation
types
BBM Log Wireless Synchronization rule
Description
This rule specifies whether a BlackBerry device synchronizes logs for BBM with your
organization's BlackBerry Device Service.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Phone Log Wireless Synchronization rule
Description
This rule specifies whether a BlackBerry device synchronizes the call log for the Phone
app with your organization's BlackBerry Device Service.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
•
No
Default value
32
Policy and Profile Reference Guide
Logging rule group
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
PIN to PIN Log Wireless Synchronization rule
Description
This rule specifies whether a BlackBerry device synchronizes logs for PIN messages with
your organization's BlackBerry Device Service.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
SMS/MMS Log Wireless Synchronization rule
Description
This rule specifies whether a BlackBerry device synchronizes logs for SMS text messages
and MMS messages with your organization's BlackBerry Device Service.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
33
Policy and Profile Reference Guide
Rule introduction
Password rule group
•
BlackBerry Enterprise Service 10 version 10.1
Video Chat Log Wireless Synchronization rule
Description
This rule specifies whether a BlackBerry device synchronizes logs for the BBM Video
feature with your organization's BlackBerry Device Service.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Password rule group
Rules for all activation types
Maximum Password Age rule
Description
This rule specifies the number of days that can elapse before the work space password
expires and a BlackBerry device user must set a new password. If you set this rule to 0, the
password does not expire.
Related rules
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
•
34
Work and personal - Corporate
Policy and Profile Reference Guide
Password rule group
•
Work space only
•
Work and personal - Regulated
Possible values
•
0 to 365 days
Default value
•
0
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Maximum Password Attempts rule
Description
This rule specifies the number of times that a BlackBerry device user can enter an
incorrect password before a device deletes the data in the work space.
Related rules
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
If the Apply Work Space Password to Full Device rule is also set to Yes, all data on the
device is deleted.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Possible values
•
3 to 10
Default value
•
10
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
35
Policy and Profile Reference Guide
Password rule group
Maximum Password History rule
Description
This rule specifies the maximum number of previous passwords that a BlackBerry device
checks to prevent a user from reusing a work space password. If you set this rule to 0, the
device does not check previous passwords.
Related rules
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Possible values
•
0 to 15
Default value
•
0
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Minimum Password Complexity rule
Description
This rule specifies the minimum complexity of the work space password. If you set this
rule, a user must create a password that includes the types of characters that you specify.
Related rules
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
No restriction
•
At least 1 letter and 1 number
Possible values
36
Policy and Profile Reference Guide
Password rule group
•
At least 1 letter, 1 number, and 1 special character
•
At least 1 uppercase letter, 1 lowercase letter, 1 number, and 1 special character
Default value
•
No restriction
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Minimum Password Length rule
Description
This rule specifies the minimum length of the work space password.
Related rules
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Possible values
•
4 to 32
Default value
•
4
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Security Timeout rule
Description
This rule specifies the number of minutes of BlackBerry device user inactivity that must
elapse before the work space locks.
Related rules
If the Application Security Timer Reset rule is set to Allow, the device does not lock when
apps that can reset the security timer are running.
37
Policy and Profile Reference Guide
Password rule group
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
Possible values
Default value
Minimum requirements
Rule introduction
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
5 minutes
•
10 minutes
•
15 minutes
•
30 minutes
•
45 minutes
•
60 minutes
•
30 minutes for devices running the BlackBerry 10 OS
•
45 minutes for tablets running the BlackBerry PlayBook OS
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rules for Corporate and Regulated activation types
Apply Work Space Password to Full Device rule
Description
This rule specifies whether a BlackBerry Balance or regulated BlackBerry Balance device
applies the work space password to the full device. If you set this rule to Yes, the work
space password becomes the device password. If you set this rule to No, a user can
choose to set a different password for the device.
If you want to protect only the work space, set the Password Required for Work Space rule
to Yes and set this rule to No.
Related rules
38
This rule takes effect only if the Password Required for Work Space rule is set to Yes.
Policy and Profile Reference Guide
Password rule group
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Password Required for Work Space rule
Description
This rule specifies whether a BlackBerry Balance or regulated BlackBerry Balance device
requires a password for the work space. If you set this rule to Yes, a user must set a
password for the work space on the device.
Devices that only have a work space always require a password.
Related rules
Setting the Apply Work Space Password to Full Device rule to Yes applies the same
password to both the work space and the device. If the work space and the device have
the same password, unlocking the device also unlocks the work space but the work space
can be locked without locking the device.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Yes
•
No
•
Yes for devices running the BlackBerry 10 OS
•
No for tablets running the BlackBerry PlayBook OS
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
Default value
Minimum requirements
39
Policy and Profile Reference Guide
Rule introduction
Security rule group
•
BlackBerry Device Service 6.0
Security rule group
Rules for all activation types
Application Security Timer Reset rule
Description
This rule specifies whether apps can reset the security timer on a BlackBerry device to
prevent the device from locking after the period of user inactivity that you specify in the
Security Timeout rule or the user specifies in the Password Lock settings on the device
elapses. If you set this rule to Disallow, the device will lock without user interaction when
running apps that attempt to reset the security timer, such as apps that display navigation
information, slideshows, and videos. If you set this rule to Allow, the device will not lock
after the period of user inactivity elapses when running apps that can reset the security
timer.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Possible values
40
Policy and Profile Reference Guide
Security rule group
BlackBerry Bridge rule
Description
This rule specifies whether a BlackBerry 10 device user can use a BlackBerry PlayBook
tablet to access work data on a device using the BlackBerry Bridge app. If you set this rule
to Disallow, the user cannot use the tablet to access work data on the device using the
BlackBerry Bridge app.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Possible values
Development Mode Access to Work Space rule
Description
This rule specifies whether development mode can be used to allow software development
tools to connect to the work space on a BlackBerry device using a USB or Wi-Fi connection
and install apps directly in the work space. If you set this rule to Allow, users can use
software development tools to connect to the work space on the device and install apps
directly in the work space.
Related rules
This rule takes effect only if the Restrict Development Mode rule is set to No.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Possible values
41
Policy and Profile Reference Guide
Security rule group
Default value
•
Disallow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1.3
Display Owner Information on Lock Screen rule
Description
This rule specifies the owner information that a BlackBerry device displays when the
device is locked. The lock screen can display up to two lines of text.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Possible values
•
1 to 100 characters
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
IRM-Protected Email Messages rule
Description
This rule specifies whether a BlackBerry device user can read IRM-protected messages. If
you set this rule to Allow, the user can read IRM-protected messages and the device
enforces the rights given by the sender. If you set this rule to Disallow, the user cannot
read IRM-protected messages on the device.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Possible values
42
Policy and Profile Reference Guide
Security rule group
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Lock on Smart Card Removal rule
Description
This rule specifies whether the work space locks when a user removes the smart card from
the supported smart card reader or disconnects the supported smart card reader from the
device. If you set this rule to Allow or Required, a user might need the driver for the smart
card reader. Not all smart card reader drivers support smart card removal detection.
Related rules
On BlackBerry Balance and regulated BlackBerry Balance devices, this rule takes effect
only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
No
•
Required
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Possible values
Lock Screen Preview of Work Content rule
Description
This rule specifies whether a BlackBerry device displays a preview of work content when
the device is locked. On BlackBerry Balance and regulated BlackBerry Balance devices, if
you set this rule to Allow, the lock screen displays a preview of work content when the work
space is unlocked in the background. After the security timeout locks the work space, the
lock screen displays a notification that locked items are available. If you set this rule to
43
Policy and Profile Reference Guide
Security rule group
Disallow, the lock screen displays only a notification that locked items are available,
regardless of whether the work space is unlocked in the background. On work space only
devices, if you set this rule to Allow, the lock screen displays a preview of work content. If
you set this rule to Disallow, the lock screen displays only a notification that locked items
are available.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Possible values
Maximum Bluetooth Range rule
Description
This rule specifies the maximum power range that a BlackBerry Smart Card Reader uses
to send Bluetooth packets to a BlackBerry device or a computer. The permitted range is
between 30% and 100%. You can configure a higher power range to allow a BlackBerry
Smart Card Reader to send Bluetooth packets to a BlackBerry device or a computer over a
greater distance.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
30%
•
40%
•
50%
•
60%
•
70%
Possible values
44
Policy and Profile Reference Guide
Security rule group
•
80%
•
90%
•
100%
Default value
•
100%
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Media Card Encryption rule
Description
This rule specifies whether a BlackBerry device must encrypt all data on the media card
that is inserted in the device. The media card is disabled if another device encrypted the
data on it. If you set this rule to Yes, the device automatically encrypts all data on the
media card. If you set this rule to No, the device stores all data in an unencrypted format
on the media card.
Related rules
On work space only and regulated BlackBerry Balance devices, this rule takes effect only if
the Media Card rule is set to Allow.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Possible values
45
Policy and Profile Reference Guide
Security rule group
Network Access Control for Work Apps rule
Description
This rule specifies whether work apps on a BlackBerry device must connect to your
organization's network through the BlackBerry Device Service. Setting this rule to Yes also
permits BlackBerry PlayBook tablets to connect to your organization's network through
the BlackBerry Enterprise Server using a BlackBerry Bridge connection to a BlackBerry
smartphone running BlackBerry Device Software 5.0 to 7.1.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Possible values
Rule introduction
PIN Entry Mode rule
Description
This rule specifies the PIN entry mode that is required when a BlackBerry Smart Card
Reader connects to a BlackBerry device or a computer. The BlackBerry Device Service
enforces the PIN format required when the user types the smart card password during the
Bluetooth connection process.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Numeric
•
Alphanumeric lowercase
•
Alphanumeric mixed case
Possible values
46
Policy and Profile Reference Guide
Security rule group
Default value
•
Numeric
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Restrict Development Mode rule
Description
This rule specifies whether development mode is restricted for BlackBerry device users.
Development mode allows software development tools to connect to a device and also
allows you or a user to install apps directly on the device using a USB or Wi-Fi connection.
If you set this rule to Yes, users can only download and install apps from the BlackBerry
World storefront and you can also send apps to devices using the BlackBerry
Administration Service.
Related rules
If you set this rule to No, you can use the Development Mode Access to Work Space rule to
prevent users who have devices that are running BlackBerry 10 OS version 10.2 and later
from using development mode to install apps in the work space.
On regulated BlackBerry Balance devices, you can use the Install Apps From Other
Sources rule to prevent users from installing apps in the personal space from other
sources such as email attachments.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Possible values
Rule introduction
47
Policy and Profile Reference Guide
Security rule group
Smart Card Password Caching rule
Description
This rule specifies whether a BlackBerry device can cache the smart card password. If you
set this rule to Allow, the user can choose to cache the smart card password. If you set this
rule to Required, the smart card password is always cached. The cached password is
stored in the BlackBerry device keystore.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
•
Required
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Possible values
Smart Password Entry rule
Description
This rule specifies whether a BlackBerry device can use smart password entry with twofactor authentication. Smart password entry allows a user to enter numeric passwords on
the device without pressing the Alt key and automatically fills the device or work space
password field if the device password or work space password and the smart card
password are the same. If you set this rule to Allow, the user can use smart password entry
with two-factor authentication. If you set this rule to Required, the device always uses
smart password entry with two-factor authentication.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
Possible values
48
Policy and Profile Reference Guide
Security rule group
•
Disallow
•
Required
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Use BBM Protected rule
Description
This rule specifies whether BBM can use BBM Protected for message encryption. If you
set this rule to Yes, BBM uses BBM Protected to encrypt and decrypt messages
exchanged with contacts that have the Use BBM Protected rule enabled, and it uses
default BBM encryption for messages exchanged with other contacts. If you set this rule to
No, BBM always uses default BBM encryption.
BBM Protected is part of the eBBM Suite of products and may only be used if your
organization has purchased the required BBM Protected user licenses from BlackBerry or
an authorized reseller. Before you enable the Use BBM Protected rule, you must verify
that your organization has purchased the required BBM Protected user licenses. For more
information, visit www.blackberry.com/BBMProtected.
Related rules
On work space only and regulated BlackBerry Balance devices, if the BBM rule is set to
Disallow, this rule does not apply.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.2
•
BBM 10.3.30 for work space only devices
Possible values
49
Policy and Profile Reference Guide
Rule introduction
Security rule group
•
A version of BBM later than 10.3.30 for BlackBerry Balance and regulated BlackBerry
Balance devices
•
BlackBerry Enterprise Service 10 version 10.2 MR2
Voice Control rule
Description
This rule specifies whether a BlackBerry device user can use the voice control commands
on a device. If you set this rule to Allow all, the user can use all of the voice control
commands on the device. If you set this rule to Disallow for email and calendar, the user
cannot use any of the email and calendar voice control commands on the device. If you set
this rule to Allow only phone and device status, the user can use voice control commands
only for voice dialing and, on devices that are running BlackBerry 10 OS version 10.2 and
later, for checking device status.
For more information about voice control commands, see the user guide for the
BlackBerry device.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow all
•
Disallow for email and calendar
•
Allow only phone and device status
Default value
•
Allow all
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Possible values
Work Domains rule
Description
50
This rule specifies a list of domain names that a BlackBerry device identifies as work
resources. If you specify domain names in this rule, the device identifies data from a
computer in these domains as work data. Data sent from these domains to the device
using the Print To Go app is stored in the work space on the device. All of the subdomains
Policy and Profile Reference Guide
Security rule group
of the domain are included automatically. If you list multiple domain names, separate the
domain names with a comma (,), semicolon (;), or space. For example, if your organization
has multiple domains, type example.com, example.net, example.org.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Rules for Corporate activation type
Two-Factor Encryption Key Generation rule
Description
This rule specifies whether a BlackBerry PlayBook tablet bases the encryption key on only
the protected secret or both the protected secret and the password for the work space. If
you set this rule to No, the tablet bases the encryption key on the protected secret only. If
you set this rule to Yes, the tablet bases the encryption key on both the protected secret
and the password for the work space. If you set this rule to Yes, a user must type the
password for the tablet to start for the first time.
This rule applies only to tablets running the BlackBerry PlayBook OS.
Related rules
This rule takes effect only if the Password Required for Work Space rule is set to Yes.
Applicable activation
types
•
Work and personal - Corporate
Possible values
•
Yes
•
No
•
No
Default value
51
Policy and Profile Reference Guide
Security rule group
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Rule introduction
•
BlackBerry Device Service 6.0
WebGL rule
Description
This rule specifies whether a BlackBerry PlayBook tablet can use WebGL in the browser. If
you set this rule to Disallow, the browser cannot use WebGL and the tablet displays an
error message when the browser tries to visit a webpage that requests WebGL.
This rule applies only to tablets running the BlackBerry PlayBook OS.
Applicable activation
types
•
Work and personal - Corporate
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Rule introduction
•
BlackBerry Device Service 6.1
Rules for Corporate and Regulated activation types
Backup and Restore Work Space rule
Description
This rule specifies whether a BlackBerry device user can back up and restore the apps
and data that are located in the work space on a device using BlackBerry Link. If you set
this rule to Allow, the user can back up and restore the contents of the work space when
the user performs a backup or restore. If you set this rule to Disallow, the option to back up
and restore the contents of the work space is disabled.
Related rules
On regulated BlackBerry Balance devices, this rule takes effect only if the Backup and
Restore Device rule is set to Allow.
52
Policy and Profile Reference Guide
Security rule group
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Personal Apps Access to Work Contacts rule
Description
This rule specifies whether personal apps can access required data for work contacts on a
BlackBerry device. If you set this rule to All, all personal apps can access required data for
work contacts. If you set this rule to Only BlackBerry apps, some apps developed by
BlackBerry (Phone, BBM, Text Messages, Smart Tags, visual voicemail, and voice dialing)
can access required data for work contacts. If you set this rule to None, personal apps
cannot access data for work contacts.
On devices that are running BlackBerry 10 OS version 10.2.1 and later, if you set this rule
to All, users can use the "Copy to" and "Save to" options for work contacts in the Contacts
app.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
All
•
Only BlackBerry apps
•
None
Default value
•
All
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
53
Policy and Profile Reference Guide
Security rule group
Personal Space Data Encryption rule
Description
This rule specifies whether data encryption is turned on for the personal space on a
BlackBerry device. If you set this rule to Yes, data is encrypted in the personal space on
the device.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Rule introduction
Share Work Data During BBM Video Screen Sharing rule
Description
This rule specifies whether a BlackBerry device user can share work data on a device
using the BBM Video with Screen Share feature. If you set this rule to Allow, the user can
share all work data with other BBM Video chat participants. If you set this rule to Disallow,
the device locks the work space when the user uses BBM Video with Screen Share and the
user cannot unlock the work space until the screen sharing part of the BBM Video chat is
complete.
Related rules
On regulated BlackBerry Balance devices, if the BBM rule is set to Disallow, this rule does
not apply.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
54
Policy and Profile Reference Guide
Security rule group
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Voice Dictation in Work Apps rule
Description
This rule specifies whether a BlackBerry device user can use voice dictation in work apps.
If you set this rule to Allow, the user can use voice dictation in all apps that support this
feature. If you set this rule to Disallow, the user cannot use voice dictation in work apps.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Wipe the Work Space Without Network Connectivity rule
Description
This rule specifies the number of hours that must elapse without a BlackBerry device
connecting to your organization's network before the device deletes the data in the work
space. Use this rule to make the device delete the data in the work space if it cannot
receive updates or commands. If you set this rule to a null value, the device does not
delete the data in the work space if it cannot connect to your organization's network.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
2 to 8760 hours
55
Policy and Profile Reference Guide
Security rule group
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Work Apps Access to Shared Files or Content in the Personal Space rule
Description
This rule specifies whether work apps on a BlackBerry device can access shared files or
content that is located in the personal space if a user permits it. When a user installs a
work app, the device displays a message that provides the user with the option to allow or
deny the app's request to access shared files or content. If you set this rule to Disallow,
work apps cannot access shared personal files or content regardless of the user settings
on the device, and users cannot attach personal files to messages sent from a work
account or share personal files or content with work apps using the Share option.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Work Network Usage for Personal Apps rule
Description
56
This rule specifies whether personal apps on a BlackBerry device can use your
organization's VPN or Wi-Fi network to connect to the Internet. If you set this rule to Allow,
all personal apps can use your organization's network to connect to the Internet. If you set
this rule to Disallow, personal apps cannot use your organization's network to connect to
the Internet.
Policy and Profile Reference Guide
Security rule group
Related rules
Setting this rule to Disallow also prevents the BBM Video feature from using your
organization's network.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Rules for Work space only and Regulated activation
types
Backup and Restore Device rule
Description
This rule specifies whether a BlackBerry device user can back up and restore the apps
and data on a device using BlackBerry Link. If you set this rule to Allow, the user can back
up and restore apps and data on the device. If you set this rule to Disallow, the option to
back up and restore the device is disabled.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
57
Policy and Profile Reference Guide
Rule introduction
Security rule group
•
BlackBerry Enterprise Service 10 version 10.1
Computer Access to Device rule
Description
This rule specifies whether a computer can access content on a BlackBerry device using a
USB connection or the file-sharing option with a Wi-Fi connection. If you set this rule to
Disallow, the computer cannot access content on the device using a USB or Wi-Fi
connection.
Related rules
Setting this rule to Disallow also prevents the device from sharing media content with
DLNA Certified devices.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Display Organization Notice After Device Restart rule
Description
This rule specifies whether a BlackBerry device displays the organization notice each time
a user restarts the device. If you set this rule to Yes, after the user restarts the device, the
organization notice appears before the user is prompted for the device password.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Yes
•
No
•
No
Default value
58
Policy and Profile Reference Guide
Security rule group
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2 MR2
Media Card rule
Description
This rule specifies whether a BlackBerry device can access the media card. If you set this
rule to Disallow, the device cannot access the media card.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
SMS/MMS Signature rule
Description
This rule specifies the signature (for example, a web address or a short disclaimer) that is
appended to outgoing SMS text messages and MMS messages that a BlackBerry device
user sends from a device.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
1 to 50 characters
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
59
Policy and Profile Reference Guide
Rule introduction
Security rule group
•
BlackBerry Enterprise Service 10 version 10.2
Two-Factor Authentication rule
Description
This rule specifies whether a BlackBerry device user can use two-factor authentication to
unlock a device. If you set this rule to Disallow, two-factor authentication cannot be used
to unlock the device. If you set this rule to Allow, the user can choose to use two-factor
authentication to unlock device. If you set this rule to Required, two-factor authentication
must be used to unlock the device. This rule takes effect only if the user set a device
password or a work space password.
Related rules
On regulated BlackBerry Balance devices, if this rule is set to Allow or Required, the
Assign Two-Factor Authentication for Work rule specifies whether two-factor
authentication can be used to unlock the device, the work space, or both.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
•
Required
Default value
•
Allow
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2 MR1
Two-Factor Authentication Only for Work Space rule
Description
60
This rule specifies whether a BlackBerry device user can use only two-factor
authentication with no work space password to unlock the work space. If you set this rule
to Disallow, both the work space password and two-factor authentication must be used to
unlock the work space. If you set this rule to Allow, the user can choose to use the work
space password along with two-factor authentication to unlock the work space. If you set
this rule to Required, only two-factor authentication must be used to unlock the work
space.
Policy and Profile Reference Guide
Related rules
Security rule group
On devices that are running a version of BlackBerry 10 OS that is later than 10.2.1, this
rule takes effect only if the Two-Factor Authentication rule is set to Allow or Required.
On devices that are running BlackBerry 10 OS version 10.2.1 and earlier, this rule takes
effect only if the user turns on two-factor authentication on the device.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
•
Required
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Voice Dictation rule
Description
This rule specifies whether a BlackBerry device user can use voice dictation on a device. If
you set this rule to Allow, the user can use voice dictation in all apps that support this
feature. If you set this rule to Disallow, the user cannot use voice dictation on the device.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
61
Policy and Profile Reference Guide
Security rule group
Wipe the Device Without Network Connectivity rule
Description
This rule specifies the number of hours that must elapse without a BlackBerry device
connecting to your organization's network before all data on the device is deleted. Use this
rule to make the device delete all data if it cannot receive updates or commands. If you set
this rule to a null value, the device does not delete data if it cannot connect to your
organization's network.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
2 to 8760 hours
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Rules for Regulated activation type
Advanced Data at Rest Protection rule
Description
This rule specifies whether the work space on a BlackBerry device must use advanced
data at rest protection.
Applicable activation
types
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
62
Policy and Profile Reference Guide
Rule introduction
Security rule group
•
BlackBerry Enterprise Service 10 version 10.2
Advanced Data at Rest Protection Timeout rule
Description
This rule specifies the number of minutes after the work space locks that a BlackBerry
device turns on advanced data at rest protection for the work space. If you set this rule to
0, the device turns on advanced data at rest protection when the work space locks.
Related rules
This rule takes effect only if the Advanced Data at Rest Protection rule is set to Yes.
Applicable activation
types
•
Work and personal - Regulated
Possible values
•
0 to 1440 minutes
Default value
•
0
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Assign Two-Factor Authentication for Work rule
Description
This rule specifies whether a BlackBerry device user can use two-factor authentication
only for work space authentication. If you set this rule to Disallow, two-factor
authentication can be used to unlock the device but not the work space. If you set this rule
to Allow, the user can choose to use two-factor authentication for both the device and the
work space. If you set this rule to Required, two-factor authentication must be used to
unlock the work space.
Related rules
On devices that are running a version of BlackBerry 10 OS that is later than 10.2.1, this
rule takes effect only if the Two-Factor Authentication rule is set to Allow or Required.
On devices that are running BlackBerry 10 OS version 10.2.1 and earlier, this rule takes
effect only if the user turns on two-factor authentication on the device.
Applicable activation
types
•
Work and personal - Regulated
Possible values
•
Allow
63
Policy and Profile Reference Guide
Security rule group
•
Disallow
•
Required
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Two-Factor Authentication for Advanced Data at Rest Protection rule
Description
This rule specifies whether two-factor authentication must be used to protect the
encryption keys for advanced data at rest protection.
Related rules
This rule takes effect only if the Advanced Data at Rest Protection rule is set to Yes.
Applicable activation
types
•
Work and personal - Regulated
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
64
Policy and Profile Reference Guide
Software rule group
Software rule group
Rules for all activation types
External Email Address Indicator rule
Description
This rule specifies whether a BlackBerry device displays a warning indicator in work email
messages when a user adds an external email address as a recipient. If you set this rule to
Yes, the device displays a warning indicator unless the recipient's domain is listed in the
External Email Domain Allowed List rule. If you set this rule to No, the device does not
display a warning indicator when the user adds an external recipient to work email
messages.
Related rules
If you want the device to display a warning message instead, set the External Email
Address Warning Message rule to Yes and set this rule to No.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Possible values
External Email Address Warning Message rule
Description
This rule specifies whether a BlackBerry device displays a warning message when a user
attempts to send a work email message to external recipients. If you set this rule to Yes,
65
Policy and Profile Reference Guide
Software rule group
the device displays a warning message that lists all external recipients unless the
recipient's domain is listed in the External Email Domain Allowed List rule. If you set this
rule to No, the device does not display a warning message when the user attempts to send
the email message.
Related rules
If you want the device to display a warning indicator instead, set the External Email
Address Indicator rule to Yes and set this rule to No.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Possible values
External Email Domain Allowed List rule
Description
This rule specifies a list of external email domains that BlackBerry device users can send
work email messages to without the device displaying a warning. If you list multiple domain
names, separate the domain names with a comma (,), semicolon (;), or space.
Related rules
This rule takes effect only if the External Email Address Indicator rule or the External Email
Address Warning Message rule is set to Yes.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
66
Policy and Profile Reference Guide
Rule introduction
Software rule group
•
BlackBerry Enterprise Service 10 version 10.2
External Email Domain Restricted List rule
Description
This rule specifies a list of email domains that BlackBerry device users are not allowed to
send work email messages to. If a user attempts to send an email message to a recipient
with an email domain in this list, the user is notified that the email message cannot be sent
to that recipient and is returned to the message to edit the recipient list. If you list multiple
domain names, separate the domain names with a comma (,), semicolon (;), or space.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Find More Contact Details rule
Description
This rule specifies whether a BlackBerry device user can use the Find More Contact
Details setting in the Contacts app to allow a device to use cloud services to search for
additional contact information when saving a contact.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Possible values
67
Policy and Profile Reference Guide
Rule introduction
Software rule group
•
BlackBerry Enterprise Service 10 version 10.1
Forward or Add Recipients to Private Messages rule
Description
This rule specifies whether a BlackBerry device user can forward, or add new recipients
when replying to, email messages with "(PRIVATE EMAIL)" in the subject line. If you set
this to rule to Disallow and the user attempts to forward or send a private message to a
new recipient, the device displays a warning and does not send the message.
Applicable activation
types
•
Work and personal - Corporate
•
Work space only
•
Work and personal - Regulated
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Possible values
Rules for Corporate and Regulated activation types
BBM Video Access to Work Network rule
Description
This rule specifies whether the BBM Video feature on a BlackBerry device can use your
organization's Wi-Fi network, VPN, or the BlackBerry MDS Connection Service for
incoming and outgoing video chats.
Related rules
Setting the Work Network Usage for Personal Apps rule to Disallow also prevents the BBM
Video feature from using your organization's network, regardless of the setting for this rule.
On regulated BlackBerry Balance devices, if the BBM rule is set to Disallow, this rule does
not apply.
68
Policy and Profile Reference Guide
Software rule group
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Cloud Storage Access from Work Space rule
Description
This rule specifies whether the cloud storage apps developed by BlackBerry are available
in the work space on a BlackBerry device. If you set this rule to Disallow, the cloud storage
apps are removed from the work space on the device and they can be used only as
personal apps.
This rule is obsolete in BlackBerry 10 OS version 10.2.1.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
69
Policy and Profile Reference Guide
Software rule group
Open Links in Work Email Messages in the Personal Browser rule
Description
This rule specifies whether BlackBerry device users can use the browser in the personal
space to open links in work email messages. If you set this rule to Allow, links in work email
messages will open in the browser in the personal space by default and the device displays
a message that provides the user with the option to open the link in the browser in the work
space instead. Your organization may require intranet links to be opened in the browser in
the work space. If you set this rule to Disallow, links in work email messages will always
open in the browser in the work space.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.0
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Unified View for Work and Personal Accounts and Messages rule
Description
This rule specifies whether the BlackBerry Hub displays work and personal accounts and
messages together in a single view. If you set this rule to Disallow, the device must display
work accounts and messages in a separate view from personal accounts and messages in
the BlackBerry Hub.
Applicable activation
types
•
Work and personal - Corporate
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
•
Allow
Default value
70
Policy and Profile Reference Guide
Software rule group
Minimum requirements
•
BlackBerry 10 OS version 10.1.0.4160
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.0
Rules for Work space only and Regulated activation
types
BBM rule
Description
This rule specifies whether BBM is available on a BlackBerry device. If you set this rule to
Disallow, the device hides BBM.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
BBM Video/BBM Voice rule
Description
This rule specifies whether a BlackBerry device can use the BBM Video and BBM Voice
features. If you set this rule to Disallow, the device cannot use the BBM Video feature or
the BBM Voice feature.
Related rules
If the BBM rule is set to Disallow, this rule does not apply.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
71
Policy and Profile Reference Guide
Possible values
Software rule group
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
BlackBerry Maps rule
Description
This rule specifies whether BlackBerry Maps is available on a BlackBerry device. If you set
this rule to Disallow, the device hides BlackBerry Maps. On regulated BlackBerry Balance
devices, BlackBerry Maps is hidden in both the work space and the personal space.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
BlackBerry Protect rule
Description
This rule specifies whether a BlackBerry device can use BlackBerry Protect. If you set this
rule to Disallow, the device cannot use BlackBerry Protect.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
72
Policy and Profile Reference Guide
Possible values
Software rule group
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1.3
Hotspot Browser rule
Description
This rule specifies whether a BlackBerry device can use the Hotspot Browser when it
detects a hotspot. If you set this rule to Allow, the device prompts the user to log in to the
hotspot and automatically opens the Hotspot Browser. The Hotspot Browser always uses a
Wi-Fi connection, regardless of the settings for any other rules. If you set this rule to
Disallow, the device cannot connect to a hotspot using the Hotspot Browser.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
joyn rule
Description
This rule specifies whether a BlackBerry device can use the joyn app to send Rich
Communication Suite (RCS) messages. If you set this rule to Disallow, the device hides the
joyn app option. For example, users will not be able to send instant messages and share
files using joyn or use joyn video share during a voice call.
73
Policy and Profile Reference Guide
Software rule group
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
Media Sharing rule
Description
This rule specifies whether a BlackBerry device can share music, pictures, and videos over
a Wi-Fi connection with DLNA Certified devices. If you set this rule to Disallow, the device
cannot share music, pictures, and videos over a Wi-Fi connection with DLNA Certified
devices.
Related rules
Setting the Wi-Fi rule or the Computer Access to Device rule to Disallow also prevents the
device from sharing media content with DLNA Certified devices, regardless of the setting
for this rule.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
74
Policy and Profile Reference Guide
Software rule group
Miracast rule
Description
This rule specifies whether a BlackBerry device can send streaming video over a Wi-Fi
Direct connection to other Wi-Fi CERTIFIED Miracast devices. If you set this rule to
Disallow, the device cannot send streaming video using Miracast.
Related rules
Setting the Wi-Fi rule or the HDMI rule to Disallow also prevents the device from sending
streaming video using Miracast, regardless of the setting for this rule.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1.3
Non-Email Accounts rule
Description
This rule specifies whether a BlackBerry device user can add third-party accounts for
services such as Facebook, Twitter, LinkedIn, and Evernote to a device. If you set this rule
to Disallow, users can add only email accounts to the device.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
75
Policy and Profile Reference Guide
Rule introduction
Software rule group
•
BlackBerry Enterprise Service 10 version 10.1
Other Email Messaging Services rule
Description
This rule specifies whether a BlackBerry device can use email messaging services other
than the BlackBerry Device Service. If you set this rule to Disallow, only work email
accounts can be added to the device and any existing personal email accounts on the
device are deleted.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
PIN Messages rule
Description
This rule specifies whether a BlackBerry device can send and receive PIN messages. If you
set this rule to Disallow, the device cannot send or receive PIN messages.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
76
Policy and Profile Reference Guide
Rule introduction
Software rule group
•
BlackBerry Enterprise Service 10 version 10.1
SMS/MMS rule
Description
This rule specifies whether a BlackBerry device can send SMS text messages and MMS
messages. If you set this rule to Disallow, the device hides the option to send SMS and
MMS messages. This rule does not prevent users from receiving SMS and MMS messages.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
User-Created VPN Profiles rule
Description
This rule specifies whether a BlackBerry device user can create VPN profiles on a device.
If you set this rule to Disallow, the device can use only the work VPN profiles that you send
to it.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
77
Policy and Profile Reference Guide
Rule introduction
Software rule group
•
BlackBerry Enterprise Service 10 version 10.1
Wireless Service Provider Apps rule
Description
This rule specifies whether a BlackBerry device user can use apps that a wireless service
provider installed on a device. If you set this rule to Disallow, the wireless service provider
app icons are not visible on the device and the apps cannot be launched from another
app.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Wireless Software Updates rule
Description
This rule specifies whether a BlackBerry device can download BlackBerry Device Software
updates over the wireless network. If you set this rule to Allow all, the device can download
all software updates that BlackBerry or a wireless service provider makes available. If you
set this rule to Allow security updates only, the device can download only security-related
software updates that BlackBerry or the wireless service provider makes available. If you
set this rule to Disallow, the device cannot download any software updates over the
wireless network.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow all
•
Allow security updates only
•
Disallow
78
Policy and Profile Reference Guide
Software rule group
Default value
•
Allow all
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
YouTube for BlackBerry Devices rule
Description
This rule specifies whether a BlackBerry device user can use the YouTube for BlackBerry
Devices app. If you set this rule to Disallow, the user cannot use the YouTube for
BlackBerry Devices app and cannot share videos to YouTube.
Applicable activation
types
•
Work space only
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.1
Rules for Regulated activation type
Install Apps From Other Sources rule
Description
This rule specifies whether a BlackBerry device user can install apps in the personal space
without using BlackBerry World or development mode. If you set this rule to Allow, the user
can install apps in the personal space from other sources such as email attachments,
downloads through the browser, and media cards. If you set this rule to Disallow, the user
can install apps in the personal space only from BlackBerry World or by using
development mode, if development mode is not restricted.
79
Policy and Profile Reference Guide
Software rule group
Related rules
You can use the Restrict Development Mode rule to prevent users from using development
mode to install apps in the personal space.
Applicable activation
types
•
Work and personal - Regulated
Possible values
•
Allow
•
Disallow
Default value
•
Allow
Minimum requirements
•
BlackBerry 10 OS version 10.2.1
Rule introduction
•
BlackBerry Enterprise Service 10 version 10.2
80
Policy and Profile Reference Guide
Email profile settings
Profile settings
4
Email profile settings
Allowed Content Ciphers setting
Description
This setting specifies the encryption algorithms that a BlackBerry device can use to
encrypt S/MIME-protected email messages.
Possible values
•
AES (256-bit)
•
AES (192-bit)
•
AES (128-bit)
•
Triple DES
•
RC2
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Calendar Synchronization setting
Description
This setting specifies whether a BlackBerry device synchronizes calendar entries with the
messaging server.
Possible values
•
Yes
•
No
81
Policy and Profile Reference Guide
Email profile settings
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Contact Synchronization setting
Description
This setting specifies whether a BlackBerry device synchronizes contacts with a
messaging server.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Days to Synchronize setting
Description
The setting specifies the number of days in the past to synchronize email messages and
organizer data to a BlackBerry device.
Possible values
•
1 day
•
3 days
•
7 days
•
14 days
•
30 days
82
Policy and Profile Reference Guide
Email profile settings
•
No limit
Default value
•
30 days
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Digitally Signed S/MIME Messages setting
Description
This setting specifies whether a BlackBerry device sends all outgoing email messages with
a digital signature. If you set this setting to Allowed, a user can choose whether to digitally
sign outgoing email messages. If you set this setting to Required, a user must digitally sign
outgoing email messages. If you set this setting to Disallowed, a user cannot digitally sign
outgoing email messages
To send digitally signed email messages, a user must have their private key on their
device.
Related settings
If the S/MIME Messages setting is set to Disallowed, this setting is ignored.
If the S/MIME Messages setting is set to Required, and both this setting and the Encrypted
S/MIME Messages setting are set to Disallowed, the Encrypted S/MIME Messages setting
and this setting are ignored and the default setting of Allowed is used for both settings. For
more information about the relationship between these settings, see the BlackBerry
Device Service Solution Security Technical Overview.
Possible values
•
Allowed
•
Required
•
Disallowed
Default value
•
Allowed
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
83
Policy and Profile Reference Guide
Email profile settings
Email Synchronization setting
Description
This setting specifies whether a BlackBerry device synchronizes email messages with the
messaging server.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Encrypted S/MIME Messages setting
Description
This setting specifies whether a BlackBerry device encrypts all outgoing email messages
using S/MIME encryption. If you set this setting to Allowed, a user can choose whether or
not to encrypt outgoing email messages. If you set this setting to Required, a user must
encrypt outgoing email messages. If you set this setting to Disallowed, a user cannot
encrypt outgoing email messages.
To send encrypted email messages, a user must have the recipient's public key on the
device.
Related settings
If the S/MIME Messages setting is set to Disallowed, this setting is ignored.
If the S/MIME Messages setting is set to Required, and both this setting and the Digitally
Signed S/MIME Messages setting are set to Disallowed, the Digitally Signed S/MIME
Messages setting and this setting are ignored and the default setting of Allowed is used for
both settings. For more information on the relationship between these settings, see the
BlackBerry Device Service Solution Security Technical Overview.
Possible values
84
•
Allowed
•
Required
Policy and Profile Reference Guide
Email profile settings
•
Disallowed
Default value
•
Allowed
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Interval Between Synchronizations setting
Description
This setting specifies how often a BlackBerry device checks the messaging server for new
email messages.
Related settings
This setting has an effect only if the Push Enabled setting is set to No.
Possible values
•
Manual
•
5 minutes
•
15 minutes
•
30 minutes
•
1 hour
•
2 hours
•
4 hours
•
24 hours
Default value
•
15 minutes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
85
Policy and Profile Reference Guide
Email profile settings
Memo Synchronization setting
Description
This setting specifies whether a BlackBerry device synchronizes memo data with the
messaging server.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Push Enabled setting
Description
This setting specifies whether a messaging server can push email messages to a
BlackBerry device.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
86
Policy and Profile Reference Guide
Email profile settings
Require Manual Synchronization When Roaming
setting
Description
This setting specifies whether a user must start synchronization between a BlackBerry
device and a messaging server when the user is roaming.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
SCEP Profile setting
Description
This setting specifies the name of the SCEP profile associated with the Email profile that a
BlackBerry device uses for certificate-based authentication with the messaging server.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
Server Name setting
Description
This setting specifies the name of the messaging server.
87
Policy and Profile Reference Guide
Email profile settings
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Server Port setting
Description
This setting specifies the port used to connect to the messaging service.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Enterprise Service 10 version 10.1
Setting introduction
S/MIME Messages setting
Description
This setting specifies whether S/MIME is enabled on a BlackBerry device. If you set this
setting to Allowed, a user can choose whether or not to enable S/MIME on the device. If
you set this setting to Required, S/MIME is enabled on the device and cannot be disabled
by the user. If you set this setting to Disallowed, S/MIME is disabled on the device and
cannot be enabled by the user.
To send encrypted email messages, a user must have the recipient's public key on the
device. To send digitally signed email messages, a user must have their private key on
their device.
Related settings
This setting takes precedence over the Digitally Signed S/MIME Messages setting and the
Encrypted S/MIME Messages setting. For more information on the relationship between
these settings, see the BlackBerry Device Service Solution Security Technical Overview.
Possible values
•
88
Allowed
Policy and Profile Reference Guide
Email profile settings
•
Required
•
Disallowed
Default value
•
Allowed
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Task Synchronization setting
Description
This setting specifies whether a BlackBerry device synchronizes task data with the
messaging server.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Type setting
Description
This setting specifies the data synchronization protocol.
Possible values
•
Microsoft ActiveSync
•
IBM Notes Traveler
•
Microsoft ActiveSync
Default value
89
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
SCEP profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Use SSL setting
Description
This setting specifies whether a BlackBerry device must use SSL to connect to a
messaging server.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
SCEP profile settings
Automatic Renewal setting
Description
This setting specifies how many days before a certificate expires that automatic certificate
renewal occurs.
Default value
•
30
Minimum requirements
•
BlackBerry PlayBook OS 2.1
90
Policy and Profile Reference Guide
Setting introduction
SCEP profile settings
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Certificate Thumbprint setting
Description
This setting specifies the hexadecimal-encoded hash of the root certificate for the CA. You
can use the following algorithms to specify the thumbprint: MD5, SHA1, SHA-224,
SHA-256, SHA-384, and SHA-512. You must set a value for this setting to activate a
device successfully.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
Certification Authority Challenge Password setting
Description
This setting specifies the challenge password that a BlackBerry device uses for certificate
enrollment. Enter the same value in the Confirm certification authority challenge password
field. You must set a value for this setting to activate the device successfully.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
91
Policy and Profile Reference Guide
SCEP profile settings
Certification Authority Identifier setting
Description
This setting specifies the identifier for the CA instance. The CA that you use determines
the required value.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
ECC Strength setting
Description
This setting specifies the elliptic curve that a BlackBerry device uses to generate a client
key pair. The elliptic curve defines the strength of the client key pair. You must select an
elliptic curve that is supported by your CA.
Related settings
The Key Algorithm setting affects this setting. The device uses this setting if you set the
Key Algorithm setting to ECC.
Possible values
•
SECT163K1
•
SECT283K1
•
SECP192R1
•
SECP256R1
•
SECP384R1
•
SECP521R1
Default value
•
SECP521R1
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
92
Policy and Profile Reference Guide
Setting introduction
SCEP profile settings
•
BlackBerry Device Service 6.1
Key Algorithm setting
Description
This setting specifies the algorithm that a BlackBerry device uses to generate the client
key pair. You must select an algorithm that is supported by your CA.
Possible values
•
None
•
RSA
•
ECC
Default value
•
RSA
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
Private Key Export setting
Description
This setting specifies whether a user can export the SCEP private key from the keystore on
a BlackBerry device.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
93
Policy and Profile Reference Guide
SCEP profile settings
RSA Strength setting
Description
This setting specifies the RSA strength that a BlackBerry device uses to generate the client
key pair. You must enter a key strength that is supported by your CA.
Related settings
The Key Algorithm setting affects this setting. The device uses this setting if you set the
Key Algorithm setting to RSA.
Default value
•
1024
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
SCEP Service URL setting
Description
This setting specifies the URL of the SCEP service. The URL should include the protocol,
domain, port number, and SCEP path (CGI path that is defined in the SCEP specification).
You must set a value for this setting to activate the BlackBerry device successfully.
SCEP HTTPS URLs are not supported by current device OS versions but will be supported
in a future BlackBerry 10 OS release.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
94
Policy and Profile Reference Guide
SCEP profile settings
Specify Encryption Algorithm setting
Description
This setting specifies the encryption algorithm that a BlackBerry device uses for the
certificate enrollment request.
Possible values
•
None
•
3DES CBC
•
AES 128
•
AES 196
•
AES 256
Default value
•
3DES CBC
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
Specify Hash Function setting
Description
This setting specifies the hash function that a BlackBerry device uses for the certificate
enrollment request.
Possible values
•
None
•
SHA1
•
SHA-224
•
SHA-256
•
SHA-384
•
SHA-512
•
SHA1
Default value
95
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
Wi-Fi profile settings
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Wi-Fi profile settings
Access Point Handover setting
Description
This setting specifies whether the Wi-Fi network supports access point handover.
Possible values
•
Yes
•
No
Default value
•
Yes
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Associated Proxy Profile setting
Description
This setting specifies the name of the proxy profile associated with the Wi-Fi profile that a
device uses to make connections through a proxy server.
This setting only applies to Wi-Fi connections for devices running BlackBerry 10 OS. Use
the Wi-Fi profile proxy settings for tablets running BlackBerry PlayBook OS 2.1 and earlier.
Default value
96
•
Null value
Policy and Profile Reference Guide
Wi-Fi profile settings
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Associated SCEP Profile setting
Description
This setting specifies the name of the SCEP profile associated with the Wi-Fi profile that a
BlackBerry device uses for certificate-based authentication.
Related settings
The EAP Security setting affects this setting. A device uses this setting if you set the EAP
Security setting to PEAP, TTLS, or TLS.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
Band Type setting
Description
This setting specifies the band of the Wi-Fi network.
Possible values
•
Dual
•
2.4 GHz
•
5.0 GHz
Default value
•
Dual
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
97
Policy and Profile Reference Guide
Wi-Fi profile settings
Client Certificate Source setting
Description
This setting specifies the source of the client certificate. If the Wi-Fi profile includes an
associated SCEP profile, the device uses a certificate obtained using a SCEP profile.
Otherwise, you can select Smart card or Other. If you select Smart card, the device uses a
certificate from a smart card. If you select Other, the device uses a certificate that the user
added to the device.
Smart card support is available for devices that run a version of BlackBerry 10 OS that is
later than 10.2.1.
Possible values
•
SCEP
•
Smart card
•
Other
Default value
•
Other
Minimum requirements
•
BlackBerry 10 OS version 10.2
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.2
Data Security Level setting
Description
This setting specifies the domain in the work space where the Wi-Fi profile is stored when
the work space uses advanced data at rest protection. This setting is valid only if the
Advanced Data at Rest Protection IT policy rule is set to Yes. If this setting is set to Always
available, the profile is stored in the Startup domain and is available when the work space
is locked. If this setting is set to Available after authentication, the profile is stored in the
Operational domain and is available after the work space is unlocked once until the device
restarts. If this setting is set to Available only when work space unlocked, the profile is
stored in the Lock domain and can be used for Wi-Fi connections only when the work
space is unlocked.
Possible values
•
Always available
•
Available after authentication
98
Policy and Profile Reference Guide
Wi-Fi profile settings
•
Available only when work space unlocked
Default value
•
Always available
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.2
Default Gateway setting
Description
This setting specifies the default gateway in dot-decimal notation (for example, 10.0.0.1).
Related settings
The Enable DHCP setting affects this setting. Do not use this setting if you set the Enable
DHCP setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Domain Suffix setting
Description
This setting specifies the FQDN of the DNS suffix.
Related settings
The Enable DHCP setting affects this setting. Do not use this setting if you set the Enable
DHCP setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
99
Policy and Profile Reference Guide
Setting introduction
Wi-Fi profile settings
•
BlackBerry Device Service 6.0
EAP Inner Link Security setting
Description
This setting specifies the inner authentication that a Wi-Fi network uses.
If you want to use PAP for inner authentication, set the value for this setting to Auto.
Related settings
The EAP Security setting affects this setting. A BlackBerry device uses this setting if you
set the EAP Security setting to TTLS, PEAP, or EAP-FAST.
Possible values
•
Auto
•
MS-CHAPv2
•
GTC
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
EAP Security setting
Description
This setting specifies the EAP security method that a Wi-Fi network uses.
Related settings
The Link Security setting affects this setting. The BlackBerry device uses this setting only if
you set the Link Security setting to WPA-Enterprise or WPA2-Enterprise.
Possible values
•
PEAP
•
TTLS
•
EAP-FAST
•
TLS
100
Policy and Profile Reference Guide
Wi-Fi profile settings
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
EAP-FAST Provisioning Method setting
Description
This setting specifies the provisioning method for a Wi-Fi network that uses EAP-FAST
security.
Related settings
The EAP Security setting affects this setting. A BlackBerry device uses this setting if you
set the EAP Security setting to EAP-FAST.
Possible values
•
Anonymous
•
Authenticated
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
Enable DHCP setting
Description
This setting specifies whether a Wi-Fi network supports DHCP.
Possible values
•
Yes
•
No
•
Yes
Default value
101
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
Wi-Fi profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Enable IPv6 setting
Description
This setting specifies whether IPv6 is enabled.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Hidden SSID setting
Description
This setting specifies whether the Wi-Fi network hides the SSID.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
102
Policy and Profile Reference Guide
Wi-Fi profile settings
IP Address setting
Description
This setting specifies the IP address of the host for the Wi-Fi network.
Related settings
The Enable DHCP setting affects this setting. A BlackBerry device uses this setting if you
set the Enable DHCP setting.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Link Security setting
Description
This setting specifies the type of security that the Wi-Fi network uses.
Related settings
The EAP Security setting affects this setting. If you set this setting to WPA-Enterprise or
WPA2-Enterprise, the EAP Security setting must not be set to a null value.
Possible values
•
None
•
WPA-Enterprise
•
WPA-Personal
•
WPA2-Enterprise
•
WPA2-Personal
•
WEP personal
Default value
•
None
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
103
Policy and Profile Reference Guide
Rule introduction
Wi-Fi profile settings
•
BlackBerry Device Service 6.0
Preshared Key setting
Description
This setting specifies a preshared key for a Wi-Fi network.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Preshared Key Type setting
Description
This setting specifies the preshared key type for a Wi-Fi network.
Possible values
•
ASCII
•
HEX
Default value
•
ASCII
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Primary DNS setting
Description
104
This setting specifies the address of the primary DNS in dot-decimal notation.
Policy and Profile Reference Guide
Wi-Fi profile settings
Related settings
The Enable DHCP setting affects this setting. Do not use this setting if you set the Enable
DHCP setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Proxy Password setting
Description
This setting specifies a password that a proxy server uses to authenticate a BlackBerry
PlayBook tablet.
This setting only applies to Wi-Fi connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Related setting
The Use HTTP Proxy setting affects this setting. The tablet uses this setting if you set the
Use HTTP Proxy setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
Proxy Port setting
Description
This setting specifies the port that the proxy server uses.
This setting only applies to Wi-Fi connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
105
Policy and Profile Reference Guide
Wi-Fi profile settings
Related settings
The Use HTTP Proxy setting affects this setting. A tablet uses this setting if you set the Use
HTTP Proxy setting to Yes.
Possible values
•
0 to 65535
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
Proxy Server setting
Description
This setting specifies the address of the proxy server in dot-decimal format or as an FQDN.
This setting only applies to Wi-Fi connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Related settings
The Use HTTP Proxy setting affects this setting. A tablet uses this setting only if you set the
Use HTTP Proxy setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
Proxy User Name setting
Description
This setting specifies the username that the proxy server uses to authenticate a
BlackBerry PlayBook tablet.
This setting only applies to Wi-Fi connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
106
Policy and Profile Reference Guide
Wi-Fi profile settings
Related settings
The Use HTTP Proxy setting affects this setting. The tablet uses this setting if you set the
Use HTTP Proxy setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
Secondary DNS setting
Description
This setting specifies the address of the secondary DNS in dot-decimal notation.
Related settings
The Enable DHCP setting affects this setting. Do not use this setting if you set the Enable
DHCP setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
SSID setting
Description
This setting specifies the network name of a Wi-Fi network and its wireless access points.
The SSID is case sensitive and must contain alphanumeric characters.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Rule introduction
107
Policy and Profile Reference Guide
Wi-Fi profile settings
Subnet Mask setting
Description
This setting specifies the subnet mask in dot-decimal notation.
Related settings
The Enable DHCP setting affects this setting. A BlackBerry device does not use this setting
if you set the Enable DHCP setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Trusted Certificate Source setting
Description
This setting specifies the source of the trusted certificate. If you select Trusted certificate
store, the BlackBerry device can connect to a Wi-Fi network that uses any certificate in the
Wi-Fi Trusted Certificate store.
Possible values
•
None
•
Trusted certificate store
Default value
•
None
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Enterprise Service 10 version 10.0
Setting introduction
108
Policy and Profile Reference Guide
Wi-Fi profile settings
Use HTTP Proxy setting
Description
This setting specifies whether a Wi-Fi connection uses an HTTP proxy.
This setting only applies to Wi-Fi connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
User Can Edit setting
Description
This setting specifies the Wi-Fi settings that a BlackBerry device user can change.
Possible values
•
Read only
•
Credentials only
Default value
•
Read only
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
109
Policy and Profile Reference Guide
Wi-Fi profile settings
User Name setting
Description
This setting specifies a user name for a Wi-Fi network that uses EAP security.
Related settings
The EAP Security setting affects this setting. A BlackBerry device uses this setting if you
set the EAP Security setting to TTLS.
The EAP Inner Link Security setting affects this setting. The device uses this setting if you
set the EAP Inner Link Security setting to Auto or GTC.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
User Password setting
Description
This setting specifies a password for a Wi-Fi network that uses EAP security.
Related settings
The EAP Security setting affects this setting. A BlackBerry device uses this setting if you
set the EAP Security setting to TTLS.
The EAP Inner Link Security setting affects this setting. The device uses this setting if you
set the EAP Inner Link Security setting to Auto or GTC.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
110
Policy and Profile Reference Guide
Wi-Fi profile settings
VPN Profile setting
Description
This setting specifies the name of the VPN profile associated with the Wi-Fi profile that a
device uses to make connections through a VPN.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry PlayBook OS 2.0
•
BlackBerry Device Service 6.0
WEP Key setting
Description
This setting specifies a password for a WEP key.
Related settings
The Link Security setting affects this setting. A BlackBerry device uses this setting if you
set the Link Security setting to WEP personal.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
111
Policy and Profile Reference Guide
VPN profile settings
VPN profile settings
Associated Proxy Profile setting
Description
This setting specifies the name of the proxy profile associated with the VPN profile that a
device uses to make connections through a proxy server.
This setting only applies to VPN connections for devices running BlackBerry 10 OS. Use
the VPN profile proxy settings for tablets running BlackBerry PlayBook OS 2.1 and earlier.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Associated SCEP Profile setting
Description
This setting specifies the name of the SCEP profile associated with the VPN profile that a
BlackBerry device uses for certificate-based authentication.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to PKI, XAUTH-PKI, or EAP-TLS.
The Gateway Authentication Type setting affects this setting. The device uses this setting if
you set the Gateway Authentication Type setting to PKI.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.1
Setting introduction
112
Policy and Profile Reference Guide
VPN profile settings
Authentication ID setting
Description
This setting specifies the authentication ID for the VPN gateway.
Related settings
The Gateway Type setting affects this setting. The BlackBerry device uses this setting only
if you set the Gateway Type setting to Juniper MAG Series or Juniper SA Series (SSL VPN),
Microsoft IKEv2 VPN server, or Generic IKEv2 VPN server.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Authentication ID Type setting
Description
This setting specifies the authentication ID type for a VPN gateway.
Related settings
The Gateway Type setting affects this setting. The BlackBerry device uses this setting only
if you set the Gateway Type setting to Juniper MAG Series or Juniper SA Series (SSL VPN),
Microsoft IKEv2 VPN server, or Generic IKEv2 VPN server.
Possible values
•
IPv4
•
Fully qualified domain name
•
Email address
•
Identity certificate distinguished name
•
Identity certificate general name
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
113
Policy and Profile Reference Guide
Setting introduction
VPN profile settings
•
BlackBerry Device Service 6.0
Authentication Type setting
Description
This setting specifies the authentication type for the VPN gateway.
Related settings
The Gateway Type setting affects this setting. The gateway type determines which
authentication types are supported.
Possible values
•
PSK
•
PKI
•
XAUTH-PSK
•
XAUTH-PKI
•
EAP-TLS
•
EAP-MS-CHAPv2
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Automatically Determine IP setting
Description
This setting specifies whether a BlackBerry device automatically determines the IP
configuration for the VPN gateway.
Possible values
•
Yes
•
No
•
No
Default value
114
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
VPN profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Client Certificate Source setting
Description
This setting specifies the source of the client certificate. If the VPN profile includes an
associated SCEP profile, the device uses a certificate obtained using a SCEP profile.
Otherwise, you can select Smart card or Other. If you select Smart card, the device uses a
certificate from a smart card. If you select Other, the device uses a certificate that the user
added to the device.
Smart card support is available for devices that run a version of BlackBerry 10 OS that is
later than 10.2.1.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to PKI or XAUTH-PKI.
Possible values
•
SCEP
•
Smart card
•
Other
Default value
•
Other
Minimum requirements
•
BlackBerry 10 OS version 10.2
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.2
Custom IKE DH Provider setting
Description
This setting specifies the name of the provider for custom IKE DH.
Related settings
This setting applies only if you select one of the custom options in the IKE DH Group
setting.
115
Policy and Profile Reference Guide
VPN profile settings
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.1
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.1
Data Security Level setting
Description
This setting specifies the domain in the work space where the VPN profile is stored when
the work space uses advanced data at rest protection. This setting is valid only if the
Advanced Data at Rest Protection IT policy rule is set to Yes. If this setting is set to Always
available, the profile is stored in the Startup domain and is available when the work space
is locked. If this setting is set to Available after authentication, the profile is stored in the
Operational domain and is available after the work space is unlocked once until the device
restarts. If this setting is set to Available only when work space unlocked, the profile is
stored in the Lock domain and can be used for VPN connections only when the work space
is unlocked.
Possible values
•
Always available
•
Available after authentication
•
Available only when work space unlocked
Default value
•
Always available
Minimum requirements
•
A version of BlackBerry 10 OS later than 10.2.1
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.2
Disable Banner setting
Description
This setting specifies whether a BlackBerry device blocks the VPN banner.
Possible values
•
Yes
•
No
116
Policy and Profile Reference Guide
VPN profile settings
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Display VPN Information on Device setting
Description
This setting specifies whether VPN information is displayed on the device. If you select
Visible, most of the VPN profile information appears on the device. If you select Invisible,
only the profile name appears on the device. If you select Credentials only, the profile
name and the credential fields appear on the device.
Possible values
•
Visible
•
Invisible
•
Credentials only
Default value
•
Visible
Minimum requirements
•
BlackBerry 10 OS version 10.1
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.1
Domain Suffix setting
Description
This setting specifies the domain suffix for the VPN gateway.
Related settings
The Dynamically Determine DNS setting affects this setting. A BlackBerry device uses this
setting if you set the Dynamically Determine DNS setting to No.
Default value
•
Null value
117
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
VPN profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
DPD Frequency setting
Description
This setting specifies the DPD frequency. A BlackBerry device supports a minimum setting
of 10 seconds. If you set an unsupported value or a null value, the device default value is
used.
Possible values
•
1 to 2147483647 seconds
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Dynamically Determine DNS setting
Description
This setting specifies whether a BlackBerry device dynamically determines the DNS of the
VPN gateway.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
118
Policy and Profile Reference Guide
Setting introduction
VPN profile settings
•
BlackBerry Device Service 6.0
EAP Identity setting
Description
This setting specifies the EAP identity that a BlackBerry device uses to authenticate with a
VPN gateway.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to EAP-TLS.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Gateway Authentication ID setting
Description
This setting specifies the Gateway Authentication ID for the VPN gateway.
Related settings
The Gateway Authentication ID Type setting affects this setting. The BlackBerry device
uses this setting if you set the Gateway Authentication ID Type setting to Fully qualified
domain name or Email address.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
119
Policy and Profile Reference Guide
VPN profile settings
Gateway Authentication ID Type setting
Description
This setting specifies the gateway authentication ID type of a VPN gateway.
Related settings
The Gateway Type setting affects this setting. The BlackBerry device uses this setting only
if you set the Gateway Type setting to Juniper MAG Series or Juniper SA Series (SSL VPN),
Microsoft IKEv2 VPN server, or Generic IKEv2 VPN server.
Possible values
•
IPv4
•
Fully qualified domain name
•
Email address
•
Identity certificate distinguished name
•
Identity certificate general name
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Gateway Authentication Type setting
Description
This setting specifies the gateway authentication type for the VPN gateway.
Related settings
The Gateway Type setting affects this setting. The BlackBerry device uses this setting only
if you set the Gateway Type setting to Juniper MAG Series or Juniper SA Series (SSL VPN),
Microsoft IKEv2 VPN server, or Generic IKEv2 VPN server.
Possible values
•
None
•
PSK
•
PKI
•
Null value
Default value
120
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
VPN profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Gateway Preshared Key setting
Description
This setting specifies the gateway preshared key for the VPN gateway.
Related settings
The Gateway Authentication Type setting affects this setting. The BlackBerry device uses
this setting only if you set the Gateway Authentication Type setting to PSK.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Gateway Type setting
Description
This setting specifies the type of VPN client that the VPN client on a BlackBerry device
emulates.
Possible values
•
Check Point VPN-1
•
Cisco VPN 3000 Series Concentrator
•
Cisco Secure PIX Firewall
•
Cisco IOS Easy VPN
•
Cisco ASA Series
•
Juniper SRX Series (IPsec VPN)
•
Juniper MAG Series or Juniper SA Series (SSL VPN)
•
Microsoft IKEv2 VPN server
•
Generic IKEv2 VPN server
121
Policy and Profile Reference Guide
VPN profile settings
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Group Password setting
Description
This setting specifies the group password that a VPN gateway uses to authenticate a
BlackBerry device.
Related settings
The Authentication Type setting affects this setting. The device uses this setting only if you
set the Authentication Type setting to XAUTH-PSK.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Group User Name setting
Description
This setting specifies the user name for the group that the VPN gateway uses to
authenticate a BlackBerry device.
Related settings
The Authentication Type setting affects this setting. A device uses this setting if you set the
Authentication Type setting to PSK or XAUTH-PSK.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
122
Policy and Profile Reference Guide
Setting introduction
VPN profile settings
•
BlackBerry Device Service 6.0
Hard Token setting
Description
This setting specifies whether a user must use a hardware token to authenticate with a
VPN gateway.
Related settings
The Authentication Type setting affects this setting. The BlackBerry device uses this
setting if you set the Authentication Type setting to XAUTH-PSK or XAUTH-PKI.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IKE Cipher setting
Description
This setting specifies the algorithm that a BlackBerry device uses to generate a shared
secret key.
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
Possible values
•
None
•
DES (56-bit key)
•
Triple DES (168-bit key)
•
AES (128-bit key)
•
AES (192-bit key)
•
AES (256-bit key)
123
Policy and Profile Reference Guide
VPN profile settings
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IKE DH Group setting
Description
This setting specifies the DH group that a BlackBerry device uses to generate key material.
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
If you select one of the Custom settings, you must specify the provider in the Custom IKE
DH Provider setting.
Possible values
•
1 to 26, except 3, 4, and 6
•
Custom 1 to Custom 5
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IKE Hash setting
Description
This setting specifies the hash function that a BlackBerry device uses with IKE.
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
124
Policy and Profile Reference Guide
Possible values
VPN profile settings
•
None
•
MD5
•
AES-XCBC
•
SHA-1
•
SHA-256
•
SHA-384
•
SHA-512
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IKE Lifetime setting
Description
This setting specifies the lifetime of the IKE connection. If you set an unsupported value or
a null value, the BlackBerry device default value is used.
Possible values
•
1 to 2147483647 seconds
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IKE PRF setting
Description
This setting specifies the PRF that a BlackBerry device uses with IKE.
125
Policy and Profile Reference Guide
VPN profile settings
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
Possible values
•
None
•
HMAC
•
HMAC-MD5
•
AES-XCBC
•
HMAC-SHA-1
•
HMAC-SHA-256
•
HMAC-SHA-384
•
HMAC-SHA-512
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IPSEC Cipher setting
Description
This setting specifies the algorithm that a BlackBerry device uses with IPsec.
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
Possible values
•
None
•
DES (56-bit key)
•
Triple DES (168-bit key)
•
AES (128-bit key)
•
AES (192-bit key)
•
AES (256-bit key)
•
Null value
Default value
126
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
VPN profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
IPSEC DH Group setting
Description
This setting specifies the DH group that a BlackBerry device uses with IPsec.
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
Possible values
•
0 to 26, except 3, 4, and 6
Default value
•
0
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IPSEC Hash setting
Description
This setting specifies the hash function that a BlackBerry device uses with IPsec.
Related settings
The Manual Algorithm Selection setting affects this setting. The device uses this setting if
you set the Manual Algorithm Selection setting to Yes.
Possible values
•
None
•
MD5
•
AES-XCBC
•
SHA-1
•
SHA-256
127
Policy and Profile Reference Guide
VPN profile settings
•
SHA-384
•
SHA-512
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
IPSEC Lifetime setting
Description
This setting specifies the lifetime of the IPsec connection. If you set an unsupported value
or a null value, the BlackBerry device default value is used.
Possible values
•
1 to 2147483647 seconds
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Manual Algorithm Selection setting
Description
This setting specifies whether you must set the cryptographic algorithms for the VPN
gateway.
Possible values
•
Yes
•
No
•
No
Default value
128
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
VPN profile settings
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
MSCHAPv2 EAP Identity setting
Description
This setting specifies the MS-CHAPv2 EAP identity that a BlackBerry device uses to
authenticate with a VPN gateway.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to EAP-MS-CHAPv2.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
MSCHAPv2 Password setting
Description
This setting specifies the MS-CHAPv2 password that a BlackBerry device uses to
authenticate with a VPN gateway.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to EAP-MS-CHAPv2.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
129
Policy and Profile Reference Guide
VPN profile settings
MSCHAPv2 User Name setting
Description
This setting specifies the MS-CHAPv2 user name that a BlackBerry device uses to
authenticate with a VPN gateway.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to EAP-MS-CHAPv2.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
NAT Keep Alive setting
Description
This setting specifies how often a device sends a NAT keep-alive packet. If you set an
unsupported value or a null value, the BlackBerry device default value is used.
Possible values
•
1 to 2147483647 seconds
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Password setting
Description
130
This setting specifies the password that a BlackBerry device uses to authenticate with a
VPN gateway.
Policy and Profile Reference Guide
Related settings
VPN profile settings
The Authentication Type setting affects this setting. The device uses this setting only if you
set the Authentication Type setting to XAUTH-PSK or XAUTH-PKI.
The Hard Token setting affects this setting. The device uses this setting only if you set the
Hard Token setting to No.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Perfect Forward Secrecy setting
Description
This setting specifies whether the VPN gateway supports PFS.
Related settings
The IPSEC DH Group setting affects this setting. If you set this setting to Yes, the IPSEC DH
Group setting must not be set to 0 or a null value.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Preshared Key setting
Description
This setting specifies the preshared key that a VPN gateway uses to authenticate a
BlackBerry device.
131
Policy and Profile Reference Guide
VPN profile settings
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to PSK.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Primary DNS setting
Description
This setting specifies the primary DNS of the VPN gateway.
Related settings
The Dynamically Determine DNS setting affects this setting. A BlackBerry device uses this
setting if you set the Dynamically Determine DNS setting to No.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Private IP setting
Description
This setting specifies the private IP of the VPN gateway.
Related settings
The Automatically Determine IP setting affects this setting. A BlackBerry device uses this
setting only if you set the Automatically Determine IP setting to No.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
132
Policy and Profile Reference Guide
Setting introduction
VPN profile settings
•
BlackBerry Device Service 6.0
Private IP Mask setting
Description
This setting specifies the IP mask for the VPN gateway.
Related settings
The Automatically Determine IP setting affects this setting. A BlackBerry device uses this
setting if you set the Automatically Determine IP setting to No.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Proxy Password setting
Description
This setting specifies the password that a BlackBerry PlayBook tablet uses with the VPN
proxy.
This setting only applies to VPN connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Related settings
The Use HTTP Proxy setting affects this setting. The tablet uses this setting if you set the
Use HTTP Proxy setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
133
Policy and Profile Reference Guide
VPN profile settings
Proxy Port setting
Description
This setting specifies the port of the VPN gateway proxy.
This setting only applies to VPN connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Related settings
The Use HTTP Proxy setting affects this setting. A tablet uses this setting if you set the Use
HTTP Proxy setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
Proxy Server setting
Description
This setting specifies the address of the proxy server in dot-decimal format or as an FQDN.
This setting only applies to VPN connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Related settings
The Use HTTP Proxy setting affects this setting. A tablet uses this setting if you set the Use
HTTP Proxy setting to Yes.
Default values
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
134
Policy and Profile Reference Guide
VPN profile settings
Proxy User Name setting
Description
This setting specifies the user name that a BlackBerry PlayBook tablet uses with the VPN
proxy.
This setting only applies to VPN connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Related settings
The Use HTTP Proxy setting affects this setting. The tablet uses this setting if you set the
Use HTTP Proxy setting to Yes.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
Secondary DNS setting
Description
This setting specifies the secondary DNS of the VPN gateway.
Related settings
The Dynamically Determine DNS setting affects this setting. A BlackBerry device uses this
setting if you set the Dynamically Determine DNS setting to No.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
135
Policy and Profile Reference Guide
VPN profile settings
Server Address setting
Description
This setting specifies the address of a VPN gateway in dot-decimal notation or as an
FQDN.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Split Tunneling setting
Description
This setting specifies whether the VPN gateway supports split tunneling.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Subnet setting
Description
This setting specifies the subnet of the VPN gateway.
Related settings
The Automatically Determine IP setting affects this setting. A BlackBerry device uses this
setting if you set the Automatically Determine IP setting to No.
136
Policy and Profile Reference Guide
VPN profile settings
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Subnet Mask setting
Description
This setting specifies the subnet mask for the VPN gateway.
Related settings
The Automatically Determine IP setting affects this setting. A BlackBerry device uses this
rule if you set the Automatically Determine IP setting to No.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Trusted Certificate Source setting
Description
This setting specifies the source of the trusted certificate. If you select Trusted certificate
store, the BlackBerry device can connect to a VPN that uses any certificate in the VPN
Trusted Certificate store.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to PKI or XAUTH-PKI.
Possible values
•
None
•
Trusted certificate store
•
None
Default value
137
Policy and Profile Reference Guide
Minimum requirements
Setting introduction
VPN profile settings
•
BlackBerry PlayBook OS 2.1
•
BlackBerry 10 OS version 10.0
•
BlackBerry Enterprise Service 10 version 10.0
Use HTTP Proxy setting
Description
This setting specifies whether the VPN gateway uses an HTTP proxy.
This setting only applies to VPN connections for tablets running BlackBerry PlayBook OS
2.1 and earlier. Use an associated proxy profile for proxy settings for devices running
BlackBerry 10 OS.
Possible values
•
Yes
•
No
Default value
•
No
Minimum requirements
•
BlackBerry PlayBook OS 2.0
Setting introduction
•
BlackBerry Device Service 6.0
User Can Edit setting
Description
This setting specifies the VPN settings that a BlackBerry device user can change.
Possible values
•
Read only
•
Credentials only
Default value
•
Read only
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
138
Policy and Profile Reference Guide
Setting introduction
Proxy profile settings
•
BlackBerry Device Service 6.0
User Name setting
Description
This setting specifies the user name that a BlackBerry device uses to authenticate with a
VPN gateway.
Related settings
The Authentication Type setting affects this setting. The device uses this setting if you set
the Authentication Type setting to XAUTH-PSK or XAUTH-PKI.
Default value
•
Null value
Minimum requirements
•
BlackBerry PlayBook OS 2.0
•
BlackBerry 10 OS version 10.0
•
BlackBerry Device Service 6.0
Setting introduction
Proxy profile settings
BlackBerry devices running BlackBerry 10 OS use the proxy profile settings. Tablets running the BlackBerry PlayBook OS
use the proxy settings in a Wi-Fi profile or VPN profile.
Exclusion List setting
Description
This setting specifies a list of addresses that are excluded from the proxy profile.
BlackBerry devices can connect to these addresses directly without using the proxy
server. Specify the addresses in IP format or FQDN format and separate the addresses
with a semicolon (;).
Related settings
The Proxy Profile Type setting affects this setting. This setting is available only if the Proxy
Profile Type setting is set to Manual configuration.
Default value
•
Null value
139
Policy and Profile Reference Guide
Proxy profile settings
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Host setting
Description
This setting specifies the address of the proxy host server. The host can be specified in IP
or FQDN format.
Related settings
The Proxy Profile Type setting affects this setting. This setting is available only if the Proxy
Profile Type setting is set to Manual configuration.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
PAC URL setting
Description
This setting specifies the URL for the PAC file.
Related settings
The Proxy Profile Type setting affects this setting. This setting is available only if the Proxy
Profile Type setting is set to PAC configuration.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
140
Policy and Profile Reference Guide
Proxy profile settings
Password setting
Description
This setting specifies the password required to access the HTTP proxy server. Enter the
same value in the Confirm password field.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Port setting
Description
This setting specifies the port used by the proxy host server.
Related settings
The Proxy Profile Type setting affects this setting. This setting is available only if the Proxy
Profile Type setting is set to Manual configuration.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
Type setting
Description
This setting specifies whether the profile uses a PAC file to set proxy information or
whether the host, port, and exclusion list of the proxy server are set manually in the profile.
Possible values
•
Manual configuration
•
PAC configuration
•
PAC configuration
Default value
141
Policy and Profile Reference Guide
Proxy profile settings
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
User setting
Description
This setting specifies the username required to access the HTTP proxy server.
Default value
•
Null value
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
User Can Edit setting
Description
This setting specifies which fields the user can change. If you set this option to Credentials
only, users can change the username and password. If you set this rule to Read only, users
cannot change the settings.
Possible values
•
Credentials only
•
Read only
Default value
•
Read only
Minimum requirements
•
BlackBerry 10 OS version 10.0
Setting introduction
•
BlackBerry Enterprise Service 10 version 10.0
142
Policy and Profile Reference Guide
Product documentation
5
To read the following guides or additional related materials, visit docs.blackberry.com/BES10.
Category
Resource
Description
Overview
Introducing BlackBerry
Enterprise Service 10
•
Quick, visual introduction to BlackBerry Enterprise Service
10 at a high level
What's New in BlackBerry
Enterprise Service 10 Quick
Reference
•
Summary of new features, enhancements, and updates in
BlackBerry Enterprise Service 10
BlackBerry Enterprise Service
10 Product Overview
•
Introduction to BlackBerry Enterprise Service 10 and its
features
•
Finding your way through the documentation
•
Architecture
Enterprise Solution
Comparison Chart
•
Comparison of what features are available across different
BlackBerry enterprise solutions
Supported Features by Device
Type
•
Comparison of what features are supported for each type of
device in BlackBerry Enterprise Service 10
BlackBerry Enterprise Service
10 Architecture and Data Flow
Quick Reference Guide
•
Descriptions of BlackBerry Enterprise Service 10
components
•
Descriptions of activation and email data flows for different
types of devices
Release notes
BlackBerry Enterprise Service
10 Release Notes
•
Descriptions of known issues and potential workarounds
Installation and
upgrade
BlackBerry Enterprise Service
10 Compatibility Matrix
•
Software that is compatible with BlackBerry Enterprise
Service 10
143
Policy and Profile Reference Guide
Category
Configuration
Administration
Resource
Description
BlackBerry Enterprise Service
10 Performance Calculator
•
Tool to estimate the hardware required to support a given
workload for BlackBerry Enterprise Service 10
BlackBerry Enterprise Service
10 Installation Guide
•
System requirements
•
Installation instructions
BlackBerry Enterprise Service
10 Upgrade Guide
•
System requirements
•
Upgrade instructions
BlackBerry Enterprise Service
10 Licensing Guide
•
Descriptions of different types of licenses
•
Instructions for activating and managing licenses in
BlackBerry Management Studio
BlackBerry Enterprise Service
10 Configuration Guide
•
Instructions for how to configure server components before
you start administering users and their devices
BlackBerry Management
Studio Basic Administration
Guide
•
Basic administration for all supported device types, including
BlackBerry 10 devices, BlackBerry PlayBook tablets, iOS
devices, Android devices, and BlackBerry 7.1 and earlier
devices
•
Instructions for creating and managing user accounts in
multiple Services
•
Instructions for managing multiple devices for each user
account
BlackBerry Device Service
•
Advanced Administration Guide
Advanced administration for BlackBerry 10 devices and
BlackBerry PlayBook tablets
•
Instructions for creating user accounts, groups, roles, and
administrator accounts
•
Instructions for activating devices
•
Instructions for creating and sending IT policies and profiles
•
Instructions for managing apps on devices
Universal Device Service
•
Advanced Administration Guide
144
Advanced administration for iOS and Android devices
Policy and Profile Reference Guide
Category
Security
Resource
Description
•
Instructions for creating user accounts, groups, and
administrator accounts
•
Instructions for activating devices
•
Instructions for creating and sending IT policies and profiles
•
Instructions for managing apps on devices
•
Descriptions of IT policy rules for iOS and Android devices
BlackBerry Device Service
Policy and Profile Reference
Guide
•
Descriptions of IT policy rules and profile settings for
BlackBerry 10 devices and BlackBerry PlayBook tablets
BlackBerry Device Service
Solution Security Technical
Overview
•
Description of the security maintained by the BlackBerry
Device Service, BlackBerry Infrastructure, and BlackBerry
10 devices and BlackBerry PlayBook tablets to protect data
and connections
•
Description of the BlackBerry 10 OS
•
Description of the BlackBerry PlayBook OS
•
Description of how work data is protected on BlackBerry 10
devices and BlackBerry PlayBook tablets when you use the
BlackBerry Device Service
•
Description of the security maintained by the Universal
Device Service, BlackBerry Infrastructure, and work spaceenabled devices to protect work space data at rest and in
transit
•
Description of how work space apps are protected on work
space-enabled devices when you use the Universal Device
Service
Secure Work Space for iOS and
Android Security Note
145
Policy and Profile Reference Guide
Provide feedback
To provide feedback on this content, visit www.blackberry.com/docsfeedback.
146
6
Policy and Profile Reference Guide
Glossary
7
A2DP
Advanced Audio Distribution Profile
AES
Advanced Encryption Standard
AES-XCBC
Advanced Encryption Standard extended cipher block chaining
ASCII
American Standard Code for Information Interchange
AVRCP
Audio/Video Remote Control Profile
CA
certification authority
CBC
cipher block chaining
CCL
context collection library
CGI
Common Gateway Interface
DES
Data Encryption Standard
DH
Diffie-Hellman
DHCP
Dynamic Host Configuration Protocol
DNS
Domain Name System
DPD
Dead Peer Detection
EAP
Extensible Authentication Protocol
EAP-FAST
Extensible Authentication Protocol Flexible Authentication via Secure Tunneling
EAP-MS-CHAP
Extensible Authentication Protocol Microsoft Challenge Handshake Authentication Protocol
EAP-TLS
Extensible Authentication Protocol Transport Layer Security
ECC
Elliptic Curve Cryptography
FAST
Flexible Authentication via Secure Tunneling
FQDN
fully qualified domain name
GPS
Global Positioning System
GTC
Generic Token Card
HDMI
High-Definition Multimedia Interface
147
Policy and Profile Reference Guide
HFP
Hands-Free Profile
HMAC
keyed-hash message authentication code
HTTP
Hypertext Transfer Protocol
HTTPS
Hypertext Transfer Protocol over Secure Sockets Layer
IKE
Internet Key Exchange
IP
Internet Protocol
IPsec
Internet Protocol Security
IRM
information rights management
MAP
Message Access Profile
MD5
Message-Digest Algorithm, version 5
MMS
Multimedia Messaging Service
MS-CHAP
Microsoft Challenge Handshake Authentication Protocol
NAT
network address translation
NFC
Near Field Communication
OBEX
Object Exchange
OPP
Object Push Profile
PAC
proxy auto-configuration
PAN
Personal Area Networking
PAP
Push Access Protocol
PBAP
Phone Book Access Profile
PEAP
Protected Extensible Authentication Protocol
PFS
Perfect Forward Secrecy
PIN
personal identification number
PKI
Public Key Infrastructure
PRF
pseudorandom function family
PSK
pre-shared key
RC
Rivest's Cipher
RCS
Rich Communication Suite
SCEP
simple certificate enrollment protocol
148
Policy and Profile Reference Guide
SHA
Secure Hash Algorithm
S/MIME
Secure Multipurpose Internet Mail Extensions
SMS
Short Message Service
space
A space is a distinct area of the device that enables the segregation and management of
different types of data, applications, and network connections. Different spaces can have
different rules for data storage, application permissions, and network routing. Spaces were
formerly known as perimeters.
SPP
Serial Port Profile
SSID
service set identifier
SSL
Secure Sockets Layer
SSP
secure simple pairing
TLS
Transport Layer Security
TTLS
Tunneled Transport Layer Security
USB
Universal Serial Bus
VPN
virtual private network
WEP
Wired Equivalent Privacy
WPA
Wi-Fi Protected Access
xAuth
Extended Authentication
149
Policy and Profile Reference Guide
Legal notice
8
©2014 BlackBerry. All rights reserved. BlackBerry® and related trademarks, names, and logos are the property of
BlackBerry Limited and are registered and/or used in the U.S. and countries around the world.
Bluetooth is a trademark of Bluetooth SIG. Check Point and VPN-1 are trademarks of Check Point Software Technologies
Ltd. Cisco, Cisco IOS, and PIX are trademarks of Cisco Systems, Inc. and/or its affiliates in the United States and certain
other countries. DLNA Certified is a trademark of the Digital Living Network Alliance. Evernote is a trademark of Evernote
Corporation. Facebook is a trademark of Facebook, Inc. HDMI is a trademark of HDMI Licensing, LLC. IBM and Notes are
trademarks of International Business Machines Corporation. joyn is a trademark of GSMA. Juniper is a trademark of
Juniper Networks, Inc. LinkedIn is a trademark of LinkedIn Corporation. Microsoft and ActiveSync are trademarks of
Microsoft Corporation. RSA is a trademark of RSA Security. Twitter is a trademark of Twitter, Inc. WebGL is a trademark of
the Khronos Group Inc. Wi-Fi, Wi-Fi CERTIFIED Miracast, Miracast, Wi-Fi Direct, WPA, and WPA2 are trademarks of the WiFi Alliance. YouTube is a trademark of Google Inc. All other trademarks are the property of their respective owners.
This documentation including all documentation incorporated by reference herein such as documentation provided or
made available at www.blackberry.com/go/docs is provided or made accessible "AS IS" and "AS AVAILABLE" and without
condition, endorsement, guarantee, representation, or warranty of any kind by BlackBerry Limited and its affiliated
companies ("BlackBerry") and BlackBerry assumes no responsibility for any typographical, technical, or other
inaccuracies, errors, or omissions in this documentation. In order to protect BlackBerry proprietary and confidential
information and/or trade secrets, this documentation may describe some aspects of BlackBerry technology in generalized
terms. BlackBerry reserves the right to periodically change information that is contained in this documentation; however,
BlackBerry makes no commitment to provide any such changes, updates, enhancements, or other additions to this
documentation to you in a timely manner or at all.
This documentation might contain references to third-party sources of information, hardware or software, products or
services including components and content such as content protected by copyright and/or third-party websites
(collectively the "Third Party Products and Services"). BlackBerry does not control, and is not responsible for, any Third
Party Products and Services including, without limitation the content, accuracy, copyright compliance, compatibility,
performance, trustworthiness, legality, decency, links, or any other aspect of Third Party Products and Services. The
inclusion of a reference to Third Party Products and Services in this documentation does not imply endorsement by
BlackBerry of the Third Party Products and Services or the third party in any way.
EXCEPT TO THE EXTENT SPECIFICALLY PROHIBITED BY APPLICABLE LAW IN YOUR JURISDICTION, ALL CONDITIONS,
ENDORSEMENTS, GUARANTEES, REPRESENTATIONS, OR WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED,
INCLUDING WITHOUT LIMITATION, ANY CONDITIONS, ENDORSEMENTS, GUARANTEES, REPRESENTATIONS OR
WARRANTIES OF DURABILITY, FITNESS FOR A PARTICULAR PURPOSE OR USE, MERCHANTABILITY, MERCHANTABLE
QUALITY, NON-INFRINGEMENT, SATISFACTORY QUALITY, OR TITLE, OR ARISING FROM A STATUTE OR CUSTOM OR A
COURSE OF DEALING OR USAGE OF TRADE, OR RELATED TO THE DOCUMENTATION OR ITS USE, OR PERFORMANCE
OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY PRODUCTS AND SERVICES
REFERENCED HEREIN, ARE HEREBY EXCLUDED. YOU MAY ALSO HAVE OTHER RIGHTS THAT VARY BY STATE OR
PROVINCE. SOME JURISDICTIONS MAY NOT ALLOW THE EXCLUSION OR LIMITATION OF IMPLIED WARRANTIES AND
CONDITIONS. TO THE EXTENT PERMITTED BY LAW, ANY IMPLIED WARRANTIES OR CONDITIONS RELATING TO THE
150
Policy and Profile Reference Guide
DOCUMENTATION TO THE EXTENT THEY CANNOT BE EXCLUDED AS SET OUT ABOVE, BUT CAN BE LIMITED, ARE
HEREBY LIMITED TO NINETY (90) DAYS FROM THE DATE YOU FIRST ACQUIRED THE DOCUMENTATION OR THE ITEM
THAT IS THE SUBJECT OF THE CLAIM.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, IN NO EVENT SHALL
BLACKBERRY BE LIABLE FOR ANY TYPE OF DAMAGES RELATED TO THIS DOCUMENTATION OR ITS USE, OR
PERFORMANCE OR NON-PERFORMANCE OF ANY SOFTWARE, HARDWARE, SERVICE, OR ANY THIRD PARTY
PRODUCTS AND SERVICES REFERENCED HEREIN INCLUDING WITHOUT LIMITATION ANY OF THE FOLLOWING
DAMAGES: DIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, INDIRECT, SPECIAL, PUNITIVE, OR AGGRAVATED
DAMAGES, DAMAGES FOR LOSS OF PROFITS OR REVENUES, FAILURE TO REALIZE ANY EXPECTED SAVINGS,
BUSINESS INTERRUPTION, LOSS OF BUSINESS INFORMATION, LOSS OF BUSINESS OPPORTUNITY, OR CORRUPTION
OR LOSS OF DATA, FAILURES TO TRANSMIT OR RECEIVE ANY DATA, PROBLEMS ASSOCIATED WITH ANY
APPLICATIONS USED IN CONJUNCTION WITH BLACKBERRY PRODUCTS OR SERVICES, DOWNTIME COSTS, LOSS OF
THE USE OF BLACKBERRY PRODUCTS OR SERVICES OR ANY PORTION THEREOF OR OF ANY AIRTIME SERVICES, COST
OF SUBSTITUTE GOODS, COSTS OF COVER, FACILITIES OR SERVICES, COST OF CAPITAL, OR OTHER SIMILAR
PECUNIARY LOSSES, WHETHER OR NOT SUCH DAMAGES WERE FORESEEN OR UNFORESEEN, AND EVEN IF
BLACKBERRY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.
TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW IN YOUR JURISDICTION, BLACKBERRY SHALL HAVE NO
OTHER OBLIGATION, DUTY, OR LIABILITY WHATSOEVER IN CONTRACT, TORT, OR OTHERWISE TO YOU INCLUDING
ANY LIABILITY FOR NEGLIGENCE OR STRICT LIABILITY.
THE LIMITATIONS, EXCLUSIONS, AND DISCLAIMERS HEREIN SHALL APPLY: (A) IRRESPECTIVE OF THE NATURE OF
THE CAUSE OF ACTION, DEMAND, OR ACTION BY YOU INCLUDING BUT NOT LIMITED TO BREACH OF CONTRACT,
NEGLIGENCE, TORT, STRICT LIABILITY OR ANY OTHER LEGAL THEORY AND SHALL SURVIVE A FUNDAMENTAL
BREACH OR BREACHES OR THE FAILURE OF THE ESSENTIAL PURPOSE OF THIS AGREEMENT OR OF ANY REMEDY
CONTAINED HEREIN; AND (B) TO BLACKBERRY AND ITS AFFILIATED COMPANIES, THEIR SUCCESSORS, ASSIGNS,
AGENTS, SUPPLIERS (INCLUDING AIRTIME SERVICE PROVIDERS), AUTHORIZED BLACKBERRY DISTRIBUTORS (ALSO
INCLUDING AIRTIME SERVICE PROVIDERS) AND THEIR RESPECTIVE DIRECTORS, EMPLOYEES, AND INDEPENDENT
CONTRACTORS.
IN ADDITION TO THE LIMITATIONS AND EXCLUSIONS SET OUT ABOVE, IN NO EVENT SHALL ANY DIRECTOR,
EMPLOYEE, AGENT, DISTRIBUTOR, SUPPLIER, INDEPENDENT CONTRACTOR OF BLACKBERRY OR ANY AFFILIATES OF
BLACKBERRY HAVE ANY LIABILITY ARISING FROM OR RELATED TO THE DOCUMENTATION.
Prior to subscribing for, installing, or using any Third Party Products and Services, it is your responsibility to ensure that
your airtime service provider has agreed to support all of their features. Some airtime service providers might not offer
Internet browsing functionality with a subscription to the BlackBerry® Internet Service. Check with your service provider for
availability, roaming arrangements, service plans and features. Installation or use of Third Party Products and Services with
BlackBerry's products and services may require one or more patent, trademark, copyright, or other licenses in order to
avoid infringement or violation of third party rights. You are solely responsible for determining whether to use Third Party
Products and Services and if any third party licenses are required to do so. If required you are responsible for acquiring
them. You should not install or use Third Party Products and Services until all necessary licenses have been acquired. Any
Third Party Products and Services that are provided with BlackBerry's products and services are provided as a
convenience to you and are provided "AS IS" with no express or implied conditions, endorsements, guarantees,
representations, or warranties of any kind by BlackBerry and BlackBerry assumes no liability whatsoever, in relation
thereto. Your use of Third Party Products and Services shall be governed by and subject to you agreeing to the terms of
151
Policy and Profile Reference Guide
separate licenses and other agreements applicable thereto with third parties, except to the extent expressly covered by a
license or other agreement with BlackBerry.
Certain features outlined in this documentation require a minimum version of BlackBerry Enterprise Server, BlackBerry
Desktop Software, and/or BlackBerry Device Software.
The terms of use of any BlackBerry product or service are set out in a separate license or other agreement with BlackBerry
applicable thereto. NOTHING IN THIS DOCUMENTATION IS INTENDED TO SUPERSEDE ANY EXPRESS WRITTEN
AGREEMENTS OR WARRANTIES PROVIDED BY BLACKBERRY FOR PORTIONS OF ANY BLACKBERRY PRODUCT OR
SERVICE OTHER THAN THIS DOCUMENTATION.
BlackBerry Limited
2200 University Avenue East
Waterloo, Ontario
Canada N2K 0A7
BlackBerry UK Limited
200 Bath Road
Slough, Berkshire SL1 3XE
United Kingdom
Published in Canada
152
Was this manual useful for you? yes no
Thank you for your participation!

* Your assessment is very important for improving the work of artificial intelligence, which forms the content of this project

Download PDF

advertising