BlackBerry Forums Support Community               

Closed Thread
 
LinkBack Thread Tools
Old 04-10-2008, 06:58 AM   #1 (permalink)
Knows Where the Search Button Is
 
Join Date: Dec 2005
Location: uk
Model: 8800
Carrier: vodafone
Posts: 45
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default Media card encryption

Please Login to Remove!

Hi

We are just looking at enabling media card access via policy and just had a couple of thoughts.

1. If you choose to encrypt the card using "user password", what happens if the user forgets the password? Can they still access the card once we've reset the password?

2. If we choose "device encryption" what happens if the device breaks? Can we put the card in a new device and read the contents?

Thanks
Mark.
Offline  
Old 04-10-2008, 07:42 AM   #2 (permalink)
BBF Moderator
 
akosnitzky's Avatar
 
Join Date: Jul 2005
Location: Southern Florida
Model: 9650
OS: 6.0.0.333
Carrier: Verizon BIS
Posts: 14,484
Post Thanks: 6
Thanked 7 Times in 7 Posts
Default

Wirelessly posted (Verizon 8830)

Yes and yes
__________________
------
Follow @akosnitzky on Twitter

LET'S GO CANES!
Offline  
Old 04-10-2008, 08:22 AM   #3 (permalink)
Knows Where the Search Button Is
 
Join Date: Dec 2005
Location: uk
Model: 8800
Carrier: vodafone
Posts: 45
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default thanks for the reply.

I'm surprised you can put it into another device. How does that work if its encrypted with the device?

cheers
Offline  
Old 04-10-2008, 08:26 AM   #4 (permalink)
Crimson Tide Moderator
 
JSanders's Avatar
 
Join Date: Oct 2004
Location: North of the moss line
Model: 9xx0
OS: 7.0sumtin
PIN: t low
Carrier: Verizon
Posts: 41,907
Post Thanks: 60
Thanked 244 Times in 182 Posts
Default

I am not so sure about this, especially #1, that the data can still be accessed AFTER the user forgets the password. Perhaps so, but I would wait for other user feedback here.
Offline  
Old 04-13-2008, 03:22 PM   #5 (permalink)
Talking BlackBerry Encyclopedia
 
Mark_Venture's Avatar
 
Join Date: Nov 2005
Location: Delaware
Model: 8900
Carrier: T-Mobile (w) - Verizon (P)
Posts: 313
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

i've had to do testing on this for the customer I support...

there are various ways to encrypt...

If you choose to encrypt based on user password, the card can be put in other hand helds and used... assuming the same user password is used on the device...

i.e. User has BB 8830 with password set as "mypwd1"... that device breaks, warrantly replacement is put in... he sets password on the new device as "mypwd1" and puts that same microsd in... The card's data is accessable.

There is another level of encryption that is based on the device... in this mode, if the user's device breaks... the info on the MicroSD is not accessable in the replacement device.
__________________
Work T-Mobile 8900, 8320, 8120 & 8220 - Personal Verizon 9550, 9630, 9530, 8130 & 8330

-> Posting and you! <-a MUST Watch for all
Offline  
Old 05-21-2008, 09:05 PM   #6 (permalink)
New Member
 
Join Date: Oct 2005
Model: 7230
Carrier: t-mobile
Posts: 11
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

what about encrypting the data from the card. it looks like the only thing that is encrypted are pictures or music that is downloaded. what about using it as a USB mass storage device? I would like to lock down the card so if you pull it out, everything is inaccessable.

anyone find a way to do that?
Offline  
Old 05-22-2008, 11:15 AM   #7 (permalink)
Thumbs Must Hurt
 
Join Date: Jul 2006
Model: 8310
Carrier: ROGERS
Posts: 111
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

That's not possible, I have had many conversations with RIM regarding this. You can encrypt the card so it has various level of access while in another device, but if you don't have the desktop software installed (which our company doesn't) you can simply remove the card, put it in a media reader and BAM, full access.

Please, someone prove me wrong here, I have locked down the cards and USB mass storage for that very reason, if there is a way to have true encryption directly on the card itself without having to use the desktop software that would be great.
__________________
BES 4.1.5 (2 BES servers, 1 physical, 1 VM)
Exchange 2003 SP2
BESMgmt on SQL 2005 remote cluster (Physical)
900+ users
Offline  
Old 05-22-2008, 11:38 AM   #8 (permalink)
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Post Thanks: 0
Thanked 4 Times in 3 Posts
Default

I swore when I was testing this if you set the encryption it puts all the files in a RIM format with a .rem file extension. I pulled the MD and used a reader and could see the files and copy them was unable to open them. Not a big issue as at the time it was only music / picture files which I could care less if their encrypted but now with the ability to save documents to the MD I will be revisiting and testing this further.
Offline  
Old 05-22-2008, 04:46 PM   #9 (permalink)
Thumbs Must Hurt
 
Join Date: Jul 2006
Model: 8310
Carrier: ROGERS
Posts: 111
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Jletendre I didn't have the privledge of meeting you at the WES 2008 Boxtone lounge but I thank you for some of the posts you have submitted (especially the ones that have helped me out!).

If anyone can confirm whether or not you can truly encrypt the data on the card so that it is only accessible in the Blackberry (not when the card is transfered to a reader and not so that the desktop software is required) I would greatly appreciated it.
__________________
BES 4.1.5 (2 BES servers, 1 physical, 1 VM)
Exchange 2003 SP2
BESMgmt on SQL 2005 remote cluster (Physical)
900+ users
Offline  
Old 05-23-2008, 08:54 AM   #10 (permalink)
BlackBerry Extraordinaire
 
Frank Castle's Avatar
 
Join Date: Jul 2005
Location: MA
Model: 9930
PIN: PM Me!
Carrier: VZW
Posts: 1,073
Post Thanks: 0
Thanked 4 Times in 3 Posts
Default

Thanks .. I'm sure we likely passed each other more then once as I was around the lounge a few times and often with other BBF members.

I'll keep you posted as I have to revisit this and beat it to death for our security group so I will be running a range of tests. I'm updating to SP 5 this weekend so unsure if the policy options changed.
Offline  
Old 05-23-2008, 05:16 PM   #11 (permalink)
New Member
 
Join Date: May 2005
Model: 8820
Carrier: Rogers
Posts: 14
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Some KB articles with a bit of info:
Encrypted files stored on the microSD media card appear as .rem files
http://www.blackberry.com/btsc/searc...200%2062801797

Media card encryption modes
http://www.blackberry.com/btsc/searc...200%2062801797

How to encrypt files on a media card
BlackBerry Search Results


I am going to test the encryption modes and what they do exactly when I get home with my spare SD card.
Offline  
Old 05-26-2008, 09:54 AM   #12 (permalink)
Thumbs Must Hurt
 
Join Date: Jul 2006
Model: 8310
Carrier: ROGERS
Posts: 111
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Will you post your results for us please?
__________________
BES 4.1.5 (2 BES servers, 1 physical, 1 VM)
Exchange 2003 SP2
BESMgmt on SQL 2005 remote cluster (Physical)
900+ users
Offline  
Old 06-03-2008, 12:46 PM   #13 (permalink)
Thumbs Must Hurt
 
Join Date: Jul 2006
Model: 8310
Carrier: ROGERS
Posts: 111
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Has anyone made any progress with this?
__________________
BES 4.1.5 (2 BES servers, 1 physical, 1 VM)
Exchange 2003 SP2
BESMgmt on SQL 2005 remote cluster (Physical)
900+ users
Offline  
Old 11-05-2008, 06:36 PM   #14 (permalink)
Thumbs Must Hurt
 
siemp's Avatar
 
Join Date: May 2005
Location: Amsterdam
Model: 9000
Carrier: Vodafone
Posts: 65
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

There is quite some info here:
How to encrypt internal and external file systems on BlackBerry smartphones

Question: Is encryption for the SD card 256AES?
Offline  
Old 11-16-2008, 12:48 PM   #15 (permalink)
New Member
 
Join Date: Nov 2008
Model: 9000
PIN: N/A
Carrier: Telefonica O2 UK
Posts: 1
Post Thanks: 0
Thanked 0 Times in 0 Posts
Default

Hi

Im very new to BB so still finding my round. I have a BB Bold 9000,I also have a Nokia E90. On the Nokia I have a 3rd party softeware that encrypts the files I import to the programme. It will only allow me access it via my password. This programme completly encrypts them, even if I move it from device to device/pc or even if insert in a card reader. Are there any 3rd party softwares can be installed on the BB?

Last edited by ebie3164 : 11-16-2008 at 12:49 PM.
Offline  
Closed Thread


Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On





Copyright 2004-2014 BlackBerryForums.com.
The names RIM and BlackBerry are registered Trademarks of BlackBerry Inc.