Hi all,

First post here, most probably a stupid one because I'm only an end-user

Our BES (4.1) is running with AES encryption and original Blackberry devices only. I'm trying to add my Nokia E61 the server now but therefore it's necessary to change the encryption settings to "3DES and AES".

My question now is, if it's possible to change these settings without re-activating all the already existing devices (that's what our BES admins told me)?

Thanks for your help in advance.

Minelar

Nope, you need to bring online a new server with the dual encryption and put your account on that one. Otherwise I believe everyone else must reactivate.

You don't need to re-activate. You just need to create a new encryption key.

On the device go to the security general settings and scroll down to the IT policy name at the bottom of the screen.

Once you've hovered over this press the trackwheel in and you'll get the option to generate a new encryption key

Sfez.

hi

Our BES 4.1 is set at "3DES only". Would changing it to "Both 3DES & AES" require all our users to recradle the handheld or perform a wireless activation?

There is this line in the BES4 admin guide that is scaring us off from changing it ...

Page 62 "Changing encryption algorithms stops basic operation of the handheld. Users must recradle the handheld or perform a wireless enterprise activation to send and receive messages on the handheld again"

We have a similar scenario in our environment. When we upgraded to 4.1.3, one of our servers changed it's Encryption Algorithm. I know this because prior to 4.1.3, we could move users between BES's without issue. I called RIM and they said that if we change the algorithm on one of the servers, we would "wait and hope that all handhelds regenerate their keys and start mail flow again". Otherwise, we'd have to reactivate all handhelds.

With 1200 handhelds, I dont think we're willing to hang on a "hope". So, if anyone has tested this, please let me know. Thanks.

If all BES within the domain use different encryption algo, after the user move, auto EA will not kick off. A re-EA for all users are required.

BlackBerry Search Results

so would changing our BES 4.1 from "3DES only" to "Both 3DES & AES" require all our users to recradle the handheld or perform a wireless activation?