[kitg6flw]

Hi folks - hope you can assist?

I work for an outfit who have around 250 BB's all connected to a BES - and I'm fairly new to using the BES myself.

I've been asked if it is possible to use the BES to enforce micro SD card encryption on those handsets that support Micro SD cards.

I do appreciate the individual user can set the micro sd card encryption option manually on his/her handset - but I've yet to find the option on the BES set the option on a global scale.

Can someone point me in the right direction please?

Many thanks.

Kit

[aiharkness]

Welcome to the group, kitg6flw!

FYI, for your benefit, BES questions really need to be asked in the BES subforum if you want to have the best chance of getting an answer. Some people just browse the forums that interest them, so some BES people may not even look in the general subforum.

No need to do anything. Don't delete your post. (And don't post again). Maybe a mod will help you out and move your post for you.

[kitg6flw]

Whoops! Thanks for that Ira. Hopefully it will get moved to a more appropriate area for me. Thanks for the heads up.
Kit

[aiharkness]

No problem. I just want to see people get the help they are looking for.

[SteveO86]

Which version of BES? This is for 4.1

http://docs.blackberry.com/en/admin/...ence_Guide.pdf

The option is there. I turned it on a while back.

[kitg6flw]

Thanks SteveO86 - 4.1 is what we are currently using. Good guess.
I've searched the document top to bottom several times (Excellent document) and can find no reference to using BES to control encryption on a Micro SD Card that may, or may not be inserted into a BB handset.
Annoying - Maybe I'm just being blind?

[kitg6flw]

Whoa - Hold fire.... I spoke too soon. I think the answer I'm looking for is on page 141.
I'll give that a whirl back at the salt mine tomorrow.

Thanks again
Kit

[freakinvibe]

The policy is called

"External File System Encryption Level"

Remember that if you set it to "Encrypt to Device key", you will not be able to move the SD card to a different device. All the files have a .rem extension and are encrypted. They will only be readable in the original device. That can get quite frustrating for users. On the other hand you can leave the multi-media files unencrypted, so they can at least transfer their pictures + vids + mp3s

[pinhead]

If something like this is enabled, and the device on which it has been enabled us subsequently wiped, is the encrypted information lost or can it be recoveredif it is not wiped?

[freakinvibe]

That should work, but I haven't tested myself.

[DarthBBerry]

Originally Posted by pinhead

If something like this is enabled, and the device on which it has been enabled us subsequently wiped, is the encrypted information lost or can it be recoveredif it is not wiped?

Wiped with the device.

[freakinvibe]

I thought this would depend on the IT policy

"Media Card Format on Device Wipe"

Description
This rule specifies whether a BlackBerry® device formats a media card when a user or administrator permanently deletes all data
on a BlackBerry device.

Default value
The default value is Allowed.