[coluphid]

Hi,
unfortunately I am a newby concerning blackberrys, but I have to set up E-Mail-Encrytion for our Blackberrys (all 7290) now.

I downloaded the "S/MIME Support Package" and installed (together with a firmware update) on one handheld.

I set up the access to our LDAP-Server that hosts the certificates - on the BES as well as on the Desktop Manager and the handheld.

If I understood everything right I should be able to download certificates to the handhelp and decrypt mails.

If I try to do this on the Blackberry itself I get an error-message saying that an unknown error occured while accessing the LDAP-Server. Unfortunately, it gives no further information, error-codes or anything.

With the Blackberry Desktop Manager just nothing happens: I don't see any certificates and all the buttons for importing certificates, search on the LDAP-Server etc are greyed out.

I could barey find any information about this (only the "white paper" and the "user guide supplement" about the S/MIME support package).

So I hope that somebody here can help me out. Did I miss any steps in the configuration? What can I do to get at least an idea of what the problem is? Or does anyone know any further documentation on this topic?

I appreciate any tips and help with this
thanks
Karsten

[misterbulldog]

Do you have Certificate Sync installed on the Desktop?
Did you enable S/MIME encryption on the BES server (Blackberry Server Properties/Message Options)?

Once you get that setup you should be able to sync certs with the handheld and the desktop.

I'm not sure about the LDAP error yet. I just moved the BES database to a new server and am having the same problem at the momemt. Firewall maybe?

I'm sure you also realize that you will need RIM's Bluetooth CAC reader?

Hope this helps.

[coluphid]

Hi, does this only work with CAC readers? That was not the setup I intended to use. My idea was that the devices get the certificates from the Server and then they should by able to decrypt.
Your reply sounds like it won't work that easy. Do I really need additional hardware for each device (the cac reader) to get this to work?

[misterbulldog]

If the message is only signed you will be able to read the message. I don't know if you will be able to reply to the message, but I'm sure that if you can reply, the reply will not be signed.

If the message is encrypted you will not be able to open it without the users cert on your handheld and you will need a CAC reader.