BlackBerry Forums Support Community

markhatter · 04-10-2008, 06:58 AM

Hi

We are just looking at enabling media card access via policy and just had a couple of thoughts.

1. If you choose to encrypt the card using "user password", what happens if the user forgets the password? Can they still access the card once we've reset the password?

2. If we choose "device encryption" what happens if the device breaks? Can we put the card in a new device and read the contents?

Thanks
Mark.

akosnitzky · 04-10-2008, 07:42 AM

Wirelessly posted (Verizon 8830)

Yes and yes

markhatter · 04-10-2008, 08:22 AM

I'm surprised you can put it into another device. How does that work if its encrypted with the device?

cheers

JSanders · 04-10-2008, 08:26 AM

I am not so sure about this, especially #1, that the data can still be accessed AFTER the user forgets the password. Perhaps so, but I would wait for other user feedback here.

Mark_Venture · 04-13-2008, 03:22 PM

i've had to do testing on this for the customer I support...

there are various ways to encrypt...

If you choose to encrypt based on user password, the card can be put in other hand helds and used... assuming the same user password is used on the device...

i.e. User has BB 8830 with password set as "mypwd1"... that device breaks, warrantly replacement is put in... he sets password on the new device as "mypwd1" and puts that same microsd in... The card's data is accessable.

There is another level of encryption that is based on the device... in this mode, if the user's device breaks... the info on the MicroSD is not accessable in the replacement device.

acollier · 05-21-2008, 09:05 PM

what about encrypting the data from the card. it looks like the only thing that is encrypted are pictures or music that is downloaded. what about using it as a USB mass storage device? I would like to lock down the card so if you pull it out, everything is inaccessable.

anyone find a way to do that?

jnetter · 05-22-2008, 11:15 AM

That's not possible, I have had many conversations with RIM regarding this. You can encrypt the card so it has various level of access while in another device, but if you don't have the desktop software installed (which our company doesn't) you can simply remove the card, put it in a media reader and BAM, full access.

Please, someone prove me wrong here, I have locked down the cards and USB mass storage for that very reason, if there is a way to have true encryption directly on the card itself without having to use the desktop software that would be great.

Frank Castle · 05-22-2008, 11:38 AM

I swore when I was testing this if you set the encryption it puts all the files in a RIM format with a .rem file extension. I pulled the MD and used a reader and could see the files and copy them was unable to open them. Not a big issue as at the time it was only music / picture files which I could care less if their encrypted but now with the ability to save documents to the MD I will be revisiting and testing this further.

jnetter · 05-22-2008, 04:46 PM

Jletendre I didn't have the privledge of meeting you at the WES 2008 Boxtone lounge but I thank you for some of the posts you have submitted (especially the ones that have helped me out!).

If anyone can confirm whether or not you can truly encrypt the data on the card so that it is only accessible in the Blackberry (not when the card is transfered to a reader and not so that the desktop software is required) I would greatly appreciated it.

Frank Castle · 05-23-2008, 08:54 AM

Thanks .. I'm sure we likely passed each other more then once as I was around the lounge a few times and often with other BBF members.

I'll keep you posted as I have to revisit this and beat it to death for our security group so I will be running a range of tests. I'm updating to SP 5 this weekend so unsure if the policy options changed.

dege13 · 05-23-2008, 05:16 PM

Some KB articles with a bit of info:
Encrypted files stored on the microSD media card appear as .rem files
http://www.blackberry.com/btsc/searc...200%2062801797

Media card encryption modes
http://www.blackberry.com/btsc/searc...200%2062801797

How to encrypt files on a media card
BlackBerry Search Results

I am going to test the encryption modes and what they do exactly when I get home with my spare SD card.

jnetter · 05-26-2008, 09:54 AM

Will you post your results for us please?

jnetter · 06-03-2008, 12:46 PM

Has anyone made any progress with this?

siemp · 11-05-2008, 07:36 PM

There is quite some info here:
How to encrypt internal and external file systems on BlackBerry smartphones

Question: Is encryption for the SD card 256AES?

ebie3164 · 11-16-2008, 01:48 PM

Hi

Im very new to BB so still finding my round. I have a BB Bold 9000,I also have a Nokia E90. On the Nokia I have a 3rd party softeware that encrypts the files I import to the programme. It will only allow me access it via my password. This programme completly encrypts them, even if I move it from device to device/pc or even if insert in a card reader. Are there any 3rd party softwares can be installed on the BB?