Welcome to Port3101.org : Your BES Connection Mark forums read | View Forum Leaders
Port3101.org : Your BES Connection



Reply
LinkBack Thread Tools Display Modes
Content Protection?
 
  #1 (permalink)  
Old 10-21-2010, 07:29 PM
BES Administrator
 
Join Date: Aug 2009
Location: Austin, Texas
Posts: 22
Default Content Protection?

Anybody using Content Protection? We're in an environment that has not used content protection and will be forcing it on, what should we watch out for and what complaints should we expect to hear.
Reply With Quote
Sponsored Links
  #2 (permalink)  
Old 11-19-2010, 09:38 AM
BES Activated
 
Join Date: Jul 2010
Posts: 6
Default

We implemented this last year and had a couple of teething problems.

First one is to make sure that the default setting of encrypting contacts is changed to no. If peoples contacts are encrypted then any incoming calls from people in their contacts will be hown as unknown caller if the device is locked. We found no way of changing this on the BES and had to build it into the configuration process as a manual step.

Secondly turning content protection / memory cleaning on also seems to have the side effect of causing the antenna not to automatically turn on when a device is restarted. Users need to be reminded to turn this on manually in "manage connections".

Lastly there was a fault found with early releases of the BlackBerry 8520 with content protection turned on, making the device reboot with a white screen as soon as content protection is turned on. Although all of these devices should of been recalled we occaisionly get one in that needs returning.
Reply With Quote
  #3 (permalink)  
Old 11-20-2010, 02:01 AM
Sp1d3rM@n's Avatar
BES Administrator
 
Join Date: Jul 2009
Location: Nowhere, USA
Posts: 46
Default

Quote:
Originally Posted by dcraigie View Post
Secondly turning content protection / memory cleaning on also seems to have the side effect of causing the antenna not to automatically turn on when a device is restarted. Users need to be reminded to turn this on manually in "manage connections".
We use content protection, but the only time I have seen the problem that you have described is when I also had Force Content Protection Of Master Keys enabled as well.
Reply With Quote
  #4 (permalink)  
Old 11-22-2010, 11:49 PM
BES Administrator
 
Join Date: Aug 2009
Location: Austin, Texas
Posts: 22
Default

We're watching the "Encrypt address book" and think we have it so it remains clear. Thanks for pointing out the other things, I'll keep an eye out for them.

Did you notice an increase in the time it takes to wipe a device? We haven't tested it but some were saying it can take 1-2 hours to go through a device wipe. Pretty high penalty for fat fingering your password.
Reply With Quote
  #5 (permalink)  
Old 12-01-2010, 08:17 AM
BES Activated
 
Join Date: Jul 2010
Posts: 6
Default

The decrypting and wiping of the device during a hard reset is much longer on the older devices (8700, 8100, etc). Newer devices with more processing power deal with it much better and generally take maybe only ten or fifteen minutes longer than without content protection enabled.
Reply With Quote
  #6 (permalink)  
Old 12-02-2010, 06:09 PM
BES Activated
 
Join Date: Aug 2009
Location: Munich
Posts: 3
Default

We are using content protection since years and had regular problems :

- Content protection can be enabled, but not be disabled through a policy. User has to re-set in manually.
- Addressbook is set to be included into protection, so phonecalls arrive with number and not with name.
- enabling CP on a device requires a reboot. The user is asked, but after a few times the device forces the reboot. Leaving him not reachable.
- A device with CP requires up to 90 minutes to be wiped. Workaround. Deploy a policy without CP before, and turn CP off.

Kind regards
-bl-
Reply With Quote
  #7 (permalink)  
Old 12-09-2010, 11:03 AM
BES Activated
 
Join Date: Dec 2010
Location: UK
Posts: 2
Lightbulb Contact List Encryption and Wiping Devices

To centrally disable the encryption of the Contact List, look in the 'security' tab of the IT Policy... set the value 'Content Protection of Contact List' to 'Disallowed'

Once Content Protection is enabled, any time a device is wiped, it follows the wipe by 'Scrubbing' the contents of it's Flash memory... this is what takes the extra time.

Devices prior to the Bold write over the flash memory by a pattern similar to:

11111111
10101010
11111111
01010101
11111111
11001100
00110011
11111111

This is what takes an hour or more to complete, and ensures data cannot be forensically retrieved from the flash memory.

Devices from the Bold onwards only write over the flash a couple of times, which is why they only take a few minutes to 'scrub'

IT Policies allow you to restrict functionality, but not positively effect values, so yes you can enforce the use of content protection within an it policy, but not then laterly switch it off. you can simply stop enforcing the restriction, but the user will then need to switch off content protection on the device themself. Similar example... you can prevent people from enabling the 'Allow outgoing calls whilst locked' within an IT Policy, but cannot forcefully enable the feature on behalf of the user... they have to switch it on themself if they want it.

regards, Craig
Reply With Quote
  #8 (permalink)  
Old 12-09-2010, 11:13 AM
BES Activated
 
Join Date: Jul 2010
Posts: 6
Default

Quote:
Originally Posted by sadanorakman View Post
To centrally disable the encryption of the Contact List, look in the 'security' tab of the IT Policy... set the value 'Content Protection of Contact List' to 'Disallowed'

Thanks for this, the option was not available in the previous incarnation of BES we were using when this was setup. Will have to go back and check what else is new now
Reply With Quote
  #9 (permalink)  
Old 12-09-2010, 11:24 AM
BES Activated
 
Join Date: Dec 2010
Location: UK
Posts: 2
Default

The option came around in BES 4.0 service pack 6, and was called 'Force Include Address Book In Content Protection'. It got renamed in BES 5.

regards

Craig
Reply With Quote
Reply

Bookmarks

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
KB19371 - BlackBerry smartphones with content protection and memory cleaner ... hdawg Featured BlackBerry KB Articles 0 08-25-2009 09:26 PM
KB18709 - Controlling content protection of the contact list using IT policy. hdawg Featured BlackBerry KB Articles 0 06-30-2009 11:38 AM
KB15244 - Content Protection hdawg Featured BlackBerry KB Articles 0 06-30-2009 11:38 AM
KB11963 - Disable Content Protection on the BlackBerry device hdawg Featured BlackBerry KB Articles 0 06-30-2009 11:37 AM
KB11963 - Disable Content Protection on the BlackBerry device hdawg Featured BlackBerry KB Articles 0 05-25-2009 08:22 PM


All times are GMT -4. The time now is 02:31 AM.
Powered by vBulletin® Version 3.8.9
Copyright ©2000 - 2018, vBulletin Solutions, Inc.


 

SEO by vBSEO 3.3.2 PL2