PGP Support Package for BlackBerry

Overview

Mobile devices such as Research in Motion (RIM) BlackBerry® smartphones are popular tools for digital communications, both in the office and on the road. As more employees and executives begin to carry these wireless devices, the amount of sensitive and confidential information put at risk increases. Lacking the right protection, sensitive email that is stored or transmitted on mobile devices may be breached. The resulting damages can include lost revenue, regulatory penalties, and brand damage.

PGP® Support Package for BlackBerry® enables enterprises to extend market-leading PGP® messaging security solutions for laptops and desktops to BlackBerry smartphones. Developed in partnership between RIM and PGP, PGP Support Package for BlackBerry is already integrated into the native BlackBerry OS. It simply needs to be purchased and activated to begin providing encryption protection for BlackBerry emails.

PGP Support Package for BlackBerry is a comprehensive email security solution that provides data encryption, digital signature, secured attachments, and automated key lookup (view example screenshots). Additional benefits include:

• Easy, automatic operation–Protects data with few changes to the smartphone user experience.
• Enforced security policies–Automatically enforces data protection with centrally managed policies, keys and logs when using PGP Universal Server.
• Accelerated deployment–Reduces setup time and speeds enterprise data protection.
• Reduced operation costs–Results from fast deployment and intuitive user interface, plus the automation of email encryption policies if using PGP Universal Server.

The RIM and BlackBerry families of related marks, images, and symbols are the exclusive properties and trademarks of Research In Motion Limited-used by permission.

Technical Specifications

Device Specifications

• BlackBerry® Handheld Software 4.1 or higher
• PGP® Desktop 8.x or greater (PGP Desktop 9.5 required for Lotus Notes environments)

Server Specifications

• PGP Universal™ Server 2.02 or greater for MS Exchange environments (required for managed features)
• PGP Universal Server 2.5 or greater for Lotus Notes environments (required for managed features)
• BlackBerry Enterprise Server for Microsoft Exchange 4.0.2 or greater (4.1.2 required for PGP/MIME support)
• BlackBerry Enterprise Server for Lotus Notes 4.1 or greater (4.1.2 required for PGP/MIME support)

FAQ

General

What is the PGP Support Package for BlackBerry and why is it important?

The PGP Support Package for BlackBerry is an integrated software component for Research in Motion (RIM) BlackBerry smartphone devices. The product enables BlackBerry smartphone users to decrypt/read as well as sign/encrypt PGP®-secured email from BlackBerry smartphones. The PGP Support Package for BlackBerry is already integrated into BlackBerry smartphones with BlackBerry Device Software 4.1 and higher, and with a simple activation license, enables organizations to seamlessly integrate BlackBerry smartphones into PGP Universal Server email security. BlackBerry smartphone users no longer have to choose between using PGP® security and using their BlackBerry smartphones because they can do both at the same time—transparently.

What business problem does this solution solve?

With PGP Support Package for BlackBerry, all emails sent from your widely dispersed BlackBerry smartphones are encrypted and protected automatically according to your enterprise data security policies, just as they are on your enterprise desktops and notebooks. And your BlackBerry smartphone users can now read PGP protected emails sent from colleagues and partners.

BlackBerry smartphone users don't have to change the way they use their smartphones. PGP email encryption is fully integrated into the BlackBerry smartphone's user interface, providing tranparent email encryption, decryption, digital signature and verfication services. PGP Support Package for BlackBerry users simply enter their BlackBerry smartphone's key store passphrase when sending or reading secure emails on their smartphones.

What are the key benefits of the solution?

Consistent security–Enables organizations to deploy, centrally manage, and consistently enforce security policies for email using PGP Universal™ Server without regard to whether the source or destination is a desktop system within the corporate domain or a BlackBerry smartphone.

Enhanced productivity–Allows corporate personnel to become more efficient and productive through the use of BlackBerry smartphones without compromising established corporate PGP® email security policies.

True end-to-end PGP security–Provides data protection through all phases of email delivery, keeping sensitive corporate data protected at all times.

Will the solution be localized for other regions?

How does the solution work?

The PGP Support Package for BlackBerry uses a similar method to secure email as PGP® Desktop Email. BlackBerry devices with PGP Support Package for BlackBerry keep a cached or local copy of the user's private PGP® key in the secure BlackBerry smartphone's protected key store. The PGP private key is used to decrypt secured messages received from the BlackBerry Enterprise Server®. As with PGP Desktop Email, message digital signatures and sender trust status are validated with the sender's public key. Public keys can either be stored locally on the BlackBerry smartphone or automatically looked up via PGP Universal Server.

What is the end-user experience when the solution is managed by PGP Universal Server?

Once activated, a BlackBerry smartphone needs to be enrolled into the PGP Universal Server Self-Managing Security Architecture (SMSA) by entering the user's email address into the BlackBerry smartphone when prompted. PGP Universal Server will then automatically enroll the device. Once enrolled, the user is required to create a PIN to protect access to the user's key store. PGP Universal Server security policies will automatically be enforced thereafter on the BlackBerry smartphone.

PGP®-encrypted messages will appear in the BlackBerry messages screen. Encrypted messages will have a locked icon next to them to indicate they have been secured. The user will need to enter his/her PIN to decrypt and view those messages. Once the user has entered the PIN, he/she can cache the private key for a configurable period of time. This capability allows the user to view multiple messages in a single session without re-entering the PIN. When the message is viewed, the message sender's PGP trust status will also be available and displayed in the header of the message.

The user experience for sending secured messages is similar to that of PGP Desktop Email. PGP Universal Server policy will be automatically applied to all outbound email. Private key caching polices (per session or per message) can be enforced by the administrator to manage private key access for encryption and digital signing. As with PGP Desktop Email, BlackBerry smartphone users can also designate that specific messages be encrypted even if they are not encrypted automatically by PGP Universal Server policy.

Will PGP Software Insurance be available?

Because the PGP Support Package for BlackBerry is a component of the BlackBerry Device Software, PGP Software Insurance is not available for this product. All updates to the product will be available only through BlackBerry Device Software updates offered by network carriers such as AT&T or T-Mobile.

Why did RIM partner with PGP Corporation?

Research In Motion (RIM) received feedback from its customers indicating a significant number wanted to use PGP® email security in combination with the BlackBerry Enterprise Solution. To address this customer requirement and expand the messaging security capabilities of the BlackBerry Enterprise Solution, RIM partnered with PGP Corporation to develop the first PGP Universal–supported client for BlackBerry devices.

Why did PGP Corporation partner with RIM?

BlackBerry is the clear standard and market leader for push-based mobile enterprise communications, with a large installed base of customers within the same target markets as PGP Universal™ Server. PGP Support Package for BlackBerry removes the barriers organizations face when considering deployment of end-to-end PGP® email security solutions in an environment that includes wireless devices. The partnership allows PGP customers to deploy PGP® solutions now and seamlessly integrate PGP security into their existing or future wireless requirements.

Technical

What email servers are supported?

The PGP Support Package for BlackBerry supports the following email servers:

• Microsoft Exchange 2000 (or later)
• IBM Lotus Domino version 5 (or later).

What BlackBerry devices are supported?

The PGP Support Package for BlackBerry requires a BlackBerry smartphone running BlackBerry Device Software 4.1 or later.

What are the environment requirements?

For MS Exchange environments:

• PGP Universal Server 2.02 or greater (required for managed features)
• BlackBerry Enterprise Server for Microsoft Exchange 4.0.2 or greater (4.1.2 required for PGP/MIME support)
• PGP Desktop 8.x or greater

For Lotus Notes environments:

• PGP Universal Server 2.5 or greater (required for managed features)
• BlackBerry Enterprise Server for Lotus Notes 4.1 or greater (4.1.2 required for PGP/MIME support)
• PGP Desktop 9.5

Support

What support options will be provided?

PGP Corporation offers annual support agreements to provide technical assistance to BlackBerry and PGP Universal Server administrators deploying the PGP Support Package for BlackBerry. The technical assistance plans extend PGP Support programs for PGP Universal Server and are available in four tiers: PGP Basic Support, PGP Premium Support, PGP Gold Support, and PGP Platinum Support. For more information on these support options, see http://support.pgp.com.

Who will be providing support?

PGP Support Engineers will provide support to PGP Support customers. PGP Support Engineers are trained and certified in both BlackBerry and PGP technology, including the latest BlackBerry smartphones and the BlackBerry Enterprise Server. Because of the integrated nature of the PGP Support Package for BlackBerry, PGP Support may escalate a customer's case directly to RIM for technical assistance.

A customer may also contact his/her carrier for technical support. The carrier may seek additional assistance from RIM to answer the request for assistance.

Does PGP Corporation provide support directly to BlackBerry smartphone users?

PGP Support works with an organization's PGP Universal Server and BlackBerry administrators to solve requests for technical assistance. IT administrators are best-suited to work with PGP Support to help diagnose and solve issues related to both BlackBerry smartphones and PGP Universal Server.

Is technical assistance for the PGP Support Package for BlackBerry included in the support programs for PGP Universal Server?

The support programs for the PGP Support Package for BlackBerry are extensions to the support programs for PGP Universal Server and are not included with the new solution. An organization must have a PGP Support annual agreement for PGP Universal Server to take advantage of the PGP Support Package for BlackBerry technical assistance programs.

Do the technical assistance programs for the PGP Support Package for BlackBerry and PGP Universal Server offer the same features?

Yes. PGP Support programs provide consistent features across plans of the same tier. For example, a customer with PGP Premium Support for both PGP Universal Server and PGP Support Package for BlackBerry will receive the same level of service across both programs.

Is a support contract from RIM also required for PGP Support?

To ensure the highest levels of customer service and continuity, PGP Support recommends that customers have an equivalent level of BlackBerry support from RIM. The following table identifies the equivalent levels of support from PGP Corporation and RIM, ensuring that customers will receive the same level of service from both organizations.

What type of issues does PGP Support for the PGP Support Package for BlackBerry cover?

The support plan covers the activation, configuration, and operation of the PGP Support Package for BlackBerry. Activation support includes issues related to enabling the PGP Support Package for BlackBerry on smartphones. Configuration and operation support covers issues related to usage of the PGP Support Package for BlackBerry on smartphones, including its use with the BlackBerry Messages application and enrollment with PGP Universal Server.

What if a request for support is not related to PGP Support Package for BlackBerry?

If it is determined that a request for support is not related to PGP Universal Server or PGP Support Package for BlackBerry, PGP Support recommends customers contact their primary source for BlackBerry support, such as their carrier.

Does PGP Support offer a 24x7 support plan for the PGP Support Package for BlackBerry?

Yes. PGP Support offers the PGP Assigned Engineer program, which provides 24x7 technical support. The PGP Assigned Engineer program includes proactive technical account management to help plan, optimize, and maintain PGP Support Package for BlackBerry deployments. To take advantage of these features, customers must have a PGP Assigned Engineer plan for both PGP Universal Server and PGP Support Package for BlackBerry.

What are the requirements for PGP Support for the PGP Support Package for BlackBerry?

A valid PGP Support plan for PGP Universal Server is required. The PGP Support plan for the PGP Support Package for BlackBerry must be the same tier as the PGP Support Plan for PGP Universal Server. For example, customers with PGP Premium Support for PGP Universal Server must also purchase PGP Premium Support for the PGP Support Package for BlackBerry.