Weak Digest Algorithms IT policy rule

Description

This rule specifies the digest algorithms that a BlackBerry® device considers weak. When a BlackBerry device user sends email messages, the device uses the algorithms that it considers strong to digitally sign the email messages. The device uses the list of weak digest algorithms to verify the following data:

• Algorithms that are used to digitally sign email messages that the device receives are strong enough
• Certificate chains for the certificates that are used to sign email messages that the device receives are strong enough

If you set this rule, you can prevent the user from sending an S/MIME-encrypted message or PGP® encrypted message using a certificate or key that has a corresponding public key that is weak. You cannot specify SHA-384 and SHA-512 as weak algorithms.

Possible values

• MD2
• MD4
• MD5
• RIPEMD128
• RIPEMD16
• SHA
• SHA224
• SHA256

Default value

• Null value

Minimum requirements

• BlackBerry® Device Software 4.3

Rule introduction

• BlackBerry® Enterprise Server 4.1 SP5