Minimum Strong ECC Key Length IT policy rule

Description

This rule specifies the minimum ECC key size (in bits) that a BlackBerry device can use with TLS connections.

If you configure the minimum key size on the BlackBerry Enterprise Server to be greater than the minimum key size on the device, the device prompts a BlackBerry device user to trust every highly secure website that uses a key size in its certificate that is less than the minimum key size on the BlackBerry Enterprise Server. For example, if the user browses to a highly secure website that uses a 160-bit ECC key in its certificate, the device prompts the user to trust the website. If the user trusts the website and selects the Don't Ask Again option, the minimum key size on the device is configured to 160 bits. If you configure the minimum key size on the BlackBerry Enterprise Server to 233 bits, the device prompts the user to trust every highly secure website that uses a key size in its certificate that is less than 233 bits.

Possible values

  • 160 to 571 bits

Default value

  • 163 bits on the BlackBerry device
  • 160 bits on the BlackBerry Enterprise Server

Minimum requirements

  • BlackBerry Device Software 3.6.1

Rule introduction

  • BlackBerry Enterprise Server 3.6