Content Protection Strength IT policy rule

Description

This rule specifies the cryptographic strength that a BlackBerry device uses for content protection of data that it receives when it is locked. When you specify a value for this rule, content protection is turned on. If you set this rule to Strong, the device uses a 160-bit ECC public key. If you set this rule to Stronger, the device uses a 283-bit ECC public key. If you set this rule to Strongest, the device uses a 571-bit ECC public key.

For devices that are running BlackBerry Device Software 5.0 and later with onboard device memory, this rule also encrypts the onboard device memory using the BlackBerry device user password and a device-generated key. Media files in the onboard device memory are not encrypted unless you set the Encryption on On-Board Device Memory Media Files IT policy rule.

For devices that are running BlackBerry Device Software 4.7 and earlier, you can configure the External File System Encryption Level IT policy rule to encrypt media files on the media card.

Related rules

The Password Required IT policy rule affects this rule. A device uses this rule only if you set the Password Required IT policy rule to Yes.

This rule affects the Minimum Password Length IT policy rule. If you set this rule to Stronger, you should set the Minimum Password Length IT policy rule to 12 characters. If you set this rule to Strongest, you should set the Minimum Password Length IT policy rule to 21 characters.

Possible values

  • Strong
  • Stronger
  • Strongest

Default values

  • Strong in the Advanced security IT policy and Advanced security with No 3rd Applications IT policy
  • Null value in all other preconfigured IT policies

Minimum requirements

  • BlackBerry Device Software 4.0

Rule introduction

  • BlackBerry Enterprise Server 4.0