Determining the status of S/MIME certificates

For devices running a version of BlackBerry 10 OS that is later than 10.2.1, you can use the BlackBerry Device Service to configure OCSP server settings and send them to BlackBerry devices to determine the status of S/MIME certificates.

A device searches each OCSP server and retrieves the S/MIME certificate status.

To allow BlackBerry devices to trust the network and servers when making secure connections, you will need to distribute root and intermediate CA certificates to the devices. For more information, see Sending CA certificates to devices.

For devices that are running a version of BlackBerry 10 OS that is later than 10.2.1, you can configure the Enterprise Management Web Service to search for the status of S/MIME certificates using HTTP, HTTPS, or LDAP.

For more information about certificates, see the BlackBerry Device Service Solution Security Technical Overview. For more information about secure email icons, see the user guide for the device.

• Configure the OCSP servers that devices use to retrieve the status of S/MIME certificates
• Configure the HTTP servers that the Enterprise Management Web Service uses to retrieve the status of S/MIME certificates
• Configure the LDAP-enabled servers that the Enterprise Management Web Service uses to retrieve the status of S/MIME certificates