This feature availability depends on your plan.
Remote Device Management allows users to remotely manage their BlackBerry devices. You can set custom account-wide BlackBerry IT policies or apply custom policies for selected users. You can assign IT policy rules to satisfy your organization's security policy requirements and to reflect the needs of the users who are assigned to that IT policy. For example, you can create a custom IT policy, set the IT policy rules for executive-level feature and security requirements, and assign the IT policy to corresponding users.
- The BlackBerry Policies feature must be enabled on the plan in order to customize IT Policies for users.
- Only the account owner or Technical Administrator with access to Exchange and Wireless modules will be able to manage policies.
- Notifications regarding enabling a custom policy will be sent to the account owner and Technical Administrator and to users, once a custom policy is assigned or unassigned.
Read the Knowledge Base article on Account contacts and contact roles for more information on the account owner and Technical Administrator.
There can be several BlackBerry policies created for different groups of users on your account.
To create BlackBerry policy:
- Log in to CONTROL PANEL and navigate to Services > Compliance > Policies. Switch to the BlackBerry Policy tab > click Create New Policy.
- Choose the necessary settings and click Create and Assign Users.
- Add users to Applied to list.
- On BlackBerry Policy page you can modify the policies by clicking on policy name, also you can delete them, set them as default or create new policies.
Description of policies:
The settings are organized in two groups: Security Settings and Messaging Settings.
- . This policy specifies whether the BlackBerry device requires a security password. By default, the policy is set to False. If you enable this policy, you can customize password requirements with other policies.
- Force Memory Clean When Idle. Specifies whether the BlackBerry device cleans the memory during periods of user inactivity.
- Maximum Password History. Specifies the maximum number of previous passwords that the BlackBerry device checks new passwords against to prevent reusing old passwords. This policy will be inactive if the "Password Required" policy is disabled.
- Maximum Password Attempts. Specifies the number of password attempts before the BlackBerry device erases all of the application data. You can specify any value between 4 and 16. This policy will be inactive if the "Password Required" policy is disabled.
- Maximum Password Age. Specifies the number of days before the BlackBerry device password expires and the user must set a new password. If you set this policy to 0, the device password does not expire. This policy will be inactive if the "Password Required" policy is disabled.
- Password Timeout. Specifies the number of minutes of inactivity before the security timeout occurs and the BlackBerry device user must type the password to unlock the BlackBerry device. The default setting is 2 minutes. This policy will be inactive if the "Password Required" policy is disabled.
- Content Protection Strength. Specifies the cryptography strength that the BlackBerry device uses to encrypt content that it receives while it is locked. When you specify a value, the content protection feature is turned on. This policy will be inactive if the "Password Required" policy is disabled.
- Set this IT policy rule to Strong to use a 160-bit ECC public key. This key provides good security and good performance and is adequate for most situations.
- Set this IT policy rule to Stronger to use a 283-bit ECC public key. This key provides better security but slower performance than the Strong setting.
- Set this IT policy rule to Strongest to use a 571-bit ECC public key. This key provides the highest level of security but the slowest performance of the three settings.
- User Can Change Timeout. Specifies whether the BlackBerry device user can override the security timeout value. This policy will be inactive if the "Password Required" policy is disabled.
- Password Pattern Checks. Specifies whether to verify that the BlackBerry device password matches certain character pattern requirements. If you set the policy to "At least 1 alpha, 1 numeric, 1 special character", password pattern checking will not be available for C++-based BlackBerry devices. By default, the BlackBerry device prevents setting passwords that use a natural sequence of characters or numbers. If a symbol is inserted into a natural sequence, the BlackBerry device can use the password. This policy will be inactive if the "Password Required" policy is disabled.
- Allow Peer-to-Peer Messages. Specifies whether users can send PIN messages. Clear the checkbox to prevent users from sending PIN messages (this does not prevent users from receiving PIN messages).
- Allow BCC Recipients. Specifies whether users can include BCC recipients when composing email messages on their BlackBerry devices. Clear the checkbox to prevent users from including BCC recipients.
- Disable MMS. Specifies whether to prevent the BlackBerry device user from sending and receiving MMS messages.
- Attachment Viewing. Specifies whether BlackBerry device users can view supported attachments. Setting this rule to False does not prevent downloading or viewing native attachments on the BlackBerry device.
- Allow SMS. Specifies whether users can send SMS text messages. Clear the checkbox to prevent users from sending SMS text messages (this does not prevent users from receiving SMS text messages).
- Allow Auto Attachment Download. Specifies whether the BlackBerry device downloads supported attachments from received email messages automatically. If you check the box, the BlackBerry device downloads attachments automatically.
- Maximum Native Attachment size. Specifies the maximum size (in bytes) of a standard attachment that can be uploaded from the BlackBerry device. The permitted range is 0 B through 3 MB. The default setting is 3 MB.
- Keep Message Duration. Specifies the maximum time (in days) that the BlackBerry device keeps messages. The permitted range is from -1 to 180 days. The default setting is -1, which means the BlackBerry device keeps messages indefinitely.