MicroSD Card Encryption & Wiping

[kingof14ers]

So my questions are twofold:

1) I use encryption on my microSD card using
-Security Password & Device
-Encrypt media files: Yes
-MTP: On
-Mass Storage Support: On
-Auto Enable Mass Storage when Connected: Yes
Sure enough I do get prompted on the phone to enter my password when plugged into my USB cable leading to my PC. Inserting the same card into my boss's phone prompts me with a message that the card is encrypted. Ignore it and about half the files are visible.

On the server policy end we have tried applying all the options for "External file system encryption level". We need and want that password to be prompted for always regardless of what device that card is plugged into.

2) How can the microSD card be included in the remote wipe from our BES server? Is that under some option or is it not available in our BES Pro version (4.1.4.17)?

Thanks in advanced for anyone who can help.

[Tõnis]

If you select "Security Password and Device," the encrypted files can only be read in the device the card was originally in (if you know the password). If you want to be able to read/view the files in a different device, you must choose the "Security Password" option. If you choose "Security Password," you can then access the files in a different BlackBerry device; you'll be prompted to enter the password when you place the card in a different phone.

This was on my mind, too, as I want to be sure I'm able to view my encrypted pics in a new phone if my device should fail. I tested it, and the answer is yes. I put my card in a Torch at Best Buy, was prompted for my password, and accessed the files!

Posted from my CrackBerry at wapforums.crackberry.com

[murialita]

In BES 5, there is a policy option to Format Memory Card on Device Wipe. The description is as follows:

Specify whether a BlackBerry device formats the media card when a user or More... administrator permanently deletes all BlackBerry device data. When you set this rule to Allowed, a user can change the setting on the BlackBerry device. To prevent a user from changing this setting on the BlackBerry device, set this rule to Required or Disallowed.

If you do not set this rule, a default value of "Allowed" will be used.

This rule applies only to Java-based BlackBerry devices version 5.0.0 and higher.

I've never had it work, but then again, I've never had to remote wipe a device that was at os 5 or higher either.