- jeffhRetired ModeratorThat red padlock icon means the Memory Cleaner is enabled by your IT policy. If your phone was given to you by your employer, you won't be able to disable it. If you bought the phone used, the previous owner should have had the IT policy removed before selling it. In that case, you can remove the policy by using the procedure described in this thread: Removing an IT Policy from a BlackBerry phone
If you use this procedure on a phone that legitimately has an IT policy, the policy will just be pushed back the next time you log into the Enterprise, and your removal of it will be detected.
If you bought a phone with an IT policy on it, you'll want to remove it, because it probably restricts other functions of the phone. But there is no need to disable the Memory Cleaner. It's harmless.06-21-09 02:58 PMLike 0 - I believe certain programs also take control of the memory cleaning option. I am not on a corporate phone and mine is locked. I believe from what I've read WorldMate Live enables and locks the option. I have it installed and the memory cleaning option is enabled and locked.
Posted from my CrackBerry at wapforums.crackberry.com06-21-09 04:29 PMLike 0 - jeffhRetired ModeratorIt periodically deletes the contents of these databases:
Address Book Cache
Certificate Search
Certificate Status Manager
Clipboard
Content Protection Cache
Encrypted Messages
Key Store
PGP Key Search
The default settings clear the databases when the device is holstered, and after 5 minutes of inactivity.
Posted from my CrackBerry at wapforums.crackberry.com06-21-09 04:53 PMLike 0 -
- jeffhRetired ModeratorI'm not sure. The Memory Cleaner function is described in the PGP Support Package Version 4.5 Security Technical Overview, which you can download from the BlackBerry site. Here's an excerpt from what it says about the Memory Cleaner:The BlackBerry device automatically turns on the feature for secure garbage collection when the PGP Support Package for BlackBerry devices is installed and the private key of the user is on the BlackBerry device. When feature for secure garbage collection is turned on, the BlackBerry device performs the following actions:
� overwrites the memory reclaimed by the standard garbage collection process with zeroes
� periodically runs the memory cleaner application, which tells BlackBerry device applications to clear any caches and make available the memory associated with unused, sensitive application data
� automatically overwrites the memory that the memory cleaner application makes available when it runs
The memory cleaner application is designed to delete unreferenced or cached decrypted content from the BlackBerry device, including content from the PGP application, PGP key store, content protection cache, address book cache, PGP key search, and BlackBerry device clipboard.
You can set the memory cleaning application to run automatically when the
� user synchronizes the BlackBerry device with the computer
� user locks the BlackBerry device
� BlackBerry device locks after a specified amount of idle time
� user changes the time or time zone on the BlackBerry device06-21-09 08:21 PMLike 0 -
- jeffhRetired ModeratorIn Options / Status, type BUYR. You won't see the letters appear on the screen, but when you type it, two additional lines will be added to the Status screen. In my case, I see:
Data Usage: IT Policy Enabled
Voice Usage: IT Policy Enabled.
If you see "IT Policy Enabled," then you have not gotten rid of the policy. I don't know what you will get if you don't have a policy, or have the policy disabled, since I've never used a BlackBerry that was not on BES. Please post what you see.06-22-09 05:47 AMLike 0 - In Options / Status, type BUYR. You won't see the letters appear on the screen, but when you type it, two additional lines will be added to the Status screen. In my case, I see:
Data Usage: IT Policy Enabled
Voice Usage: IT Policy Enabled.
If you see "IT Policy Enabled," then you have not gotten rid of the policy. I don't know what you will get if you don't have a policy, or have the policy disabled, since I've never used a BlackBerry that was not on BES. Please post what you see.
I see "exceeded 250k" and "exceeded 60 minutes" respectively.
Posted from my CrackBerry at wapforums.crackberry.com06-22-09 06:30 AMLike 0 - jeffhRetired ModeratorAn IT Policy is the way a company enforces its IT Security rules on BlackBerry's that have inside-the-firewall access. These devices have BlackBerry Enterprise Service (BES) accounts instead of the BlackBerry Internet Service (BIS) accounts that consumer users typically have.
BES users get over the air synching of their Calendar, Email, Address Book, Tasks, and Memos. In return, they accept that the company can monitor all their email, log their phone calls, and in general control every aspect of their phone: whether they can install apps, use the Media Card or Bluetooth, or access the internet, for example.
IT Policies can be very strict to benign. Mine, for example, only requires me to use a password and Content Protection and sets the max timeout to 30 minutes.
If you have an employer-provided phone, and attempt to remove the IT Policy, your attempt will be detected the next time you attempt to log on to the company servers, the IT policy will be pushed back on your phone, and you could face severe disciplinary consequences for violating security.
From the BUYR result you got, it appears you have succesfully removed your IT policy. That's not easy. RIM designed them NOT to be removable by users.06-22-09 10:06 PMLike 0 - jeffhRetired ModeratorHere's what the User Guide has to say about Content Protection:
Content protection is designed to encrypt your BlackBerry� device data. When content protection is turned on, your device uses a private key to encrypt data as it is stored on the device, including data that your device receives when it is locked. Your device decrypts data as you access it. You can set content protection to include or exclude your contacts. If you turn on content protection for contacts and you receive a call when the device is locked, the caller name does not appear on the screen.
When you lock your device, an open lock indicator appears in the device status section of the screen to indicate that your device is deleting a copy of the private key from the temporary device memory. A lock indicator appears when the device has deleted the key.
Since Content Protection is turned on by my IT Policy, I can't turn it off to see if there is any noticeable performance effect from the encryption / decryption process. If you'd like to test it, I'd be interested in knowing your results. As long as you don't lose your BlackBerry, it won't matter if the data is encrypted or not.06-23-09 06:08 AMLike 0
- Forum
- BlackBerry OS Phone Forums
- BlackBerry Bold Series
Memory Cleaning
LINK TO POST COPIED TO CLIPBOARD