Sending IBM® Domino® encrypted messages can be performed from a BlackBerry 10 device activated on a BlackBerry Enterprise Server 10.0 or higher. This functionality is implemented using an encryption and decryption strategy that requires server-side access to the user Notes ID file. The ID file contains the private and public keys necessary to digitally sign, encrypt, and decrypt mail messages. Receiving and reading encrypted and signed mail can be performed on a BlackBerry 10 device without being activated on a BlackBerry Enterprise Server.

For digital signing, encrypting, or decrypting to work, the Notes ID file must be uploaded to the mail file or a Domino ID vault. See "Upload my Notes ID file" in the table provided in this article.

Minimum Requirements

• IBM Traveler Server 9.0.0.1 IF1 or higher.
• BlackBerry 10 device with OS version 10.2 or higher.
• User's Notes ID must be accessible to Traveler Server
• BlackBerry 10 device must be activated on a BlackBerry Enterprise Server 10.0 or higher for sending encrypted messages.

Important:

1. Only Domino-encrypted mail is supported. Encrypted calendar, to-do, and notebook entries are not supported. SMIME encryption is unavailable.
2. Use either a secure socket layer (SSL) connection or a virtual private network (VPN) solution when encryption is enabled on the IBM Notes Traveler server.
3. Domino encrypted mail is referred to Notes Native Encryption (NNE) on a BlackBerry 10 device.

How Do I...	Action
Upload my Notes ID file?	For mail decryption to operate, the IBM Notes ID file must be either uploaded to the mail file or placed in a vault by your Domino administrator. To upload your Notes ID file to the mail file: From a computer where you use a IBM Notes client, open a web browser to http://your_IBM_Notes_Traveler_server/traveler Note: If your server is using SSL then open a web browser to https://your_IBM_Notes_Traveler_server/traveler Select Manage the Notes ID. Select Upload the Notes ID. In the Notes ID File field, type the path of your Notes ID file, or browse for it. In the Password field, enter your Notes ID password. Select Upload Notes ID.
Read encrypted mail?	Select the encrypted mail message to read. Encrypted mail will appear with the "lock" icon. If prompted, enter your Notes ID password. The password is cached and will remain valid for 24 hours from the time that the user entered the password. The user will not receive a password prompt if the password is cached. Note: The 24-hour caching period is currently not a configurable parameter, nor can it be disabled.
Enable or send encrypted mail?	To enable: To be able to send encrypted messages from the device, the user must enable this in the Hub settings under the Secure Email option (this option is available only when the device is activated with BlackBerry Enterprise Server). From the BlackBerry 10 device, switch to the Hub. Open the menu list by selecting the menu icon in the lower right hand corner of the screen. Select Settings from the menu. Notes Native Encryption can be enabled by selecting ON for the NNE property. Optional: To enable the encryption of all newly created mail, select Encrypt (NNE) for Default Encoding. Note: Settings options for enabling NNE are not displayed if the user was not activated via BES. To send: Select the Compose mail icon to create a new email. To send, select NNE or Plain Text from the list at the top. Complete the mail by filling in the rest of the appropriate fields and then click Send.
View signed mail?	Signed mail on the Hub will appear with a "seal" icon . Open the mail by tapping on the specific mail item. Open the menu list by selecting the menu icon in the lower right hand corner of the screen. Select Settings from the menu. Select the NNE Details option to view the signature. Note: Currently there is no support for creating a signed mail from the BlackBerry 10 device.