BlackBerry 10

: SCEP profile settings

This setting specifies whether a 

BlackBerry 10

 device generates the subject and subject alternative name for a certificate request. If this setting is not selected, you must specify the subject and subject alternative name type and value.

This setting specifies the subject alternative name type for the certificate, if it is required.

Possible values:

The default value is "RFC 822 name."

This setting specifies the subject alternative representation of the certificate subject. The value must be an email address, the DNS name of the CA server, the fully qualified URL of the server, or principal name.

The "SAN type" setting determines the appropriate value to specify. If set to "RFC822 name," the value must be a valid email address. If set to "URI," the value must be a valid URL that includes the protocol and FQDN or IP address. If set to "NT principal name," the value must be a valid principal name. If set to "DNS name," the value must be a valid FQDN.

This setting specifies the elliptic curve that a 

BlackBerry 10

 device uses to generate a client key pair. The elliptic curve defines the strength of the client key pair. You must select an elliptic curve that is supported by your CA.

This setting is valid only if the "Key algorithm" setting is set to "ECC."

Possible values:

The default value is "secp521r1." 

This setting specifies the encryption algorithm that a 

BlackBerry 10

 device uses for the certificate enrollment request.

Possible values:

The default value is "Triple DES." 

This setting specifies the hash function that a 

BlackBerry 10

 device uses for the certificate enrollment request.

Possible values:

The default value is "SHA-1." 

This setting specifies the hexadecimal-encoded hash of the root certificate for the CA. You can use the following algorithms to specify the thumbprint: MD5, SHA-1, SHA-224, SHA-256, SHA-384, and SHA-512. You must set a value for this setting to activate a 

BlackBerry 10

 device successfully.

This setting specifies how many days before a certificate expires that automatic certificate renewal occurs.

The possible values are from 1 to 999,999,999 days.

The default value is "30."

This setting specifies the cryptographic operations that can be performed using the public key contained in the certificate.

Possible selections:

The default selections are "Digital signature," "Key encipherment," and "Key agreement."

The minimum requirement is 

BlackBerry 10 OS

 version 10.3.1.

This setting specifies the purpose of the key contained in the certificate.

Possible selections:

Server authentication
Client authentication
Code signing
Email protection
Time stamping
OCSP signing
Secure shell client
Secure shell server

The default selection is "Client authentication."

The minimum requirement is 

BlackBerry 10 OS

 version 10.3.1.