Re: Another Blackberry Question

[Ben Scott]

On Wed, Nov 12, 2008 at 4:55 PM, Kevin Lundy <[EMAIL PROTECTED]> wrote:
> Although that doesn't still prevent taking
> the card out and putting files on it directly.

  You could super-glue the card into the device.  Removing the card
would probably destroy it (and the phone).

  Prolly not appropriate for your environment, but I actually did
something similar once.  We needed to enable USB for a test equipment
connection, but the powers that be were hostile to USB.  Superglued
the working plug in to one jack, and superglued a plug with the cable
cut off in the other.  TPTB were happy.

-- Ben

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

Re: Another Blackberry Question

[Kevin Lundy]

We just want to ensure that everything on the device is always encrypted.

On 11/12/08, Malcolm Reitz <[EMAIL PROTECTED]> wrote:
> Just out of curiosity, what issue are you trying to resolve with card
> encryption?
>
>
>
> Malcolm
>
> From: Kevin Lundy [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, 12 November, 2008 15:55
> To: NT System Admin Issues
> Subject: Re: Another Blackberry Question
>
>
>
> That's the conclusion I'm coming to.
>
>
>
> Although that doesn't still prevent taking the card out and putting
> files on it directly.  That one I can address via policy and
> enforcement.
>
> On Wed, Nov 12, 2008 at 4:43 PM, Barsodi.John <[EMAIL PROTECTED]>
> wrote:
>
> If I recall correctly, you have to disable mass  storage on the device
> after enabling encryption.  Then use the Desktop Manager to transfer
> files after unlocking the device.
>
>
>
> - John Barsodi
>
> From: Kevin Lundy [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, November 12, 2008 12:55 PM
>
>
> To: NT System Admin Issues
> Subject: Re: Another Blackberry Question
>
>
>
> Yes, but you can use mass storage mode to put files on the card
> unencrypted.  You can also put the card in a reader directly in a
> computer and put files on there unencrypted.  It seems to be a limit of
> the file based encryption rather than drive encryption.
>
>
>
> At least that is what my current reading from BB is telling me.   I may
> be wrong as we are just cutting our teeth with BB.
>
> On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro
> <[EMAIL PROTECTED]> wrote:
>
> options>media card>encryption mode:
>
> I use the "device + security password" setting and "encrypt media files"
>
> this will encrypt all future files you save on the SD card.
>
> If you put the card in a computer, when you open it, the files will be
> encrypted, and unreadable.
>
> I think for example, picture.jpg will show up picture.jpg.rem
>
>
>
>
>
>
>
> 
>
> From: Kevin Lundy [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, November 12, 2008 2:43 PM
> To: NT System Admin Issues
> Subject: Another Blackberry Question
>
> I've been googling and browsing the BB site and forums, but seem to be
> getting conflicting information.
>
>
>
> Is there a way to force any SD card to be fully encrypted?  In other
> words, I want the card to only be readable while in the assigned device.
> I don't want them to be able to take the card out and use a reader on
> the computer.  I don't mind if they connect the USB cable and use mass
> storage mode - as long as any and all files on the card are encrypted.
>
>
>
> Is there a way?
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> This e-mail, including any attached files, may contain confidential and
> privileged information for the sole use of the intended recipient.  Any
> review, use, distribution, or disclosure by others is strictly prohibited.
> If you are not the intended recipient (or authorized to receive information
> for the intended recipient), please contact the sender by reply e-mail and
> delete all copies of this message.
>
> ~ Finally, powerful endpoint security that ISN'T a resource hog! ~
> ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

-- 
Sent from my mobile device

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

RE: Another Blackberry Question

[Malcolm Reitz]

Just out of curiosity, what issue are you trying to resolve with card
encryption?

 

Malcolm 

From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, 12 November, 2008 15:55
To: NT System Admin Issues
Subject: Re: Another Blackberry Question

 

That's the conclusion I'm coming to.  

 

Although that doesn't still prevent taking the card out and putting
files on it directly.  That one I can address via policy and
enforcement.

On Wed, Nov 12, 2008 at 4:43 PM, Barsodi.John <[EMAIL PROTECTED]>
wrote:

If I recall correctly, you have to disable mass  storage on the device
after enabling encryption.  Then use the Desktop Manager to transfer
files after unlocking the device.

 

- John Barsodi

From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 12:55 PM 


To: NT System Admin Issues
Subject: Re: Another Blackberry Question

 

Yes, but you can use mass storage mode to put files on the card
unencrypted.  You can also put the card in a reader directly in a
computer and put files on there unencrypted.  It seems to be a limit of
the file based encryption rather than drive encryption.

 

At least that is what my current reading from BB is telling me.   I may
be wrong as we are just cutting our teeth with BB.

On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro
<[EMAIL PROTECTED]> wrote:

options>media card>encryption mode:

I use the "device + security password" setting and "encrypt media files"

this will encrypt all future files you save on the SD card.

If you put the card in a computer, when you open it, the files will be
encrypted, and unreadable.

I think for example, picture.jpg will show up picture.jpg.rem

 

 

 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 2:43 PM
To: NT System Admin Issues
Subject: Another Blackberry Question

I've been googling and browsing the BB site and forums, but seem to be
getting conflicting information.

 

Is there a way to force any SD card to be fully encrypted?  In other
words, I want the card to only be readable while in the assigned device.
I don't want them to be able to take the card out and use a reader on
the computer.  I don't mind if they connect the USB cable and use mass
storage mode - as long as any and all files on the card are encrypted.

 

Is there a way?

 

 

 

 

 

 

 

 

 

 

 

 

 

 

This e-mail, including any attached files, may contain confidential and 
privileged information for the sole use of the intended recipient.  Any review, 
use, distribution, or disclosure by others is strictly prohibited.  If you are 
not the intended recipient (or authorized to receive information for the 
intended recipient), please contact the sender by reply e-mail and delete all 
copies of this message.

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: Another Blackberry Question

[Kevin Lundy]

That's the conclusion I'm coming to.

Although that doesn't still prevent taking the card out and putting files on
it directly.  That one I can address via policy and enforcement.

On Wed, Nov 12, 2008 at 4:43 PM, Barsodi.John <[EMAIL PROTECTED]> wrote:

>  If I recall correctly, you have to disable mass  storage on the device
> after enabling encryption.  Then use the Desktop Manager to transfer files
> after unlocking the device.
>
>
>
> - John Barsodi
>
> *From:* Kevin Lundy [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, November 12, 2008 12:55 PM
> *To:* NT System Admin Issues
> *Subject:* Re: Another Blackberry Question
>
>
>
> Yes, but you can use mass storage mode to put files on the card
> unencrypted.  You can also put the card in a reader directly in a computer
> and put files on there unencrypted.  It seems to be a limit of the file
> based encryption rather than drive encryption.
>
>
>
> At least that is what my current reading from BB is telling me.   I may be
> wrong as we are just cutting our teeth with BB.
>
> On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro <
> [EMAIL PROTECTED]> wrote:
>
> options>media card>encryption mode:
>
> I use the "device + security password" setting and "encrypt media files"
>
> this will encrypt all future files you save on the SD card.
>
> If you put the card in a computer, when you open it, the files will be
> encrypted, and unreadable.
>
> I think for example, picture.jpg will show up picture.jpg.rem
>
>
>
>
>
>
>  --
>
> *From:* Kevin Lundy [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, November 12, 2008 2:43 PM
> *To:* NT System Admin Issues
> *Subject:* Another Blackberry Question
>
> I've been googling and browsing the BB site and forums, but seem to be
> getting conflicting information.
>
>
>
> Is there a way to force any SD card to be fully encrypted?  In other words,
> I want the card to only be readable while in the assigned device.  I don't
> want them to be able to take the card out and use a reader on the computer.
> I don't mind if they connect the USB cable and use mass storage mode - as
> long as any and all files on the card are encrypted.
>
>
>
> Is there a way?
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

RE: Another Blackberry Question

[Barsodi.John]

If I recall correctly, you have to disable mass  storage on the device
after enabling encryption.  Then use the Desktop Manager to transfer
files after unlocking the device.

 

- John Barsodi

From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 12:55 PM
To: NT System Admin Issues
Subject: Re: Another Blackberry Question

 

Yes, but you can use mass storage mode to put files on the card
unencrypted.  You can also put the card in a reader directly in a
computer and put files on there unencrypted.  It seems to be a limit of
the file based encryption rather than drive encryption.

 

At least that is what my current reading from BB is telling me.   I may
be wrong as we are just cutting our teeth with BB.

On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro
<[EMAIL PROTECTED]> wrote:

options>media card>encryption mode:

I use the "device + security password" setting and "encrypt media files"

this will encrypt all future files you save on the SD card.

If you put the card in a computer, when you open it, the files will be
encrypted, and unreadable.

I think for example, picture.jpg will show up picture.jpg.rem

 

 

 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 2:43 PM
To: NT System Admin Issues
Subject: Another Blackberry Question

I've been googling and browsing the BB site and forums, but seem to be
getting conflicting information.

 

Is there a way to force any SD card to be fully encrypted?  In other
words, I want the card to only be readable while in the assigned device.
I don't want them to be able to take the card out and use a reader on
the computer.  I don't mind if they connect the USB cable and use mass
storage mode - as long as any and all files on the card are encrypted.

 

Is there a way?

 

 

 

 

 

 

 

 

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

RE: Another Blackberry Question

[David Mazzaccaro]

It seems like the best solution would be to remove the SD and force the
user to use the device's internal memory.
This would be encrypted and only accessible on the BB.
 



From: David Mazzaccaro [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 4:23 PM
To: NT System Admin Issues
Subject: RE: Another Blackberry Question


Ah, I see what you mean.
If you were able to format the SD card so ONLY the BB can use it - maybe
that would solve the problem?
But I don't believe you can do this.
 
 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 3:55 PM
To: NT System Admin Issues
Subject: Re: Another Blackberry Question


Yes, but you can use mass storage mode to put files on the card
unencrypted.  You can also put the card in a reader directly in a
computer and put files on there unencrypted.  It seems to be a limit of
the file based encryption rather than drive encryption.
 
At least that is what my current reading from BB is telling me.   I may
be wrong as we are just cutting our teeth with BB.


On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro
<[EMAIL PROTECTED]> wrote:


options>media card>encryption mode:
I use the "device + security password" setting and "encrypt
media files"
this will encrypt all future files you save on the SD card.
If you put the card in a computer, when you open it, the files
will be encrypted, and unreadable.
I think for example, picture.jpg will show up picture.jpg.rem
 
 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 2:43 PM
To: NT System Admin Issues
Subject: Another Blackberry Question


I've been googling and browsing the BB site and forums, but seem
to be getting conflicting information.
 
Is there a way to force any SD card to be fully encrypted?  In
other words, I want the card to only be readable while in the assigned
device.  I don't want them to be able to take the card out and use a
reader on the computer.  I don't mind if they connect the USB cable and
use mass storage mode - as long as any and all files on the card are
encrypted.
 
Is there a way?

 


 




 


 










 

 


 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Re: Another Blackberry Question

[Kevin Lundy]

Yes, but you can use mass storage mode to put files on the card
unencrypted.  You can also put the card in a reader directly in a computer
and put files on there unencrypted.  It seems to be a limit of the file
based encryption rather than drive encryption.

At least that is what my current reading from BB is telling me.   I may be
wrong as we are just cutting our teeth with BB.

On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro <
[EMAIL PROTECTED]> wrote:

>  options>media card>encryption mode:
> I use the "device + security password" setting and "encrypt media files"
> this will encrypt all future files you save on the SD card.
> If you put the card in a computer, when you open it, the files will be
> encrypted, and unreadable.
> I think for example, picture.jpg will show up picture.jpg.rem
>
>
>
>  --
> *From:* Kevin Lundy [mailto:[EMAIL PROTECTED]
> *Sent:* Wednesday, November 12, 2008 2:43 PM
> *To:* NT System Admin Issues
> *Subject:* Another Blackberry Question
>
>  I've been googling and browsing the BB site and forums, but seem to be
> getting conflicting information.
>
> Is there a way to force any SD card to be fully encrypted?  In other words,
> I want the card to only be readable while in the assigned device.  I don't
> want them to be able to take the card out and use a reader on the computer.
> I don't mind if they connect the USB cable and use mass storage mode - as
> long as any and all files on the card are encrypted.
>
> Is there a way?
>
>
>
>
>
>
>
>
>
>
>

~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~

RE: Another Blackberry Question

[David Mazzaccaro]

Ah, I see what you mean.
If you were able to format the SD card so ONLY the BB can use it - maybe
that would solve the problem?
But I don't believe you can do this.
 
 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 3:55 PM
To: NT System Admin Issues
Subject: Re: Another Blackberry Question


Yes, but you can use mass storage mode to put files on the card
unencrypted.  You can also put the card in a reader directly in a
computer and put files on there unencrypted.  It seems to be a limit of
the file based encryption rather than drive encryption.
 
At least that is what my current reading from BB is telling me.   I may
be wrong as we are just cutting our teeth with BB.


On Wed, Nov 12, 2008 at 3:47 PM, David Mazzaccaro
<[EMAIL PROTECTED]> wrote:


options>media card>encryption mode:
I use the "device + security password" setting and "encrypt
media files"
this will encrypt all future files you save on the SD card.
If you put the card in a computer, when you open it, the files
will be encrypted, and unreadable.
I think for example, picture.jpg will show up picture.jpg.rem
 
 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 2:43 PM
To: NT System Admin Issues
Subject: Another Blackberry Question


I've been googling and browsing the BB site and forums, but seem
to be getting conflicting information.
 
Is there a way to force any SD card to be fully encrypted?  In
other words, I want the card to only be readable while in the assigned
device.  I don't want them to be able to take the card out and use a
reader on the computer.  I don't mind if they connect the USB cable and
use mass storage mode - as long as any and all files on the card are
encrypted.
 
Is there a way?

 


 




 


 










 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

RE: Another Blackberry Question

[David Mazzaccaro]

options>media card>encryption mode:
I use the "device + security password" setting and "encrypt media files"
this will encrypt all future files you save on the SD card.
If you put the card in a computer, when you open it, the files will be
encrypted, and unreadable.
I think for example, picture.jpg will show up picture.jpg.rem
 
 



From: Kevin Lundy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, November 12, 2008 2:43 PM
To: NT System Admin Issues
Subject: Another Blackberry Question


I've been googling and browsing the BB site and forums, but seem to be
getting conflicting information.
 
Is there a way to force any SD card to be fully encrypted?  In other
words, I want the card to only be readable while in the assigned device.
I don't want them to be able to take the card out and use a reader on
the computer.  I don't mind if they connect the USB cable and use mass
storage mode - as long as any and all files on the card are encrypted.
 
Is there a way?

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~   ~