BlackBerry Web Desktop Manager must be configured to permit users to activate new BlackBerry devices only.

From BlackBerry Enterprise Server (version 5.x), Part 2 Security Technical Implementation Guide

SV-31617r3_rule BlackBerry Web Desktop Manager must be configured to permit users to activate new BlackBerry devices only.

Vulnerability discussion

The overall security posture of the BlackBerry system is dependent on strict configuration management controls, including ensuring only authorized BlackBerry devices are being used and authorized devices are provisioned as required. When this configuration is not set as required, users may have the capability to activate unauthorized BlackBerry devices.

Check content

Verify the BAS has been configured to permit users to activate new BlackBerry devices only. BAS >> Servers and components >> BlackBerry solution topology >> BlackBerry Domain >> Components view >> BlackBerry Administration service Select the "BlackBerry Web Desktop Manager Information" tab. Verify "Allow user wireline activation" has been set to "Activate Unused PINs only". If not set as required, this is a finding.

Fix text

BlackBerry Administration Service is configured to permit users to activate new BlackBerry devices only via BWDM.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.