BlackBerryV3.0

The Swivel Blackberry 3.0 App Overview

Swivel Secure offers an updated Blackberry client for use with the Swivel platform. This article explains how to download, configure and use this client.

Requirements

Swivel 3.10 or higher

Blackberry Device with BlackBerry OS 10 +

The Swivel virtual or hardware appliance must be reachable from the mobile phone to receive security codes

The index is required to be entered as nn on the end example: 292401, Swivel versions earlier than 3.10 require ,nn example: 2924,01 otherwise it will see it as a dual channel authentication.

Valid certificate on the Swivel server or non SSL, but not a self signed certificate

Versions

version 3.0.0

QR Code Provision

Push Authentication Support

Intuitive interface

Slide-out side menu

Information Section

Support of three languages English, Spanish and Russian

Which version do I need?

• Swivel Mobile Client version 3.0, Core version 3.10 or later, BlackBerry OS 10 or newer.

Mobile Provisioning

Swivel 3.8 and higher requires each mobile phone to be provisioned so it can be uniquely identified. Ensure that all Mobile Client users have suitable Transports configured to receive their Provision Code. To provision the mobile client select the user and click Re-provision. Earlier versions of Swivel do not need to use a Mobile Provision Code. [[HowToProvisionMobileClients|See How To Provision Mobile Client].

Mobile Client Policies

For the Server based policies see Mobile Client Policies 2.0 for previous versions see Mobile Client Policies

Phone Installation and Configuration

The Swivel BlackBerry Client 3.0.0 is available from the Blackberry World. You can click on the link below to open the App within BlackBerry World.

Download compatible with Swivel 3.10 onwards

here

Downloading the App via SMC

Currently Not Available

Getting Started

When you first open the Application you will be taken to a "Not Provisioned" screen with two buttons "QR Code" and "Manual Configuration".

The application straight away gives options to the user of how to provision. Manually or via QR Code.

QR Code will launch a camera and you will be able to scan the QR Code

If the user clicks on the Manual Configuration they are taken to the Manual Configuration Screen

To open the side menu the user can swipe from the left to the right to open the side menu (or click on the menu button at the top left corner of the screen). At the side menu you can see different options, if you click on the Info button, information will guide you through the mobile client provisioning options.

Server Settings

The settings can be manually entered with information from the Swivel System administrator.

The settings are

Server: The URL from where the client can download security codes(or keys)

Context: The application used by the web service. For a virtual or hardware appliance this is proxy, for a software install this is usually pinsafe

Port: The port number used by the web service. For an virtual or hardware appliance this is 8443, for a software only install see Software Only Installation

SSL: To use HTTPS or HTTP connection

You can click the Submit button, and the application will try and access the given settings.

If the settings are correct, the Server panel will be greyed out.

If you don't want to enter the setting manually, you are able to get thr server settings and provision the device automatically via QR Code or Quick Provision URL

Provision the Device

Before you can use the Swivel Mobile Client you need to go through the provision process.

To provision the mobile client on the Swivel Administration Console select User Management, locate the required user, click on the user to reveal the management functions and click Quick Provision.

The user will be sent a Provision URL and a QR code.

There are three ways to be authorized:

1) You can provision the device via URL. Please read more on Provision URL page.

2) You can provision the device via QR code. Please read more on QR Code page.

3) Alternatively you can provision manually by entering your provision code and username into Manual Configuration page.

Please remember that you can only provision one device, and only once with the same URL, QR Code or Provision Code (For the manual provision)

Update Security Codes

At the bottom of the side menu, you will find an Update Codes button, pressing this will get you a new set of 99 security codes. This will attempt to retrieve Security codes from the Swivel server.

If the update was successful you will be prompted to enter the PIN (if PIN less you will see the OTC page)

If there are any problems an error message will be displayed

For more information on troubleshooting and error messages click here.

You can confirm that keys have been downloaded by checking the server logs The Swivel server will display the following log message Security codes fetched for user: username

Downloading keys requires network connectivity so it is recommended that you download a new set of keys before the device is likely to be without network connectivity for any length of time.

Options

The following options are available:

Auto extract OTC, Prompt for PIN Number to auto-extract OTC, Options, enable/disable. This option may be turned off on the Swivel server. When enabled this allows the user to enter their PIN number and a One Time Code will be displayed. Note that there is no error checking of the PIN, so if an incorrect PIN is entered an incorrect One Time Code will be displayed.

Allow String Browsing, This is a Swivel server controlled option, which if enabled will allow the user to browse through security codes on the mobile app (to be able to see previous codes).

Provision is numeric, allows the keyboard type to be either alpha numeric of numeric depending on the users provision code type.

Set Support Email Address. Set Support Phone Number.

Other Options

If on the Core Policy there is a support e-mail and phone number, the user will be able to use them options on their Swivel Mobile Client.

The user will be able to open the side menu, and click on "Direct Call" or "Email" which will allow them to call the provided phone number or e-mail to the provided e-mail address

Additionally if the user finds any step of the provision unclear, they can click on the Info page which explains in more detail three different options to provision the device

If you have Sync-Index Policy on, or you have a green or red sync index icon at the top left of the application, please read more about Sync here

Authenticating with an app (PIN Policy On)

To use the Swivel Mobile Client BlackBerry app to authenticate is very simple.

Open the app on your BlackBerry (if application is already opened, navigate to Security Code from the side menu).

Depending on your policy settings you will either be prompted for a PIN or immediately shown a One-Time-Code (OTC).

If you are asked for a PIN, enter the PIN number previously sent during the enrolment phase and click Submit (if you have made a mistake in the PIN, you can click Clear to clear the Pin Field).

Enter the OTC into the authentication dialogue, make sure you enter all the characters.

If you need to authenticate again you can select the 'Next Code' button and a new string will be displayed (you may have to enter your PIN again).

Authenticating with an app (PIN Policy Off)

To use the Swivel Mobile Client BlackBerry app to authenticate is very simple.

Open the app on your BlackBerry (if application is already opened, navigate to Security Code from the side menu).

The client will show a security string with a row of placeholders 1234567890 below it.

Use your PIN to extract your One-Time-Code (OTC), eg if your PIN is 2468 take the 2nd 4th 6th and 8th characters of the security string.

After the OTC has been worked out, you will also need to ensure you type in the last two characters shown (the index).

If you need to authenticate again you can select the 'Next Code' button and a new string will be displayed.

Push Notification

To authenticate with the push notification, firstly the device has to be provisioned via URL or QR Code (Push notification will not work if your device is provisioned manually

After you are sent a push notification your device will show it in the application (if it is currently open) and prompt you to click Yes or No.

If the application is closed and you receive a push notification, the user will be shown a notification in the BlackBerry Hub of the users Blackberry device. The user can click on the notification and the application will launch automatically and open the Push Notification Page

Troubleshooting

• Is the Swivel server accessible on the internet
• Check the connection settings to the Swivel server
• Check the Swivel logs for any error messages
• Can the mobile device access the internet
• If a RADIUS connection is seen from the access device to the Swivel server but authentication fails, try using PAP
• Update security codes to the phone and retest
• Is the pin 6 characters when you only entered a 4 digit pin? If yes then enter all of the numbers you see on screen (the extra 2 are used as an index).
• Login fails and User receives a security string or One Time Code by SMS or email at each login attempt. Again make sure you are entering all of the numbers shown on screen.
• If the proxy port (8443) on the virtual or hardware appliance is being used, ensure that it supports the proxy request of the key retrieval using AgentXML. If this is the case then contact Support for an updated version of the Proxy.

Known Issues

Currently Pin Pad can look unresponsive compared to other devices, which will be fixed in the next release

Error Messages

Incorrect settings - please check your settings
The settings for downloading the security codes are incorrect. Verify what has been entered, and check what the values should be.

Timed Out
The settings for connecting to the Swivel server may be incorrect or the port is being blocked.

Not a valid command
This error message can be displayed when a mobile client app is attempted to be activated but uses an older version of the app. Remove previous versions of the app.

Cannot Open Page Safari cannot open the page because the address is invalid
The link to the provisioning is incorrect or will not open in Safari.

Error Server Connection
The mobile client can't reach the Swivel core when downloading security codes or provisioning. Check that the mobile device is connected to the internet and that the core can be reached via mobile devices browser.

Cannot Open Page
This error can appear when you try to use a quick provision URL. This error usually means that you don't have a valid Swivel Mobile client installed on your device

Error Server, Unknown Server ID
This error can appear when you try to provision with a Quick Provision URL or QR Code. This error usually means that when the Swivel Mobile client tries to download Server Settings from the SSD server, it cannot find the Server ID (Site ID). Please check that you have a valid Site ID set on your Swivel core.