By default, KeyStore Injection is denied on a BlackBerry wireless device that is added to a BlackBerry Enterprise Server™. Use Application Control to allow third-party applications to add certificates to the DeviceKeyStore. By locating a ControlledAccessException, the application will continue to function, even if the application control is denying the addition of the certificate. Note: Currently, third-party applications are unable to add certificates to the TrustedKeyStore automatically. The application must first add the certificate to the DeviceKeyStore. Then the user can manually trust the certificate on the device under Options > Security > Certificates. A third-party application can add a certificate to DeviceKeyStore by using the following method