BB Messenger vs BES
I believe that the difference is between BB Messenger and Blackberry Enterprise Service.
With BB Messenger, the keys are held by BB so they can decrypt messages.
With BES, the keys are held on the Enterprise server which is in the customer's possession so BB can't decrypt.
Two different services.