BlackBerry Dynamics SDK for Android version 6.0
BlackBerry Dynamics SDK for Android
version 6.0What's new in the BlackBerry Dynamics SDK for Android version 6.0
BlackBerry Dynamics SDK for Android
version 6.0Required SDK changes
Feature | Description |
---|---|
Changes to the Automated Test Support Library (ATSL) | The BlackBerry
Dynamics ATSL is now delivered as binaries (a Java library (.jar) and an Android library (.aar)), with the sources available on GitHub . For more information, see the Testing and Troubleshooting section of the BlackBerry Dynamics SDK for Android Development Guide. |
General SDK changes
Feature | Description |
---|---|
SDK delivered in .aar format | The SDK is delivered in .aar format in addition to .jar format. |
Support for x86_64 CPU architecture | The x86_64 CPU architecture is now supported in addition to ARMv7, ARMv8, and x86. |
Changes to GDNetworkInfo class | Going forward, BlackBerry
Dynamics apps should register a receiver class to obtain accurate network information and status. For more information, see GDNetworkInfo in the API Reference.If the app calls GDConnectivityManager().getActiveNetworkInfo directly, it may get incorrect results. |
Changes to cipher support | Support for the following ciphers has been removed as they do not meet the security standards of the SDK:
The next release of the BlackBerry Dynamics SDK will remove support for additional weak ciphers, including the following:
|
Programmatic activation | The programmatic activation feature enables a BlackBerry
Dynamics app to activate without any user interaction and without displaying activation prompts or progress screens. This can be useful when targeting your apps to a consumer audience or for developing apps for devices that have limited or no means of user input.This release features a new implementation of this feature. For more information, see programmaticActivityInit in the BlackBerry Dynamics SDK API Reference.Note that as a result of this new implementation, the following APIs have been deprecated:
|
Android biometric authentication prompt | This release supports the new Android prompt that allows a user to select their preferred method of biometric authentication. Since the BlackBerry Dynamics SDK currently supports fingerprint authentication only, if a user selects another biometric authentication method such as face or iris, the BlackBerry
Dynamics app prompts the user to use a supported method such as fingerprint or password instead. |
New APIs
Feature | Description |
---|---|
Crypto C programming interface | This release adds a new Crypto C language programming interface that allows an app to retrieve public key certificates that are stored in the BlackBerry
Dynamics credentials store and use those certificates for signing and verification of messages and documents such as PDFs. Note that BlackBerry Infrastructure certificates cannot be retrieved from the store and that the private key will remain inaccessible. A new sample app demonstrates the use of this interface.For more information, see the Crypto C Programming Interface appendix in the API reference. |
Locally block or unblock the app UI | This release includes the following new APIs that can be used to locally block or unblock a user’s access to the UI of a BlackBerry
Dynamics app:
These APIs can be used to temporarily prevent access to an app under certain conditions. For example, if the user accesses a public Wi-Fi network that is not trusted, you can use GDAndroid.executeBlock to prevent access to the app until the user is once again on a trusted Wi-Fi network. While the app UI is blocked, the app’s network activity and container storage access is not affected.You can use GDAndroid.executeBlock to display a message to the user that explains why access to the app has been blocked and how the user can restore compliance and unblock the UI. The GDInteraction sample app has been updated to demonstrate the use of these APIs. It is possible to circumvent a UI block if the user is able to restore a backup that was created before the block occurred. Take this condition into account when developing and testing your app. |
New administrative and security features in
BlackBerry UEM
version 12.11Feature | Description |
---|---|
Support for Android keyboard restricted mode | Using a new BlackBerry
Dynamics profile setting in UEM 12.11, “Enable Android keyboard restricted mode”, you can choose to turn off personalized learning for the Android keyboard.Note that this setting applies only to Android keyboards that support turning off personalized learning. For example, this setting does not apply to the default Samsung keyboard. |
Changes to the BlackBerry
Dynamics connectivity profile | In the BlackBerry
Dynamics connectivity profile in UEM 12.11, the Route all traffic option has been replaced with a new Default route option. The new Default route option allows for more detailed control over how BlackBerry
Dynamics apps that use SDK version 6.0 or later can connect to app servers.Note the following:
|
Using Entrust for BlackBerry
Dynamics apps | In BlackBerry UEM 12.11, you can now use an Entrust PKI connection to enroll certificates for BlackBerry
Dynamics apps using the user credential profile. |
BlackBerry Dynamics Launcher Library
BlackBerry Dynamics Launcher Library
This release uses
BlackBerry Dynamics Launcher Library
version 2.10.115.Fixed issues
The following issues are fixed in this release:
- Performance improvements have been made to the GDHttpClient API. (FIRST-16581)
- A duplicate tracking ID in a protocol message could cause an app to hang during the authentication process, displaying a "System is not ready yet" error message. (FIRST-16256)
- If a user tried to activate aBlackBerry Dynamicsapp that was designated as the primary authentication delegate by using the secondary authentication delegate app, and the secondary delegate was locked, the activation prompt became stuck in a loop. (FIRST-15509)
- If aBlackBerry Dynamicsapp used app-based client certificates, and a user tried to open and activate the app before the certificate provider (theBlackBerry UEM ClientorEntrustSmart Card credentials) had been provisioned forBlackBerry Dynamics, theUEM Clientbecame locked.A descriptive error message has been added to clarify how to resolve this scenario. (GD-39573)
- If theUEMadministrator configured and assigned a SCEP profile to devices withBlackBerry Dynamicsapps,BlackBerry Dynamicsapps could not enroll the certificate if the CA instance name specified in the profile included a space or a character that was not alpha-numeric [0-9a-zA-Z] or $-_.+!*'(), for example, non-ASCII, URL-reserved, or unsafe URL characters. (GD-39207)
- If aBlackBerry Dynamicsapp imported the same certificate from another user credential profile, the app stopped responding. This issue occurred only onAndroiddevices that were set to Korean language settings. (GD-38725)
- If a user reactivated aBlackBerry Dynamicsapp that was assigned as the authentication delegate, the user had to enroll the client certificate again. In this release, if a user reactivates an authentication delegate app, the app tries to retrieve the client certificate from otherBlackBerry Dynamicsapps on the device. If no other apps have the certificate, then the user is prompted to enroll the certificate again. (GD-23372)
Known issues
- If a user activates aBlackBerry Dynamicsapp and access to that app later becomes blocked because of a compliance violation (based on the assignedUEMcompliance profile), when the user tries to activate additionalBlackBerry Dynamicsapps, those apps cannot be activated because they cannot retrieve certificates from the blocked app. (GD-41592)Workaround:Resolve the compliance issue with the blocked app, or remove the blocked app and try the activation process again.
- If theUEMadministrator enables FIPS in aBlackBerry Dynamicsprofile and assigns it to a user account,BlackBerry Dynamicsapps on the user's device cannot verify an MD5 certificate thumbprint. (GD-38397)Workaround:Turn off FIPS in theBlackBerry Dynamicsprofile or use SHA1, SHA224, SHA256, SHA384, or SHA512 instead.
- After an administrator assigns a user credential profile, the user imports the required certificates when they install and open aBlackBerry Dynamicsapp. When subsequentBlackBerry Dynamicsapps are installed and opened, the user is prompted to log in to the first app in order to share and use the previously imported certificates. If the user completes the initial certificate import using an app built with theBlackBerry Dynamics SDKversion 5.0 or later, and a subsequent app was built using a previous version of the SDK, the prompt to log in to the initial app will get stuck at a progress spinner and will not proceed. (GD-38337)Workaround:Update all deployedBlackBerry Dynamicsapps to use the latest version of theBlackBerry Dynamics SDK.
- If theUEMadministrator configures and assigns a user credential profile with a native keystore CA connection, on devices with aSamsung KNOXactivation type, certificates may not be pre-selected during the app activation process. This is due to a known issue withSamsung KNOX. (GD-38251)
- After an administrator assigns a user credential profile to a user, the user imports the required certificates when they install and open aBlackBerry Dynamicsapp. When the user installs and opens additionalBlackBerry Dynamicsapps, the user will see a list of certificates with previously imported certificates already selected. If the user selects additional certificates that are not pre-selected, the certificate enrollment will fail. The user can proceed only if they use the pre-selected certificates. (GD-38084)
- If an administrator changes the settings of a SCEP profile or user credential profile based on a native keystore, users are not prompted to enroll the certificates again and only new certificates receive the updated settings. The administrator must delete the profile and create and assign a new one to apply the new settings. (GD-38029, GD-37857)
- If theUEMadministrator assigns a user credential profile that usesEntrust, and another user credential profile that uses PKI, when activatingBlackBerry Dynamicsapps using an authentication delegate, the user is prompted to enroll the PKI certificate multiple times. (GD-35783)
- The “Do not allow Android dictation” option in theBlackBerry Dynamicsprofile inUEMis used to stop dictation from keyboards, however there are certain keyboards that allow dictation through other channels. (GD-35440)Workaround: To help prevent dictation, select the “Enable Android keyboard restricted mode” option in theBlackBerry Dynamicsprofile. This applies only to keyboards that support turning of personalized learning.