BlackBerry Dynamics SDK for iOS version 5.0
BlackBerry Dynamics SDK for iOS
version 5.0What's new in BlackBerry Dynamics SDK for iOS version 5.0
BlackBerry Dynamics SDK for iOS
version 5.0Feature | Description |
---|---|
Changes to software requirements |
|
Password autofill changes | In the BlackBerry Dynamics SDK for iOS 4.2, the password autofill feature could not be used to unlock BlackBerry
Dynamics apps. In this release, the BlackBerry Dynamics SDK disables the password autofill feature in all other scenarios as well. |
Anti-debugging protection | This release of the BlackBerry Dynamics SDK for iOS introduces a compliance enhancement to protect against malicious attempts to add a debugger to deployed BlackBerry
Dynamics apps. Compliance profiles in UEM and compliance policies in Good Control provide the ability to detect when a device OS is jailbroken and to initiate an enforcement action. This feature now extends to deployed BlackBerry
Dynamics apps, compiled with SDK version 5.0, where an active debugging tool is detected. If the detect jailbroken OS compliance setting is enabled, the BlackBerry Dynamics Runtime stops a BlackBerry
Dynamics app if it detects an active debugging tool. Please note that if you want to debug one of your BlackBerry
Dynamics apps in an environment where a compliance profile or compliance policy is applied, the compliance setting to detect jailbroken devices must be disabled.The setting to detect jailbroken devices is disabled by default in UEM compliance profiles and enabled by default in standalone Good Control compliance policies. It is recommended that you test your custom BlackBerry
Dynamics apps in an environment with the detect jailbroken devices setting enabled before you distribute the app in the production environment, to ensure that the app works as expected while this setting is enabled. |
Logging changes for enhanced security | This release of the BlackBerry Dynamics SDK for iOS includes logging changes for enhanced security. You can configure how your BlackBerry
Dynamics apps generate console log information. For more information about console logs controlled by developers and container logs controlled by UEM or Good Control administrators, see BlackBerry Dynamics Runtime activity log.If your app uses SDK version 5.0, and the administrator has turned off “Enable detailed logging for BlackBerry Dynamics apps” in the BlackBerry
Dynamics profile (UEM ) or security policy (Good Control ), the app does not generate console log information. This provides additional protection against attacks by malicious users. This change has no impact on how container logs are generated.The “Enable detailed logging for BlackBerry Dynamics apps” setting is off by default. For BlackBerry
Dynamics apps running SDK version 5.0 or later, console logs are generated only if this setting is turned on or if the app is running in enterprise simulation mode. |
SCEP support for BlackBerry
Dynamics apps | The BlackBerry UEM version 12.10 release adds support for certificate enrollment using SCEP with Entrust and Microsoft NDES for BlackBerry
Dynamics apps. UEM administrators can configure and assign a SCEP profile for BlackBerry
Dynamics apps in the UEM management console.For more information, see “SCEP profile settings” in the UEM Administration Guide. |
Changes to GDPushChannel | This release adds a new GDPushChannel constructor to improve infrastructure performance. The previous GDPushChannel constructor will be deprecated in the next release. For more information, see the GDPushChannel Class Reference. |
BlackBerry Dynamics Launcher Library
BlackBerry Dynamics Launcher Library
This release uses
BlackBerry Dynamics Launcher Library
version 2.9.0.218.Fixed issues
The following issues are fixed in this release:
- After upgrading aBlackBerry Dynamicsapp to the most recent version of the SDK, the app crashed and the user was prompted for an unlock key. This issue is fixed in theBlackBerry Dynamics SDK for iOSversion 5.0.0.78 (FIRST-16248)
- ABlackBerry Dynamicsapp was not able to fetch a client certificate from anotherBlackBerry Dynamicsapp and instead started self-enrollment which resulted in certificate import error being displayed. This issue is fixed in theBlackBerry Dynamics SDK for iOSversion 5.0.0.78 (FIRST-16224)
- Anti-debugging protection was triggered by a certain third-party library which exhibited traits of debugger, therefore resulting in anti-debug jailbreak action being triggered. This could have resulted in lost data if the Jailbreak/Rooted Detection compliance failure action was set to “Wipe Data”. This issue is fixed in theBlackBerry Dynamics SDK for iOSversion 5.0.0.78 (FIRST-16343)
Known issues
- If aBlackBerry Dynamicsapp uses app-based client certificates from theBlackBerry UEM Client, and a user tries to open and activate the app before theUEM Clienthas been provisioned forBlackBerry Dynamics, theUEM Clientbecomes locked. (GD-39573)Workaround:Provision the certificate provider app (BlackBerry UEM ClientorEntrustSmart Card credentials) before you provisionBlackBerry Dynamicsapps that use app-based client certificates.
- If theUEMadministrator configures and assigns a SCEP profile to devices withBlackBerry Dynamicsapps,BlackBerry Dynamicsapps cannot enroll the certificate if the CA instance name specified in the profile includes a space or a character that is not alpha-numeric [0-9a-zA-Z] or $-_.+!*'(), for example, non-ASCII, URL-reserved, or unsafe URL characters. (GD-39207)Workaround:Use a CA instance name that follows the noted restrictions.
- If theUEMadministrator enables FIPS in aBlackBerry Dynamicsprofile and assigns it to a user account,BlackBerry Dynamicsapps on the user's device cannot verify an MD5 certificate thumbprint. (GD-38397)Workaround:Turn off FIPS in theBlackBerry Dynamicsprofile or use SHA1, SHA224, SHA256, SHA384, or SHA512 instead.
- When a user first installs and opens aBlackBerry Dynamicsapp, the app attempts to get shared certificates from anotherBlackBerry Dynamicsapp on the device. To obtain the shared certificates from another app, the user must log into that app. If the user clicks Forgot Password at this point, then unlocks that app using a key fromUEMor standaloneGood Control, the process to share the certificate and log into the newBlackBerry Dynamicsapp does not complete successfully. (GD-37931)Workaround:Close the newBlackBerry Dynamicsapp, manually open and log in to anotherBlackBerry Dynamicsapp that uses the shared certificates, then open and log into the newBlackBerry Dynamicsapp.
- If theUEMadministrator assigns a user credential profile that usesEntrust, and another user credential profile that uses PKI, when activatingBlackBerry Dynamicsusing an authentication delegate, the user is prompted to enroll the PKI certificate multiple times. (GD-35783)