Skip Navigation

BlackBerry Dynamics SDK for iOS
 version 5.0

What's new in 
BlackBerry Dynamics SDK for iOS
 version 5.0

Feature
Description
Changes to software requirements
  • This release adds support for 
    Xcode
     10. 
    Xcode
     versions earlier than 9 are not supported. 
    Xcode
     10 does not support docset archives for reference documentation. As a result, the 
    BlackBerry Dynamics SDK for iOS
     does not include a docset archive.
  • This release adds support for 
    Swift
     4.2.
Password autofill changes
In the 
BlackBerry Dynamics SDK for iOS
 4.2, the password autofill feature could not be used to unlock 
BlackBerry Dynamics
 apps. In this release, the 
BlackBerry Dynamics SDK
 disables the password autofill feature in all other scenarios as well.
Anti-debugging protection
This release of the 
BlackBerry Dynamics SDK for iOS
 introduces a compliance enhancement to protect against malicious attempts to add a debugger to deployed 
BlackBerry Dynamics
 apps. Compliance profiles in 
UEM
 and compliance policies in 
Good Control
 provide the ability to detect when a device OS is jailbroken and to initiate an enforcement action. This feature now extends to deployed 
BlackBerry Dynamics
 apps, compiled with SDK version 5.0, where an active debugging tool is detected. If the detect jailbroken OS compliance setting is enabled, the 
BlackBerry Dynamics Runtime
 stops a 
BlackBerry Dynamics
 app if it detects an active debugging tool. 
Please note that if you want to debug one of your 
BlackBerry Dynamics
 apps in an environment where a compliance profile or compliance policy is applied, the compliance setting to detect jailbroken devices must be disabled.
The setting to detect jailbroken devices is disabled by default in 
UEM
 compliance profiles and enabled by default in standalone 
Good Control
 compliance policies. It is recommended that you test your custom 
BlackBerry Dynamics
 apps in an environment with the detect jailbroken devices setting enabled before you distribute the app in the production environment, to ensure that the app works as expected while this setting is enabled.
Logging changes for enhanced security
This release of the 
BlackBerry Dynamics SDK for iOS
 includes logging changes for enhanced security. You can configure how your 
BlackBerry Dynamics
 apps generate console log information. For more information about console logs controlled by developers and container logs controlled by 
UEM
 or 
Good Control
 administrators, see BlackBerry Dynamics Runtime activity log.
If your app uses SDK version 5.0, and the administrator has turned off “Enable detailed logging for BlackBerry Dynamics apps” in the 
BlackBerry Dynamics
 profile (
UEM
) or security policy (
Good Control
), the app does not generate console log information. This provides additional protection against attacks by malicious users. This change has no impact on how container logs are generated.
The “Enable detailed logging for BlackBerry Dynamics apps” setting is off by default.
For 
BlackBerry Dynamics
 apps running SDK version 5.0 or later, console logs are generated only if this setting is turned on or if the app is running in enterprise simulation mode.
SCEP support for 
BlackBerry Dynamics
 apps
The 
BlackBerry UEM
 version 12.10 release adds support for certificate enrollment using SCEP with 
Entrust
 and 
Microsoft
 NDES for 
BlackBerry Dynamics
 apps. 
UEM
 administrators can configure and assign a SCEP profile for 
BlackBerry Dynamics
 apps in the 
UEM
 management console.
For more information, see “SCEP profile settings” in the UEM Administration Guide
Changes to GDPushChannel
This release adds a new GDPushChannel constructor to improve infrastructure performance. The previous GDPushChannel constructor will be deprecated in the next release. For more information, see the GDPushChannel Class Reference.

BlackBerry Dynamics Launcher Library

This release uses 
BlackBerry Dynamics Launcher Library
 version 2.9.0.218.

Fixed issues

The following issues are fixed in this release:
  • After upgrading a 
    BlackBerry Dynamics
     app to the most recent version of the SDK, the app crashed and the user was prompted for an unlock key. This issue is fixed in the 
    BlackBerry Dynamics SDK for iOS
     version 5.0.0.78 (FIRST-16248)
  • BlackBerry Dynamics
     app was not able to fetch a client certificate from another  
    BlackBerry Dynamics
     app and instead started self-enrollment which resulted in certificate import error being displayed.  This issue is fixed in the  
    BlackBerry Dynamics SDK for iOS
     version 5.0.0.78 (FIRST-16224)
  • Anti-debugging protection was triggered by a certain third-party library which exhibited traits of debugger, therefore resulting in anti-debug jailbreak action being triggered. This could have resulted in lost data if the Jailbreak/Rooted Detection compliance failure action was set to “Wipe Data”.  This issue is fixed in the  
    BlackBerry Dynamics SDK for iOS
     version 5.0.0.78 (FIRST-16343)

Known issues

  • If a 
    BlackBerry Dynamics
     app uses app-based client certificates from the 
    BlackBerry UEM Client
    , and a user tries to open and activate the app before the 
    UEM Client
     has been provisioned for 
    BlackBerry Dynamics
    , the 
    UEM Client
     becomes locked. (GD-39573)
    Workaround:
     Provision the certificate provider app (
    BlackBerry UEM Client
     or 
    Entrust
     Smart Card credentials) before you provision 
    BlackBerry Dynamics
     apps that use app-based client certificates.
  • If the 
    UEM
     administrator configures and assigns a SCEP profile to devices with 
    BlackBerry Dynamics
     apps, 
    BlackBerry Dynamics
     apps cannot enroll the certificate if the CA instance name specified in the profile includes a space or a character that is not alpha-numeric [0-9a-zA-Z] or $-_.+!*'(), for example, non-ASCII, URL-reserved, or unsafe URL characters. (GD-39207)
    Workaround:
     Use a CA instance name that follows the noted restrictions.
  • If the 
    UEM
     administrator enables FIPS in a 
    BlackBerry Dynamics
     profile and assigns it to a user account, 
    BlackBerry Dynamics
     apps on the user's device cannot verify an MD5 certificate thumbprint. (GD-38397)
    Workaround:
     Turn off FIPS in the 
    BlackBerry Dynamics
     profile or use SHA1, SHA224, SHA256, SHA384, or SHA512 instead.
  • When a user first installs and opens a 
    BlackBerry Dynamics
     app, the app attempts to get shared certificates from another 
    BlackBerry Dynamics
     app on the device. To obtain the shared certificates from another app, the user must log into that app. If the user clicks Forgot Password at this point, then unlocks that app using a key from 
    UEM
     or standalone 
    Good Control
    , the process to share the certificate and log into the new 
    BlackBerry Dynamics
     app does not complete successfully. (GD-37931)
    Workaround:
     Close the new 
    BlackBerry Dynamics
     app, manually open and log in to another 
    BlackBerry Dynamics
     app that uses the shared certificates, then open and log into the new 
    BlackBerry Dynamics
     app.
  • If the 
    UEM
     administrator assigns a user credential profile that uses 
    Entrust
    , and another user credential profile that uses PKI, when activating 
    BlackBerry Dynamics
     using an authentication delegate, the user is prompted to enroll the PKI certificate multiple times. (GD-35783)