Skip Navigation

Add the 
BlackBerry UEM
 domain as a trusted authority

You must add the SSL certificate of the 
BlackBerry UEM
 domain to the Trusted Root Certification Authorities certificate store on your computer. The 
BlackBerry UEM
 setup application creates a self-signed SSL certificate during installation. The administrator can replace the self-signed certificate at any time with a trusted certificate signed by a CA.
Your app uses the SSL certificate to authenticate with the 
BlackBerry Web Services
 SOAP APIs. You can obtain the certificate from the management console.
Microsoft Visual Studio
 can access the self-signed certificate in the certificate store that 
Internet Explorer
 uses.
  • The following steps can be completed using 
    Internet Explorer
     11. Depending on the version of the browser that you're using, the steps might differ. For information about adding certificates using other browsers or versions, see the help for that browser.
  • In previous releases of 
    BlackBerry UEM
     and 
    BES12
    , the 
    BlackBerry Web Services
     certificate included the domain name in the Common Name. This practice is no longer supported by certain browsers. For 
    BlackBerry UEM
     12.6 MR3 and later, the domain name is now in the SAN of the 
    BlackBerry Web Services
     certificate. If you upgraded to 12.6 MR3 and your organization has apps that use the 
    BlackBerry Web Services
     SOAP APIs, you must add the certificate to the trust store again.
  1. Run 
    Internet Explorer
     as an administrator.
  2. In the address bar, type the URL for the server where the 
    BlackBerry UEM Core
     is installed. The address is 
    https://
    <BlackBerry_UEM_Core_server_name>
    :
    <port>
    /enterprise/admin/util/ws?wsdl
    , where 
    <server_name>
     is the FQDN of the computer that hosts the 
    BlackBerry UEM Core
    . The default port value is 18084. To check the ports that the 
    BlackBerry UEM
     setup application assigned, see the UEM Installation and upgrade content.
  3. Click 
    Continue to the website (not recommended)
    .
  4. On the address bar, click 
    Certificate error
    .
  5. Click 
    View Certificates
    .
  6. Click 
    Certification Path
    .
  7. Click on the root certificate.
  8. Click 
    View Certificate
    .
  9. Click 
    Install Certificate
    .
  10. Click 
    Next
    .
  11. Select 
    Place all certificates in the following store
    . Click 
    Browse
    .
  12. Click 
    Trusted Root Certification Authorities
    . Click 
    OK
    .
  13. Click 
    Next
    .
  14. Click 
    Finish
    .
  15. Click 
    Yes
     to install the certificate.